Nav 2003

User’s Guide
Norton AntiVirus™ User’s Guide

Documentation version 9.0
PN: 10023593
Copyright Notice
Copyright © 2002 Symantec Corporation
All Rights Reserved.
Any technical documentation that is made available by Symantec Corporation is the
copyrighted work of Symantec Corporation and is owned by Symantec Corporation.
NO WARRANTY. The technical documentation is being delivered to you AS-IS and
Symantec Corporation makes no warranty as to its accuracy or use. Any use of the
technical documentation or the information contained therein is at the risk of the user.
Documentation may include technical or other inaccuracies or typographical errors.
Symantec reserves the right to make changes without prior notice.
No part of this publication may be copied without the express written permission of
Symantec Corporation, 20330 Stevens Creek Blvd., Cupertino, CA 95014.
Trademarks
Symantec, the Symantec logo, Norton SystemWorks, LiveUpdate, Norton AntiVirus, and
Norton Utilities are U.S. registered trademarks of Symantec Corporation. Rescue Disk is a
trademark of Symantec Corporation.
Microsoft, MSN, Windows, and the Windows logo are registered trademarks of Microsoft
Corporation. AOL and CompuServe are registered trademarks of America Online, Inc.
Prodigy Internet is a trademark of Prodigy. Pentium is a registered trademark of Intel
Corporation. Yahoo! is a registered trademark of Yahoo! Inc.
Other product names mentioned in this manual may be trademarks or registered
trademarks of their respective companies and are hereby acknowledged.
Printed in the United States of America.
10 9 8 7 6 5 4 3 2 1
SYMANTEC SOFTWARE LICENSE AGREEMENT
IMPORTANT: PLEASE READ THE TERMS AND B. sublicense, rent or lease any portion of the Software;
CONDITIONS OF THIS LICENSE AGREEMENT reverse engineer, decompile, disassemble, modify,
CAREFULLY BEFORE USING THE SOFTWARE. translate, make any attempt to discover the source code of
SYMANTEC CORPORATION AND/OR ITS SUBSIDIARIES the Software, or create derivative works from the Software;
(“SYMANTEC”) IS WILLING TO LICENSE THE SOFTWARE C. use a previous version or copy of the Software after You
TO YOU AS THE INDIVIDUAL, THE COMPANY, OR THE have received a disk replacement set or an upgraded
LEGAL ENTITY THAT WILL BE UTILIZING THE version. Upon upgrading the Software, all copies of the
SOFTWARE (REFERENCED BELOW AS “YOU” OR prior version must be destroyed;
“YOUR”) ONLY ON THE CONDITION THAT YOU ACCEPT D. use a later version of the Software than is provided
ALL OF THE TERMS OF THIS LICENSE AGREEMENT. THIS herewith unless You have purchased upgrade insurance or
IS A LEGAL AND ENFORCEABLE CONTRACT BETWEEN have otherwise separately acquired the right to use such
YOU AND SYMANTEC. BY OPENING THIS PACKAGE, later version;
BREAKING THE SEAL, CLICKING ON THE “AGREE” OR E. use, if You received the software distributed on media
“YES” BUTTON OR OTHERWISE INDICATING ASSENT containing multiple Symantec products, any Symantec
ELECTRONICALLY, OR LOADING THE SOFTWARE, YOU software on the media for which You have not received a
AGREE TO THE TERMS AND CONDITIONS OF THIS permission in a License Module; nor
AGREEMENT. IF YOU DO NOT AGREE TO THESE TERMS
F. use the Software in any manner not authorized by this
AND CONDITIONS, CLICK ON THE “I DO NOT AGREE” OR
license.
“NO” BUTTON, OR OTHERWISE INDICATE REFUSAL,
MAKE NO FURTHER USE OF THE SOFTWARE, AND
RETURN THE FULL PRODUCT WITH PROOF OF 2. CONTENT UPDATES:
PURCHASE TO THE DEALER FROM WHOM IT WAS Certain Symantec software products utilize content that is
ACQUIRED WITHIN SIXTY (60) DAYS OF PURCHASE, updated from time to time (antivirus products utilize
AND YOUR MONEY WILL BE REFUNDED. updated virus definitions; content filtering products utilize
updated URL lists; firewall products utilize updated
1. LICENSE: firewall rules; vulnerability assessment products utilize
updated vulnerability data, etc.; collectively, these are
The software which accompanies this license (collectively
referred to as “Content Updates”). You may obtain Content
the “Software”) is the property of Symantec or its licensors
Updates for any period for which You have purchased a
and is protected by copyright law. While Symantec
subscription for Content Updates for the Software
continues to own the Software, You will have certain rights
(including any subscription included with Your original
to use the Software after Your acceptance of this license.
purchase of the Software), purchased upgrade insurance
This license governs any releases, revisions, or
for the Software, entered into a maintenance agreement
enhancements to the Software that Symantec may furnish
that includes Content Updates, or otherwise separately
to You. Except as may be modified by a Symantec license
acquired the right to obtain Content Updates. This license
certificate, license coupon, or license key (each a “License
does not otherwise permit You to obtain and use Content
Module”) which accompanies, precedes, or follows this
Updates.
license, Your rights and obligations with respect to the use
of this Software are as follows:
3. SIXTY (60) DAY MONEY BACK GUARANTEE:
YOU MAY: If You are the original licensee of this copy of the Software
and are not completely satisfied with it for any reason,
A. use one copy of the Software on a single computer. If a
please contact Symantec Customer Service, for a refund of
License Module accompanies, precedes, or follows this
the money You paid for the Software (less shipping,
license, You may make that number of copies of the
handling, and any applicable taxes) at any time during the
Software licensed to You by Symantec as provided in Your
sixty (60) day period following the date of purchase.
License Module. Your License Module shall constitute
proof of Your right to make such copies.
4. LIMITED WARRANTY:
B. make one copy of the Software for archival purposes, or
copy the Software onto the hard disk of Your computer and Symantec warrants that the media on which the Software
retain the original for archival purposes; is distributed will be free from defects for a period of sixty
C. use the Software on a network, provided that You have a (60) days from the date of delivery of the Software to You.
licensed copy of the Software for each computer that can Your sole remedy in the event of a breach of this warranty
access the Software over that network; and will be that Symantec will, at its option, replace any
defective media returned to Symantec within the warranty
D. after written notice to Symantec, transfer the Software
period or refund the money You paid for the Software.
on a permanent basis to another person or entity, provided
Symantec does not warrant that the Software will meet
that You retain no copies of the Software and the
Your requirements or that operation of the Software will be
transferee agrees to the terms of this license.
uninterrupted or that the Software will be error-free.
THE ABOVE WARRANTY IS EXCLUSIVE AND IN LIEU OF
YOU MAY NOT:
ALL OTHER WARRANTIES, WHETHER EXPRESS OR
A. copy the printed documentation which accompanies the IMPLIED, INCLUDING THE IMPLIED WARRANTIES OF
Software; MERCHANTABILITY, FITNESS FOR A PARTICULAR
PURPOSE AND NONINFRINGEMENT OF INTELLECTUAL
PROPERTY RIGHTS. THIS WARRANTY GIVES YOU California, United States of America. Otherwise, this
SPECIFIC LEGAL RIGHTS. YOU MAY HAVE OTHER Agreement will be governed by the laws of England. This
RIGHTS, WHICH VARY FROM STATE TO STATE AND Agreement and any related License Module is the entire
COUNTRY TO COUNTRY. agreement between You and Symantec relating to the
Software and: (i) supersedes all prior or contemporaneous
5. DISCLAIMER OF DAMAGES: oral or written communications, proposals and
SOME STATES AND COUNTRIES, INCLUDING MEMBER representations with respect to its subject matter; and (ii)
COUNTRIES OF THE EUROPEAN ECONOMIC AREA, DO prevails over any conflicting or additional terms of any
NOT ALLOW THE LIMITATION OR EXCLUSION OF quote, order, acknowledgment or similar communications
LIABILITY FOR INCIDENTAL OR CONSEQUENTIAL between the parties. This Agreement shall terminate upon
DAMAGES SO THE BELOW LIMITATION OR EXCLUSION Your breach of any term contained herein and You shall
MAY NOT APPLY TO YOU. cease use of and destroy all copies of the Software. The
disclaimers of warranties and damages and limitations on
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE
liability shall survive termination. This Agreement may
LAW AND REGARDLESS OF WHETHER ANY REMEDY
only be modified by a License Module which accompanies
SET FORTH HEREIN FAILS OF ITS ESSENTIAL PURPOSE,
this license or by a written document which has been
IN NO EVENT WILL SYMANTEC OR ITS LICENSORS BE
signed by both You and Symantec. Should You have any
LIABLE TO YOU FOR ANY SPECIAL, CONSEQUENTIAL,
questions concerning this Agreement, or if You desire to
INDIRECT OR SIMILAR DAMAGES, INCLUDING ANY
contact Symantec for any reason, please write to: (i)
LOST PROFITS OR LOST DATA ARISING OUT OF THE USE
Symantec Customer Service, 555 International Way,
OR INABILITY TO USE THE SOFTWARE EVEN IF
Springfield, OR 97477, U.S.A. or (ii) Symantec Customer
SYMANTEC HAS BEEN ADVISED OF THE POSSIBILITY OF
Service Center, PO BOX 5689, Dublin 15, Ireland.
SUCH DAMAGES.
IN NO CASE SHALL SYMANTEC'S OR ITS LICENSORS'
LIABILITY EXCEED THE PURCHASE PRICE FOR THE
SOFTWARE. The disclaimers and limitations set forth
above will apply regardless of whether You accept the
Software.
6. U.S. GOVERNMENT RESTRICTED RIGHTS:

RESTRICTED RIGHTS LEGEND. All Symantec products
and documentation are commercial in nature. The software
and software documentation are “Commercial Items”, as
that term is defined in 48 C.F.R. section 2.101, consisting
of “Commercial Computer Software” and “Commercial
Computer Software Documentation”, as such terms are
defined in 48 C.F.R. section 252.227-7014(a)(5) and 48
C.F.R. section 252.227-7014(a)(1), and used in 48 C.F.R.
section 12.212 and 48 C.F.R. section 227.7202, as
applicable. Consistent with 48 C.F.R. section 12.212, 48
C.F.R. section 252.227-7015, 48 C.F.R. section 227.7202
through 227.7202-4, 48 C.F.R. section 52.227-14, and
other relevant sections of the Code of Federal Regulations,
as applicable, Symantec's computer software and
computer software documentation are licensed to United
States Government end users with only those rights as
granted to all other end users, according to the terms and
conditions contained in this license agreement.
Manufacturer is Symantec Corporation, 20330 Stevens
Creek Blvd., Cupertino, CA 95014.
7. EXPORT REGULATION:
Export, re-export of this Software is governed by the laws
and regulations of the United States and import laws and
regulations of certain other countries. Export or re-export
of Software to any entity on the Denied Parties List and
other lists promulgated by various agencies of the United
States Federal Government is strictly prohibited.
8. GENERAL:
If You are located in North America or Latin America, this
Agreement will be governed by the laws of the State of
If you’re installing Norton AntiVirus for the first time 5
Start here
If you’re installing Norton

AntiVirus for the first time
Start here
Determine which file system your computer uses.
On your desktop, double-click My Computer,

right-click drive C, and click Properties.
Which file system are you using?

1 FAT (Windows 98/Me/2000/XP)
See “If you use a FAT file system” on page 6.
1 NTFS (Windows 2000/XP only)
See “If you use an NTFS file system” on page 7.
w For detailed instructions and an animated Web tutorial that

walks you through each step of the process, go to
www.service.symantec.com/installtutorial
6 If you’re installing Norton AntiVirus for the first time
If you use a FAT file system
If you use a FAT file system
Check for viruses that affect installation.
Insert the Norton AntiVirus CD into your CD-ROM

drive and restart your computer.
If you do not have a Norton AntiVirus CD or
cannot start your computer from a CD, create
Emergency Disks on another uninfected
computer.
See “Create Emergency Disks” on page 22.
Run a full system scan.
Was a virus found?

1 Yes
Run a virus scan again using the Delete switch.
1 No
See “Finish installation” on page 8.

If you’re installing Norton AntiVirus for the first time 7
If you use an NTFS file system
If you use an NTFS file system
Check for viruses that affect installation.
Can you establish a connection to the Internet?

1 Yes
Go to http://security.symantec.com and follow
the onscreen instructions to scan for threats.
1 No
For Windows XP: Go to service.symantec.com
For Windows 2000: Go to service.symantec.com
Was a virus found?

1 Yes
Write down the name of the virus and go to
http://securityresponse.symantec.com to locate
specific removal instructions.
1 No
If you have not already done so, install Norton
AntiVirus.

8 If you’re installing Norton AntiVirus for the first time
Finish installation
Finish installation
After you’ve checked for viruses, it’s safe to install

Norton AntiVirus.
Uninstall any other antivirus programs on your

computer.
On your desktop, use the Add/Remove Programs
Control Panel to select the program to uninstall.
Close all open programs on your computer

including the items running in the Windows
system tray.
Install Norton AntiVirus from the Norton AntiVirus

CD.
See “Install Norton AntiVirus” on page 23.
Did you see the message “Norton AntiVirus has

been installed successfully”?
1 Yes
See “After installation” on page 27.
1 No
Write down the error message on the screen
and go to http://service.symantec.com for
further assistance.
Contents
If you’re installing Norton AntiVirus for the first time

Start here .....................................................................................................5
If you use a FAT file system ....................................................................6
If you use an NTFS file system ...............................................................7
Finish installation ......................................................................................8
Chapter 1 About Norton AntiVirus

What’s new in Norton AntiVirus ......................................................... 11
How viruses work ................................................................................... 12
How Norton AntiVirus works .............................................................. 14
How to maintain protection .................................................................. 16
Chapter 2 Installing Norton AntiVirus

System requirements ............................................................................. 19
Before installation .................................................................................. 21
Install Norton AntiVirus ....................................................................... 23
After installation ..................................................................................... 27
If you need to uninstall Norton AntiVirus ......................................... 30
Chapter 3 Norton AntiVirus basics

Access Norton AntiVirus tools ............................................................ 33
Temporarily disable Auto-Protect ....................................................... 35
Maintain Norton AntiVirus protection ............................................... 36
Customize Norton AntiVirus ................................................................ 40
Change Norton AntiVirus options ....................................................... 43
Password protect Norton AntiVirus options ..................................... 45
Monitoring Norton AntiVirus activities ............................................. 45
For more information ............................................................................. 46
10 Contents
Chapter 4 Protecting disks, files, and data from viruses

Ensure that protection settings are enabled ..................................... 51
Manually scan disks, folders, and files .............................................. 52
Create and use custom scans ............................................................... 54
Schedule scans ........................................................................................ 56
Chapter 5 Keeping current with LiveUpdate

About program updates ......................................................................... 59
About protection updates ...................................................................... 60
About your subscription ........................................................................ 60
When you should update ...................................................................... 61
If you run LiveUpdate on an internal network ................................. 61
If you can’t use LiveUpdate .................................................................. 61
Obtain updates using LiveUpdate ....................................................... 62
Set LiveUpdate to Interactive or Express mode ............................... 62
Run LiveUpdate automatically ............................................................. 63
Chapter 6 What to do if a virus is found

If a virus is found during a scan .......................................................... 65
If a virus is found by Auto-Protect ...................................................... 67
If a virus is found by Script Blocking ................................................. 69
If a threat is found by Worm Blocking ............................................... 69
If you have files in Quarantine ............................................................ 70
If Norton AntiVirus cannot repair a file ............................................. 72
If your computer does not start properly ........................................... 72
Look up viruses on the Symantec Web site ...................................... 74
Look up viruses in Norton AntiVirus ................................................. 75
Chapter 7 Troubleshooting
Explore the Symantec service and support Web site ..................... 77
Troubleshoot Norton AntiVirus problems ......................................... 79
Service and support solutions

Glossary
Index
CD Replacement Form
About Norton
AntiVirus
Norton AntiVirus provides comprehensive virus prevention, detection, and

elimination software for your computer. It automatically finds and repairs
infected files to keep your data secure. Easy updating of the virus definition
service over the Internet keeps Norton AntiVirus prepared for the latest
threats. Worm Blocking and Script Blocking increase protection by
detecting new threats before virus definitions are created.
What’s new in Norton AntiVirus

Norton AntiVirus 2003 expands file repair and deletion options and
introduces virus protection for instant messenger attachments, Worm
Blocking, password protection for Norton AntiVirus options, and the Log
Viewer with more detailed visibility into protection activities. The new
features are:
1 Expanded file repair and deletion

Norton AntiVirus now automatically repairs all repairable files
without any interaction with you. Additionally, when Norton AntiVirus
finds a worm or Trojan horse, it automatically deletes the infected
file(s).
1 Instant messenger support and options
Norton AntiVirus now scans files received by America Online, Yahoo!,
and MSN instant messenger programs. You can choose to scan files
received by one or all three programs. Norton AntiVirus automatically
repairs or quarantines the infected file(s).
12 About Norton AntiVirus
How viruses work
1 Worm Blocking
Norton AntiVirus scans outgoing email attachments for worms and
alerts you before sending any infected files. Norton AntiVirus blocks
the worm and recommends the appropriate action, so you prevent
sending it in an email message.
1 Password protection
Norton AntiVirus allows you to set, change, and reset a password to
control your option settings, so that unauthorized users can’t tamper
with your virus protection.
1 Log Viewer
Norton AntiVirus organizes information about virus alerts, application
activities, and errors. You determine how many activities you want to
record.
How viruses work

A software virus is a parasitic program written intentionally to alter the
way your computer operates without your permission or knowledge. A
virus attaches copies of itself to other files and, when activated, may
damage files, cause erratic system behavior, or display messages.
Computer viruses infect system files and documents created by programs

with macro capabilities. Some system viruses are programmed specifically
to corrupt programs, delete files, or erase your disk.
Macro viruses spread quickly

Macros are simple programs that are used to do things such as automate
repetitive tasks in a document or make calculations in a spreadsheet.
Macros are written in files created by such programs as Microsoft Word
and Microsoft Excel.
Macro viruses are malicious macro programs that are designed to replicate
themselves from file to file and can often destroy or change data. Macro
viruses can be transferred across platforms and spread whenever you open
an infected file.
About Norton AntiVirus 13
How viruses work
Trojan horses hide their true purposes

Trojan horses are programs that appear to serve some useful purpose or
provide entertainment, which encourages you to run them. But the
programs also serve a covert purpose, which may be to damage files or
place a virus on your computer.
A Trojan horse is not a virus because it does not replicate and spread like a
virus. Because Trojan horses are not viruses, files that contain them cannot
be repaired. To ensure the safety of your computer, Norton AntiVirus
detects Trojan horses so you can delete them from your computer.
Worms take up space

Worms are programs that replicate without infecting other programs. Some
worms spread by copying themselves from disk to disk. They search for
specific types of files and try to damage or destroy those files. Worms
replicate only in memory, creating myriad copies of themselves, all
running simultaneously, which slows down the computer. Other worms
spread through your email address list and can email themselves without
you knowing. Like Trojan horses, worms are not viruses and therefore
cannot be repaired. They must be deleted from your computer.
How viruses spread

A virus is inactive until you launch an infected program, start your
computer from a disk that has infected system files, or open an infected
document. For example, if a word processing program contains a virus, the
virus activates when you run the program. Once a virus is in memory, it
usually infects any program you run, including network programs (if you
can make changes to network folders or disks).
Viruses behave in different ways. Some viruses stay active in memory until
you turn off your computer. Other viruses stay active only as long as the
infected program is running. Turning off your computer or exiting the
program removes the virus from memory, but does not remove the virus
from the infected file or disk. That is, if the virus resides in an operating
system file, the virus activates the next time you start your computer from
the infected disk. If the virus resides in a program, the virus activates the
next time you run the program.
To prevent virus-infected programs from getting onto your computer,

Norton AntiVirus automatically scans files before you copy or run them.
How Norton AntiVirus works
This includes programs you download from news groups or Internet Web
sites and any email attachments that you receive.
Viruses spread through email and instant messenger attachments. Norton
AntiVirus monitors incoming and outgoing email messages and instant
messenger attachments for potential threats.

Norton AntiVirus monitors your computer for known and unknown viruses.
A known virus is one that can be detected and identified by name. An
unknown virus is one for which Norton AntiVirus does not yet have a
definition.
Norton AntiVirus continually monitors your computer to protect you from

both types of viruses, using virus definitions to detect known viruses, and
Bloodhound technology, Script Blocking, and Worm Blocking to detect
unknown viruses. Virus definitions, Bloodhound technology, Script
Blocking, and email and instant messenger scanning are all used during
scheduled scans and manual scans, and are used by Auto-Protect to
constantly monitor your computer.
The virus definition service stops known viruses

See “Look up The virus definition service consists of files that Norton AntiVirus uses to
viruses in Norton
AntiVirus” on
recognize viruses and intercept their activity. You can look up virus names
page 75. in Norton AntiVirus, and access an encyclopedia of virus descriptions on
the Symantec Web site.
Bloodhound technology stops unknown viruses

Bloodhound is the Norton AntiVirus scanning technology for detecting new
and unknown viruses. It detects viruses by analyzing a file’s structure,
behavior, and other attributes such as programming logic, computer
instructions, and any data contained in the file. It also sets up simulated
environments in which to load documents and test for macro viruses.
Script Blocking stops script-based viruses

A script is a program written with a scripting language, such as Visual
Basic Script or JavaScript and can be executed without user interaction.
Scripts can be opened with text editors or word processing programs, so
they are very easy to change.
Scripts can be used when you log on to the Internet, or check your email.
Restarting your computer involves using scripts that tell your computer
what programs to load and run.
A script can also be written to perform malicious activities when it is
launched. You can unknowingly receive a malicious script by opening an
infected document or email attachment, viewing an infected HTML email
message, or visiting an infected Internet Web site.
Script Blocking detects Visual Basic and JavaScript viruses without the
need for specific virus definitions. It monitors the scripts for virus-like
activity and alerts you if it is found.
Worm Blocking stops worms before they spread

Worms hide in files and are not active or dangerous until the files are
opened. You can unknowingly copy or send an infected file by email. A file
infected with a worm cannot be repaired; it must be deleted.
Worm Blocking scans all outgoing email messages and alerts you if a
malicious worm is detected. Once a worm is detected, Norton AntiVirus
blocks the worm and recommends the appropriate action, so you prevent
sending it in an email message.
Auto-Protect keeps you safe

Norton AntiVirus Auto-Protect loads into memory when Windows starts,
providing constant protection while you work.
Using Auto-Protect, Norton AntiVirus automatically:

1 Eliminates viruses, worms, and Trojan horses, including macro
viruses, and repairs damaged files
1 Checks for viruses every time you use software programs on your
computer, insert floppy disks or other removable media, or use
document files that you receive or create
1 Monitors your computer for any unusual symptoms that may indicate
an active virus
1 Protects your computer from Internet-borne viruses
How to maintain protection

When Norton AntiVirus is installed, you have complete virus protection.
However, new viruses are created constantly. Viruses can spread when you
start your computer from an infected disk or when you run an infected
program. There are several things you can do to avoid viruses and to
recover quickly should a virus strike.
Avoid viruses
It is important that you practice regular file maintenance and that you keep
Norton AntiVirus up-to-date.
To avoid viruses:
1 Write-protect removable media.
See “About Norton 1 Stay informed about viruses by logging on to the Symantec Security
AntiVirus on the
Web” on page 49.
Response Web site (http://securityresponse.symantec.com) where
there is extensive, frequently updated information on viruses and
virus protection.
See “Keeping 1 Keep LiveUpdate turned on at all times to continually update your
current with
LiveUpdate” on
virus definitions files.
page 59.
1 Run LiveUpdate regularly to receive new program updates.
1 Keep Norton AntiVirus Auto-Protect turned on at all times to prevent
viruses from infecting your computer.
See “Manually scan 1 If Norton AntiVirus Auto-Protect is not turned on, scan removable
disks, folders, and
files” on page 52.
media before you use them.
See “Schedule 1 Schedule periodic scans to occur automatically.

scans” on page 56.
1 Watch for email from unknown senders. Do not open anonymous
attachments.
1 Keep Worm Blocking turned on to avoid sending infected email
attachments.
1 Keep Script Blocking turned on to detect any virus-like activity.
See “Ensure that 1 Keep all recommended maximum protection settings turned on.
protection settings
are enabled” on
page 51.
Prepare for emergencies

It is also important that you are prepared in case your computer is infected
by a virus.
To prepare for emergencies:
1 Back up files regularly and keep more than just the most recent
backup.
See “Create 1 If you are using a computer that cannot start from a CD, create a set of
Emergency Disks”
on page 22.
Emergency Disks, from which you can start your computer and scan
for viruses.
See “About Rescue 1 If you are using Windows 98 or Me, create and keep updated a set of
Disks” on page 36.
Rescue Disks, with which you can start your computer in DOS mode
and use Norton AntiVirus to fix virus-related problems and recover
from a system crash.
Installing Norton
AntiVirus
Before installing Norton AntiVirus, take a moment to review the system

requirements listed in this chapter. Windows 98 and Windows Me users
should have several blank 1.44 MB disks available to make Rescue Disks.
System requirements
To use Norton AntiVirus, your computer must have one of the following
Windows operating systems:
1 Windows 98/98SE/Me
1 Windows 2000 Professional Edition
1 Windows XP Professional/Home Edition
Installation of Norton AntiVirus is not supported on Windows 95/NT,

Macintosh, Linux, or server versions of Windows 2000/XP computers.
w If you are planning to upgrade your Windows operating system from

Windows 98/Me to Windows 2000/XP, you must uninstall Norton
AntiVirus first and then reinstall after the upgrade is complete.
20 Installing Norton AntiVirus
System requirements
Your computer must also meet the following minimum requirements.
Operating system Requirements
Windows 98/Me 1 Intel Pentium processor (or compatible) at 133 MHz for
Windows 98; 150 MHz for Windows Me
1 32 MB of RAM
1 70 MB of available hard disk space
1 Internet Explorer 5.0 or later (5.5 recommended)
1 CD-ROM or DVD-ROM drive
Windows 2000 1 Intel Pentium processor (or compatible) at 133 MHz or

Professional higher
Edition 1 64 MB of RAM
1 70 MB of hard disk space
Windows XP 1 Intel Pentium processor (or compatible) at 300 MHz or

Professional/ higher
Home Edition 1 128 MB of RAM
1 70 MB of hard disk space
w If you are installing on Windows 2000/XP, you must install with

administrator privileges.
Supported email clients

Email scanning is supported for any POP3 compatible email client
including:
1 Microsoft Outlook Express version 4, 5, or 6

1 Microsoft Outlook 97/98/2000/XP
1 Netscape Messenger version 4, Netscape Mail version 6
1 Eudora Light version 3, Eudora Pro version 4, Eudora version 5
1 Pegasus 4
Installing Norton AntiVirus 21
Before installation
Email scanning does not support the following email clients:

1 IMAP clients
1 AOL clients
1 POP3s with SSL (Secure Sockets Layer)
1 Web-based email such as Hotmail and Yahoo!
1 Lotus Notes mail
Supported instant messenger clients

1 AOL Instant Messenger, version 4.7 or later
1 Yahoo! Instant Messenger, version 5.0 or later
1 MSN Messenger and Windows Messenger, version 4.6 or later
Before installation
See “Create Before you install Norton AntiVirus, prepare your computer. If your
Emergency Disks”
on page 22.
computer cannot start from a CD, create Emergency Disks.
If you suspect that you have a virus

See “Start here” on If you try to install and your computer has a virus, Norton AntiVirus
page 5.
requests that you restart your computer. Restart from the Norton AntiVirus
CD and scan your computer’s hard disk for viruses. The Norton AntiVirus
emergency program uses the virus definitions from the Norton AntiVirus
CD, and is not as up-to-date as virus definitions downloaded using
LiveUpdate.
Once the virus has been repaired, delete the Norton AntiVirus install files
in the temporary folder that are left behind after the forced shutdown.
Prepare your computer

See “If you need to If you have a version of Norton AntiVirus 2000-2002, the new version
uninstall Norton
AntiVirus” on
automatically removes the older version. If your version is older than 2000,
page 30. you must uninstall it before installing the new version. If you have Norton
AntiVirus 2002, you can transfer your existing option settings to the new
version of the program.
Before installation
Before you install Norton AntiVirus, use these suggestions to prepare your
computer:
1 If you have any other antivirus programs on your computer, you must
uninstall them and restart your computer before installing Norton
AntiVirus.
To uninstall other antivirus programs, see the user documentation that
came with the program.
1 Close all other Windows programs before installing Norton AntiVirus,
including those programs displayed in the Windows tray.
Create Emergency Disks

See “If you need to Emergency Disks are used to start your computer and scan for viruses in
use Emergency
case of a problem. If your computer can start from a CD, you can use the
Norton AntiVirus CD in place of Emergency Disks and do not need to create
them.
If you cannot start your computer from a CD, you can use these instructions
to create Emergency Disks on another computer or go to
http://www.symantec.com/techsupp/ebd.html and download the
Emergency Disk program. Follow the instructions included in the download
to create the Emergency Disks.
w You will need several formatted 1.44 MB disks.
To create Emergency Disks from the CD

1 Insert the Norton AntiVirus CD into the CD-ROM drive.
2 Click Browse CD.
3 Double-click the Support folder.
4 Double-click the Edisk folder.
5 Double-click NED.exe.
6 In the welcome window, click OK.
7 Label the first disk as instructed and insert it into drive A.
8 Click Yes.
9 Repeat steps 7 and 8 for the subsequent disks.
10 When the procedure is complete, click OK.
11 Remove the final disk from drive A and store the Emergency Disk set
in a safe place.
Install Norton AntiVirus

Install Norton AntiVirus from the Norton AntiVirus CD.
To install Norton AntiVirus
See “If the opening 2 In the Norton AntiVirus window, click Install Norton AntiVirus.
screen does not
appear” on
If your computer is not set to automatically open a CD, you will have to
page 26. open it yourself.
w If you downloaded your copy of Norton AntiVirus and are not using a
CD, open the Norton AntiVirus folder and click setup.exe.
See “If you need to 3 If you are installing in Windows 98, 98SE, or Me, Norton AntiVirus
use Emergency
scans your computer’s memory for viruses before installing. If a virus
is found, you are prompted to use your Emergency Disks to remove the
virus before continuing.
4 The opening installation window reminds you to close all other
Windows programs.
5 Click Next.
6 Read the License Agreement and click I accept the license

agreement.
If you decline, you cannot continue with the installation.
7 Click Next.
8 If you are upgrading from Norton AntiVirus 2002, you can keep your
option settings. Click Yes to keep the settings.
9 Select a folder into which you want to install Norton AntiVirus.

10 Click Next.
11 Confirm the installation location, then click Next.

See “Read the 12 After Norton AntiVirus is installed, scroll through the Readme text,
Readme file” on
page 29.
then click Next.
13 Click Finish to exit the installation.
If the opening screen does not appear

Sometimes, a computer’s CD-ROM drive does not automatically start a CD.
To start the installation from the Norton AntiVirus CD

1 On your desktop, double-click My Computer.
2 In the My Computer dialog box, double-click the icon for your CD-
ROM drive.
3 From the list of files, double-click CDSTART.EXE.
After installation
After installation
For Windows 98/Me, you must restart your computer after installing
Norton AntiVirus.
If your computer needs to be restarted after Norton AntiVirus is installed, a
prompt appears giving you the option to do so immediately. After restart or,
if your computer does not need to be restarted, after installation is
complete, the Information Wizard appears.
w If you bought your computer with Norton AntiVirus already installed, the
Information Wizard appears the first time you start Norton AntiVirus. You
must accept the license agreement that appears in the Information Wizard
for Norton AntiVirus to be activated.
Restart your computer

After installation, you may receive a prompt telling you that your computer
needs to be restarted for the updates to take effect.
To restart your computer

4 In the dialog box, click Yes.
If you click No, configuration of Norton AntiVirus is not complete until
you restart your computer.
Use the Information Wizard

The Information Wizard lets you register your copy of Norton AntiVirus,
get information about the virus definition service, select post-install tasks
to be done automatically, and review your Norton AntiVirus settings.
w If you choose not to register the software using the Information Wizard or if
registration fails for some reason, you can register by using the Product
Registration option on the Help menu or by using the Symantec Web site at
www.symantec.com. On the Web site, go to the Products page for the
registration link.
To use the Information Wizard

1 In the welcome window, click Next.
2 If you purchased your computer with Norton AntiVirus already
installed, you must accept the license agreement in order to use
Norton AntiVirus. Click I accept the license agreement, then click
Next.
After installation
3 In the first Registration window, select the country/region from which

you are registering and the country/region in which you live (if
different), then click Next.
4 If you would like information from Symantec about Norton AntiVirus,
select the method by which you want to receive that information, then
click Next.
5 Enter your name and whether you want Norton AntiVirus registered to
you or your company, then click Next.
6 Enter your address, then click Next.
7 Answer the survey questions to help Symantec improve its products
and services, then click Next when you are done or to skip the survey.
8 Select whether you want to register Norton AntiVirus through the
Internet or by mail, then click Next.
If you submitted your registration through the Internet, a dialog box
displays the serial number for your product.
9 Write down the number or click Print to get a copy of your
registration information for future reference.
10 Click Next.
11 Select whether you want to use your existing profile the next time you
register a Symantec product, or type the information as part of
registration.
12 Click Finish.
13 Review the subscription service information, then click Next.
14 Select the post-install tasks that you want Norton AntiVirus to perform
automatically. Your options are:
Run LiveUpdate to ensure that you have the See “Keeping current with
latest virus definitions. LiveUpdate” on page 59.
If you are installing in Windows 98/Me, you See “About Rescue Disks” on
also have the option to create a Rescue Disk page 36.
set.
Perform a full system scan. See “Manually scan disks,

folders, and files” on page 52.
Schedule a weekly scan of your local hard See “Schedule scans” on

drives. You must have Microsoft Scheduler page 56.
installed to use this option. If you select this
option, you can change the schedule for this
scan as desired.
After installation
15 Click Next.
See “Customize 16 Review the configuration settings for Norton AntiVirus.

Norton AntiVirus”
on page 40.
If you want to change any of the settings, do so using Options.
17 Click Finish.
If you selected any post-install tasks, they start automatically.
Read the Readme file

The Readme file contains technical tips and information about product
changes that occurred after this guide went to press. It is installed on your
hard disk in the same location as the Norton AntiVirus product files.
To read the Readme file
1 Using Windows Explorer, navigate to the location where your Norton
AntiVirus files are installed.
If you installed Norton AntiVirus in the default location, the files are in
C:\Program Files\Norton AntiVirus.
2 Double-click Readme.txt to open the file in Notepad or WordPad.
The Readme file includes instructions for printing it if you want to do
so.
3 Close the word processing program when you are done reading the
file.
If you need to uninstall Norton AntiVirus

If you need to remove Norton AntiVirus from your computer, you can use
the Add/Remove Programs option from the Windows Control Panel or the
Uninstall Norton AntiVirus option from the Programs menu.
w During uninstall, Windows may indicate that it is installing software. This

is a standard Microsoft installation message and can be disregarded.
To uninstall Norton AntiVirus from the Windows Control Panel
1 Do one of the following:
2 On the Windows taskbar, click Start > Settings > Control Panel.
2 On the Windows XP taskbar, click Start > Control Panel.
2 In the Control Panel, double-click Add/Remove Programs.
3 In the list of currently installed programs, click Norton AntiVirus.
2 In Windows 2000/Me, click Change/Remove.
2 In Windows 98, click Add/Remove.
2 In Windows XP, click Change.
5 Click Yes to confirm that you want to uninstall the product.
See “If you have 6 If you have files in Quarantine, you are asked if you want to delete
files in
Quarantine” on
them. Your options are:
page 70.
Yes Deletes the quarantined files from your computer.
No Leaves the quarantined files on your computer, but makes

them inaccessible.
7 Click Finish.
8 Click Yes to restart your computer.

To uninstall Norton AntiVirus from the Programs menu

2 On the Windows taskbar, click Start > Programs > Norton
AntiVirus.
2 On the Windows XP taskbar, click Start > All Programs >
Norton AntiVirus.
2 Click Uninstall Norton AntiVirus.
3 In the Application Maintenance window, click Remove.
If you have no other Symantec products on your computer, you should also
uninstall LiveReg and LiveUpdate.
To uninstall LiveReg and LiveUpdate

2 On the Windows XP taskbar, click Start > Control Panel.
2 In the Control Panel, double-click Add/Remove Programs.
3 In the list of currently installed programs, click LiveReg.
2 In Windows 2000/Me, click Change/Remove.
2 In Windows 98, click Add/Remove.
2 In Windows XP, click Remove.
5 Click Yes to confirm that you want to uninstall the product.
6 Repeat steps 1 through 5, selecting LiveUpdate in step 3, to uninstall
LiveUpdate.
Norton AntiVirus
basics
Norton AntiVirus basics include general information about how to access

Norton AntiVirus tools, keep your computer protected, customize Norton
AntiVirus, monitor Norton AntiVirus activities, and access more
information about Norton AntiVirus.
Access Norton AntiVirus tools

Norton AntiVirus tools include status reporting, scanning options,
scheduling options, activity reporting, and configuration options. They can
be accessed from the Norton AntiVirus main window, the Windows
Explorer toolbar, and the Norton AntiVirus Windows tray icon.
Use the Norton AntiVirus main window

Most Norton AntiVirus tools are accessible from the Norton AntiVirus main
window.
To start Norton AntiVirus

2 On the Windows taskbar, click Start > Programs > Norton
AntiVirus > Norton AntiVirus 2003.
2 On the Windows XP taskbar, click Start > More Programs >
Norton AntiVirus > Norton AntiVirus 2003.
34 Norton AntiVirus basics
Access Norton AntiVirus tools
Use the Windows Explorer toolbar

Norton AntiVirus adds a button and menu to Windows Explorer. The button
drops down an abbreviated Norton AntiVirus menu.
Click the arrow to the right of the button and the following options appear.
View Status Launches Norton AntiVirus, displaying the Status

window with system status.
View Quarantine Displays the Quarantine area and the files currently
stored there. For more information, see “If you have
files in Quarantine” on page 70.
View Activity Log Displays the Log Viewer, showing you various
Norton AntiVirus activities, such as scans
performed and problems found. For more
information, see “Monitoring Norton AntiVirus
activities” on page 45.
View Virus Encyclopedia Connects you to the Symantec Security Response

Web page, from which you can search for
information on all types of viruses.
Launch Scan Menu Opens Norton AntiVirus in the Scan for Viruses
pane, on which you can specify a scan to run.
When you first open Windows Explorer after installing Norton AntiVirus,
you may not see the Norton AntiVirus button and menu.
To display the Norton AntiVirus button and menu

4 On the View menu, click Toolbars > Norton AntiVirus.
w You may not be able to access the Norton AntiVirus Windows Explorer
menu, depending on your computer’s configuration.
Use the Norton AntiVirus Windows tray icon

See “Customize You can use the Norton AntiVirus icon in the Windows tray to open Norton
Norton AntiVirus”
on page 40.
AntiVirus, and enable or disable Auto-Protect.
To use the Norton AntiVirus Windows tray icon

1 In the Windows tray, right-click the Norton AntiVirus icon.
2 On the tray icon menu, select the option that you want.
Norton AntiVirus basics 35
Temporarily disable Auto-Protect
Temporarily disable Auto-Protect

See “Customize If you have not changed the default option settings, Auto-Protect loads
Norton AntiVirus”
on page 40.
when you start your computer to guard against viruses. It checks programs
for viruses as they are run and monitors your computer for any activity that
might indicate the presence of a virus. When a virus or virus-like activity is
detected, Auto-Protect alerts you.
In some cases, Auto-Protect may warn you about a virus-like activity that
you know is not the work of a virus. If you will be performing such an
activity and want to avoid the warning, you can temporarily disable Auto-
Protect.
w If you have set a password for Options, Norton AntiVirus asks you for the
password before you can view or adjust the settings.
To temporarily disable Auto-Protect

See “Access Norton 1 Start Norton AntiVirus.
AntiVirus tools” on
page 33. 2 In the Norton AntiVirus main window, click Options.
3 In the Options window, under System, click Auto-Protect.
4 In the Auto-Protect pane, uncheck Enable Auto-Protect.
Be sure to enable Auto-Protect when you have completed your task to

ensure that your computer remains protected.
To enable Auto-Protect
1 Start Norton AntiVirus.
2 In the Norton AntiVirus main window, click Options.
4 In the Auto-Protect pane, check Enable Auto-Protect.
If the Norton AntiVirus icon appears in the Windows tray, you can use it to
enable and disable Auto-Protect.
To enable or disable Auto-Protect using the tray icon
1 In the Windows tray, right-click the Norton AntiVirus icon.
2 If Auto-Protect is disabled, click Enable Auto-Protect.
2 If Auto-Protect is enabled, click Disable Auto-Protect.
Maintain Norton AntiVirus protection

See “If you need to Depending upon which operating system you are using, you may want to
use Rescue Disks
(Windows 98/98SE/
keep a set of Rescue Disks available and keep them up-to-date. You should
Me)” on page 72. also occasionally verify that Norton AntiVirus is set to provide you with
optimal protection, and make sure that your virus protection is current.
About Rescue Disks

Rescue Disks record a duplicate set of system startup files and disk
partition information, and store rescue items and a virus scanner across
multiple floppy disks or on a network drive. Rescue Disks can be made for
the Windows 98/Me operating systems.
See “If you need to A Rescue Disk set consists of one bootable floppy disk, one Norton
use Rescue Disks
(Windows 98/98SE/
AntiVirus Program floppy disk, and several Virus Definition floppy disks. If
Me)” on page 72. you have Norton Utilities installed, you will also have two Norton Utilities
floppy disks in your Rescue Disk set. With a Rescue Disk set, you can start
your computer in DOS mode and use Norton AntiVirus to fix virus-related
problems.
w Rescue Disks contain information specific to the computer on which they

were made. If you are using Rescue Disks for recovery, you must use the
disks made for your computer. If you are using Rescue Disks to scan for
viruses, you can use disks made for a different computer.
Disks can and should be updated whenever you update your virus
protection, install new software, or make changes to your hardware.
Create a Rescue Disk set

Rescue Disks can be created at any time. If you have chosen to create
Rescue Disks as a post-install task in the Information Wizard, the Rescue
Disk Wizard appears automatically. Otherwise, you can start the Rescue
Disk Wizard from the Norton AntiVirus main window.
See “Temporarily If you start the Rescue Disk Wizard from the Norton AntiVirus main
disable Auto-
Protect” on
window, temporarily disable Auto-Protect while you are creating the
page 35. Rescue Disk set. If you do not restart your computer after creating Rescue
Disks, remember to enable Auto-Protect again.
w You will need several formatted 1.44 MB disks.

To create Rescue Disks

2 In the Norton AntiVirus main window, click Rescue.
If you chose to make Rescue Disks as a post-install task, the Rescue
Disk Wizard opens automatically.
3 Select drive A to create the Rescue Disk set.
4 Click Create.
5 Label the disks as specified in the Basic Rescue Disk List window, then
click OK.
6 Insert the disks as requested.
Test your Rescue Disks

At the end of the Create Rescue Disks process, you are prompted to test
your disks. This requires that you restart your computer using the Rescue
Disks.
To test your Rescue Disks

1 Close all open Windows programs.
2 Insert the disk labeled Basic Rescue Boot Floppy Disk into drive A,
then click Restart.
See “My Rescue If the Rescue Disk screen appears on your monitor, the Rescue Disk
Disk does not
work” on page 79.
works properly. If the Rescue Disk screen does not appear, you have
several options for correcting the problem.
3 Press Escape to exit to DOS.
4 Remove the disk from drive A, then slide open the plastic tab on the
back of the disk to write-protect it.
5 Restart your computer.
Update your Rescue Disks

You can update your Rescue Disks as often as you like. The Rescue Disk
Wizard helps you to update your basic Rescue Disks without having to
recreate them.
If you are updating a floppy disk set, make sure your disks are not write-
protected before you begin.
To update your Rescue Disks

2 In the Norton AntiVirus main window, click Rescue.
3 Under Select Destination Drive, select drive A.
4 Click Update.
5 Insert the disk labeled Basic Rescue Boot Floppy Disk into drive A.
If the disk is write-protected, slide the plastic tab closed to make it
writeable.
6 Click OK.
7 Insert the remaining disks in your set as requested.
See “Test your Make sure to test your newly updated Rescue Disk set when prompted.
Rescue Disks” on
page 37.
Check system status

If Norton AntiVirus is behaving in an unexpected way, or if you’re not sure
that everything is being scanned for viruses, check the status of its
configuration.
In the Status pane of the Norton AntiVirus main window, a check mark
indicates that the system status is OK and a triangle indicates that your
system needs attention. If you see a triangle, review the features and
services to see which area needs attention.
See “Customize If you need to adjust any settings, use Options.
Norton AntiVirus”
on page 40.
To check system status

page 33.
2 In the Status pane, review the status to the left of each feature.
3 For more information about a particular feature, click the feature.
The right pane displays a description and a link to more information
about the feature.
Check Office Plug-in status

Office Plug-in protects Microsoft Office documents from viruses, worms,
and virus-like activities. It scans those documents whenever you open
them in a Microsoft Office program. Office Plug-in is enabled in Options.
w If you have set a password for Options, Norton AntiVirus asks you for the
To check Office Plug-in status

Customize Norton AntiVirus
3 In the left pane of the Options window, under Other, click

Miscellaneous.
4 Verify that Office Plug-in is enabled.

If you are using Windows 2000/XP and you do not have Local
Administrator access, you cannot change Norton AntiVirus options. If you
are an administrator and share your computer with others, keep in mind
that the changes you make apply to everyone using the computer.
The default settings for Norton AntiVirus provide complete virus protection
for your computer. However, you may want to adjust them to optimize
system performance or disable options that do not apply.
Norton AntiVirus provides password protection for your option settings.

You can enable, change, and reset a password so unauthorized users
cannot tamper with your settings.
All the settings for Options are organized into three main categories. The
options contained under each category are as follows.
Category Options
System Auto-Protect
1 Bloodhound
1 Advanced
1 Exclusions
Script Blocking
Manual Scan
1 Bloodhound
1 Exclusions
Internet Email
1 Advanced
Instant Messenger
LiveUpdate
Other Inoculation (Windows 98/98SE/Me)

Miscellaneous
See “Change This section does not describe how to change the individual options, but
Norton AntiVirus
options” on
gives a general description of what they do and how you can find them. For
page 43. specific information about a particular option, check the online Help.
About System options

The System options control scanning and monitoring of your computer. You
use System options to determine what gets scanned, what the scan is
looking for, and what happens when a virus or virus-like activity is
encountered.
With higher levels of protection, there can be a slight trade-off in computer
performance. If you notice a difference in your computer’s performance
after you install Norton AntiVirus, you may want to set protection to a
lower level or disable those options that you do not need.
Option Description
Auto-Protect Determine if Auto-Protect starts when you start your

computer, what it looks for while monitoring your computer,
and what to do when a virus is found.
Bloodhound is the scanning technology that protects against
unknown viruses. Use these options to set its level of
sensitivity in Auto-Protect.
Advanced options determine the activities to be monitored
when scanning for virus-like activities and when scanning
floppy disks.
Exclusions specify the files that should not be scanned by file
name extension or by specific file name. Be careful not to
exclude the types of files that are more likely to be infected
by viruses such as files with macros or executable files.
Script Blocking Enable Script Blocking and set what Norton AntiVirus should
do if it finds a malicious script. If you are developing or
debugging scripts, disable Script Blocking. Otherwise this
feature might block the script you are developing.
Manual Scan Determine what gets scanned and what happens if a virus is
found during a scan that you request.
Manual Scan options also include Bloodhound and
Exclusions subcategories.
About Internet options

Internet options define what happens when your computer is connected to
the Internet. You use Internet options to define how Norton AntiVirus
should scan email and instant messenger attachments, enable Worm
Blocking, and determine how LiveUpdates should be applied.
Option Description
Email Enable email scanning and Worm Blocking, and define how
Norton AntiVirus should behave while scanning email
messages. Scanning incoming email protects your computer
against viruses sent by others. Scanning outgoing email
prevents you from inadvertently transmitting viruses or
worms to others. You can choose to scan incoming or
outgoing email, or both, and to display an icon or progress
indicator while scanning. You can set options to
automatically repair, quarantine, or delete infected email
with or without interaction with you.
Advanced options determine what to do when scanning
email.
Instant Messenger Determine what instant messengers to support, how to

configure a new IM, and what happens if a virus is found
during an instant messenger session.
LiveUpdate Enable Automatic LiveUpdate and define how updates should

be applied. Automatic LiveUpdate checks for updated virus
definitions and program updates automatically when you are
connected to the Internet.
Change Norton AntiVirus options
About Other options

Other options include Inoculation settings for Windows 98/98SE/Me and
Miscellaneous settings. You can enable Inoculation, cause an alert if a
system file changes, and set a variety of miscellaneous options.
Option Description
Inoculation Enable inoculation and, if a system file changes, choose to

update the inoculation snapshot or repair the file by restoring
it to its original values.
Inoculation options are available only on Windows 98/98SE/
Me.
Miscellaneous Back up file in Quarantine before attempting a repair. (This

option is automatically set to On.)
Enable Office Plug-in. If you upgrade to Microsoft Office 2000
or later after Norton AntiVirus is installed, you must enable
this option to automatically scan Microsoft Office files.
Alert me if my virus protection is out of date.
Scan files at system startup (Windows 98/98SE only).
Enable password protection for options.

You change the settings for Norton AntiVirus options in the Options
window.
To change settings
w If you set a password for Options, Norton AntiVirus asks you for the
password before you can continue.
3 In the Options window, in the left pane, click an option in the list.
Options with an arrow to the left have sub-options. As you click an
option, the corresponding settings for the selected option appear in the
right pane.
See “Customize 4 Select any settings you want to change.
Norton AntiVirus”
on page 40. 5 Click OK.
These settings now take precedence over the preset options. The
changes take effect immediately.
If you need to restore default settings in Options

You can change any or all of the options listed. If you have made a number
of changes that have unwanted results, you can restore all options to the
default settings.
Password protect Norton AntiVirus options
To restore default settings on an Options page

4 On the page for which you want to restore default settings, click Page
Defaults.
To restore default settings for all options
4 On any page in the Options window, click Default All.
Password protect Norton AntiVirus options

You can choose to protect or remove protection from your option settings
with a password. If you specify a password, you are asked to enter a
password every time you view the Options window, or temporarily enable
or disable Auto-Protect.
If you forget your password, you can reset it from the Help button in the
Norton AntiVirus main window. Check online Help for more information
about resetting your password.
To specify or remove a password

3 In the Options window, under Other, click Miscellaneous.
4 Check or uncheck Enable password protection for options.
5 In the password dialog box, enter a password.
6 Click OK.
Monitoring Norton AntiVirus activities

Occasionally, you may need to look at previous Norton AntiVirus activities,
such as when the last system scan was done or how many viruses were
detected last week. Norton AntiVirus displays a record of its virus
detection, application, and error activities in the Log Viewer.
Check the Activity Log to see what tasks Norton AntiVirus has performed
and the results of those tasks to make sure your Options settings are set
correctly for your particular needs.
To check activities
2 In the Norton AntiVirus main window, click Reports.
For more information
3 In the Reports pane, on the Activity Log line, click View Report.
4 In the left pane, click the log you want to review.

As you click each log, the right pane changes and displays information
specific to the particular log. The most recent activities appear at the
top of the log.

Norton AntiVirus provides glossary terms, online Help, this User’s Guide in
PDF format, tutorials on the Web, and links to the Knowledge Base on the
Symantec Web site.
Look up glossary terms

Technical terms that are italicized in the User’s Guide are defined in the
glossary, which is available in both the User’s Guide PDF and Help. In both
locations, clicking a glossary term takes you to its definition.
Use online Help

Help is always available throughout Norton AntiVirus. Help buttons or
links to more information provide information specific to the task you are
completing. The Help menu provides a comprehensive guide to all product
features and tasks you can complete.
To access the Help menu
2 At the top of the Norton AntiVirus main window, click Help.
Online Help table of

contents and index
Link to Symantec
Web sites for more
Version, system, and information
password reset
information
3 On the main Help menu, click Norton AntiVirus Help.

4 In the Help window, in the left pane, select a tab. Your options are:
Contents Displays the Help by topic
Index Lists Help topics in alphabetical order by key word
Search Opens a search field where you can enter a word or phrase
Help for Norton AntiVirus dialog boxes

When you request Help while working in a Norton AntiVirus dialog box,
the Help displayed is specific to that dialog box.
To get Help for a Norton AntiVirus dialog box

4 In the dialog box, click Help.
Help for a specific task

Online Help also explains procedures that you are likely to perform using
Norton AntiVirus. You can access these topics from the main Help window.
To get Help for a task

2 In the Norton AntiVirus main window, click Help.
3 On the main Help menu, click Norton AntiVirus Help.
4 In the Help window, in left pane, select a tab. Your options are:
Contents Search for Help by topic.
Index Lists Help topics in alphabetical order by key word.
Search Enter and search for Help by key word.
The Contents, Index, and Search tabs are also available in many other Help
windows and can always be used to search for Help.
Use the User’s Guide PDF

This User’s Guide is provided on the Norton AntiVirus CD in PDF format.
You must have Adobe Acrobat Reader installed on your computer to read
the PDF.
To install Adobe Acrobat Reader

2 Click Browse CD.
3 Double-click the Manual folder.
4 Double-click the Acrobat folder.
5 Double-click AR500ENU.
6 Follow the on-screen instructions to select a folder for Adobe Acrobat
Reader and complete the installation.
Once you have installed Adobe Acrobat Reader, you can read the PDF from
the CD.
To read the User’s Guide PDF from the CD
2 Click Browse CD.
3 Double-click the Manual folder.
4 Double-click the NAV2003 folder.
5 Double-click NAV2003.pdf.
You can also copy the User’s Guide to your hard disk and read it from there.
It needs approximately 1 MB of disk space.
To read the User’s Guide from your hard disk
1 Open the location into which you copied the PDF.
2 Double-click NAV2003.pdf.
About Norton AntiVirus on the Web

The Symantec Web site provides extensive information about Norton
AntiVirus, virus protection, antivirus technology, and other Symantec
products. There are several ways to access the Symantec Web site.
To access the Symantec Web site from the Norton AntiVirus main
window
1 Click Help.
2 Select the solution that you want. Your options are:
Help and Takes you to the technical support page of the Symantec
Support Web site, from which you can search for solutions to
specific problems, update your virus protection, and read
the latest information about antivirus technology.
Symantec Takes you to the Symantec security response page of the

Response Center Symantec Web site, from which you can get the latest virus
threats and security updates.
More Symantec Takes you to the Symantec store page of the Symantec Web
Solutions site, from which you can get the latest product information
and shop for Symantec products.
The Reports pane of Norton AntiVirus contains a link to the Symantec

online virus encyclopedia.
To access the Symantec Web site from the Reports page
3 In the Reports pane, next to the Online Virus Encyclopedia heading,
click View Report.
There is a link to the Symantec Web site on the Windows Explorer toolbar.
To access the Symantec Web site from Windows Explorer

1 Open Windows Explorer.
2 On the toolbar, on the Norton AntiVirus menu, click View Virus
Encyclopedia.
This option connects you to the Symantec security response Web page,
from which you can search for information on all types of viruses.
You can always access the Symantec Web site through your Internet
browser.
To access the Symantec Web site in your browser
4 Point your browser to www.symantec.com
Explore online tutorials

Symantec provides online tutorials that you can use to review many
common tasks that Norton AntiVirus performs.
To explore the online tutorials

1 Point your browser to www.symantec.com/techsupp/tutorials.html
2 On the tutorials Web page, select the product and version for which
you want a tutorial.
3 Click continue.
4 In the list of available tutorials for your product, select the one that you
want to review.
Protecting disks,
files, and data from
viruses
Keeping your computer protected requires regular monitoring by Auto-

Protect, Script Blocking, and Worm Blocking; scanning of your email
attachments and files transferred by instant messenger; and frequent
system scans. All of these tasks can be set to occur automatically.
For added protection in Norton AntiVirus on Windows 98/98SE/Me, enable

inoculation to alert you if a system file changes.
Ensure that protection settings are enabled

Norton AntiVirus is configured to provide you with complete protection
against viruses. It is unlikely that you need to change any settings.
However, for maximum protection, you should ensure that your protection
features are enabled.
Feature Where to set Maximum protection setting
Auto-Protect Norton AntiVirus main Auto-Protect is set to On.

window > Enable
Email scanning Options > Email Scan incoming Email and

See “About Internet Scan outgoing Email are
options” on page 42. checked.
If your email program uses one
of the supported
communications protocols, both
options are selected by default.
52 Protecting disks, files, and data from viruses
Manually scan disks, folders, and files
Feature Where to set Maximum protection setting
Timeout protection Options > Email Protect against timeouts

See “About Internet when scanning Email is
options” on page 42. checked.
To prevent connection timeouts
while receiving large
attachments, enable timeout
protection.
Instant messenger Options > Instant Instant messengers that you

scanning Messenger want to protect are checked.
See “About Internet
options” on page 42.
Worm Blocking Options > Email Enable Worm Blocking and

See “About Internet Alert me when scanning
options” on page 42. email attachments are
checked.
Script Blocking Options > Script Enable Script Blocking is

Blocking checked.
See “About System
options” on page 41.
Inoculation Options > Inoculation Inoculate Boot Records is

See “About Other options” checked.
on page 43.
This table summarizes the maximum protection settings and where you
can find them. For specific information about an option, check the online
Help.

If Auto-Protect is enabled and the Norton AntiVirus options are set at their
default levels, you normally would not need to scan manually. However, if
you temporarily disabled Auto-Protect (for example, to load or use another
program that conflicts with Norton AntiVirus), and you forgot to enable it
again, it is possible that a virus could be on your hard disk undetected. You
can scan your entire computer, or individual floppy disks, drives, folders, or
files.
Although the default settings for manual scanning are usually adequate,
you can raise the level of Bloodhound heuristics or adjust the options for
Protecting disks, files, and data from viruses 53
manual scanning in the Options window. Check online Help for more
information about manual scanning options.
Perform a full system scan

A full system scan scans all boot records and files on your computer.
To perform a full system scan
2 In the Norton AntiVirus main window, click Scan for Viruses.
3 In the Scan for Viruses pane, click Scan my computer.

4 Under Actions, click Scan.
When the scan is complete, a scan summary appears.
5 When you are done reviewing the summary, click Finished.
Scan individual elements

Occasionally, you may want to scan a particular file, removable drives, a
floppy disk, any of your computer’s drives, or any folders or files on your
computer. You may have been working with floppy disks or have received a
compressed file in an email message and suspect a virus. You can scan just
a particular disk or individual element that you want to check.
Create and use custom scans
To scan individual elements

3 In the Scan for Viruses pane, select the scan that you want to run.
If you choose to scan all removable drives or a floppy disk, the scan
starts automatically. If you choose to scan drives, folders, or files, a
dialog box appears in which you choose which drives, folders, or files
to scan.
5 In the dialog box, click Scan after making your selection.
If problems are found during a scan

See “If a virus is At the end of a scan, a summary report appears to tell you what Norton
found during a
scan” on page 65.
AntiVirus found during the scan. If a virus was found and you have
requested that Norton AntiVirus repair the file automatically, it is listed as
repaired. If the file cannot be repaired, it can be quarantined or deleted.

See “Schedule a You can create a custom scan if you regularly scan a particular segment of
custom scan” on
page 56.
your computer and don’t want to have to specify the segment to be scanned
every time. You can also schedule the custom scan to run automatically.
You can delete the scan when it is no longer necessary. For example, if you
are working on a project for which you need to frequently swap files with
others, you might want to create a folder into which you copy and scan
those files before using them. When the project is done, you can delete the
custom scan for that folder.
To create a custom scan
3 In the Scan for Viruses pane, under Actions, click New.
4 In the opening window of the Norton AntiVirus Scan Wizard, click
Next.
5 Do one or both of the following:

2 To select individual files to be scanned, click Add files.
2 To select folders and drives to be scanned, click Add folders.
You can use both options to select the combination of items that you
want.
6 In the resulting dialog box, select the items that you want to scan.
If you select a folder, all files in that folder are included. If you select a
drive, all folders and files on that drive are included.
7 Add the selected items to the list of items to scan by doing one of the
following:
2 In the Scan Files dialog box, click Open.
2 In the Scan Folders dialog box, click Add.
8 To remove an item from the list, select it, then click Remove.
9 When you are done creating the list of items to be scanned, click Next.
10 Type a name for the scan by which you can identify it in the list of
scans.
11 Click Finish.
Run a custom scan

When you run a custom scan, you do not have to redefine what you want to
scan.
To run a custom scan

3 In the Scan for Viruses pane, select the custom scan.
Delete a custom scan

You can delete custom scans if they are no longer needed.
To delete a custom scan

Schedule scans
3 In the Scan for Viruses pane, select the scan that you want to delete.
w If you click the button next to the scan name, the scan runs.
4 Under Actions, click Delete.

5 Click Yes to verify that you want to delete the scan.
Schedule scans
When you install Norton AntiVirus and complete the Information Wizard,
you can choose to schedule a weekly full system scan as part of post-install
tasks. If you make that choice, the scan is scheduled automatically.
You can schedule customized virus scans that run unattended on specific
dates and times or at periodic intervals. If you are using the computer when
the scheduled scan begins, it runs in the background so that you do not
have to stop working.
w You cannot schedule the predefined scans in the scan list, but you can
schedule any custom scans that you have created.
Schedule a custom scan

You have complete flexibility in scheduling custom scans. When you select
how frequently you want a scan to run (such as daily, weekly, or monthly),
you are presented with additional fields with which you can refine your
request. For example, you can request a daily scan, then schedule it to
occur every two days or every three days instead.
To schedule a custom scan

3 In the Scan for Viruses pane, select the scan that you want to
schedule.
4 Under Schedule Task, click Schedule.

5 In the Schedule dialog box, if Show multiple schedules is checked,
click New to enable the scheduling fields.
If it is not checked, the fields are already enabled.
Schedule scans
6 Set the frequency and time at which you want the scan to run.
Most of the frequency options include additional options that let you
further refine the schedule. Set the additional options as necessary.
7 When you are done, click OK.
You can also create multiple schedules for a scan. For example, you could
run the same scan at the beginning of your work day and at the end.
To create multiple schedules for a single scan
schedule.

5 In the Schedule dialog box, check Show multiple schedules.
6 To set an additional schedule, click New.
7 Set the frequency and time at which you want the scan to run.
Most of the frequency options include additional options that let you
further refine the schedule. Set the additional options as necessary.
8 When you are done, click OK.
Edit scheduled scans

You can change the schedule of any scheduled scan, including the weekly
full system scan.
To edit a scheduled scan

schedule.

5 Change the schedule as desired.
6 Click OK.
Schedule scans
Delete a scan schedule

You can delete any scan schedule. Deleting the schedule does not delete
the scan.
To delete a scan schedule
3 In the Scan for Viruses pane, select the scan you want to schedule.

5 In the Schedule dialog box, check Show multiple schedules.
6 Select the schedule that you want to delete (if more than one).
7 Click Delete.
8 Click OK.
Keeping current with
LiveUpdate
Symantec products depend on current information to protect your

computer from newly discovered threats. Symantec makes this information
available to you through LiveUpdate. Using your Internet connection,
LiveUpdate obtains program updates and protection updates for your
computer.
Your normal Internet access fees apply when you use LiveUpdate.
w If you are using Norton AntiVirus on Windows 2000/XP, you must have
Administrator access rights to run LiveUpdate.
About program updates

Program updates are minor improvements to your installed product. These
differ from product upgrades, which are newer versions of entire products.
Program updates that have self-installers to replace existing software code
are called patches. Patches are usually created to extend operating system
or hardware compatibility, adjust a performance issue, or fix bugs.
LiveUpdate automates the process of obtaining and installing program

updates. It locates and obtains files from an Internet site, installs them, and
then deletes the leftover files from your computer.
60 Keeping current with LiveUpdate
About protection updates
About protection updates

Protection updates are files available from Symantec, by subscription, that
keep your Symantec products up-to-date with the latest anti-threat
technology. The protection updates you receive depend on which product
you are using.
Norton AntiVirus, Users of Norton AntiVirus and Norton SystemWorks

Norton SystemWorks receive virus definition service updates, which provide
access to the latest virus signatures and other technology
from Symantec.
Norton Internet In addition to the virus definition service, users of Norton

Security Internet Security also receive protection updates to the
Web filtering service, the intrusion detection service, and
Spam Alert.
The Web filtering service updates provide the latest lists of
Web site addresses and Web site categories that are used
to identify inappropriate Web content.
The intrusion detection service updates provide the latest
predefined firewall rules and updated lists of applications
that access the Internet. These lists are used to identify
unauthorized access attempts to your computer.
Spam Alert updates provide the latest spam definitions
and updated lists of spam email characteristics. These lists
are used to identify unsolicited email.
Norton Personal Users of Norton Personal Firewall receive intrusion

Firewall detection service updates for the latest predefined firewall
rules and updated lists of applications that access the
Internet.
About your subscription

See “Subscription Your Symantec product includes a complimentary, limited-time
policy” on
page 86.
subscription to protection updates for the subscription services that are
used by your product. When the subscription is due to expire, you are
prompted to renew your subscription.
If you do not renew your subscription, you can still use LiveUpdate to
obtain program updates. However, you cannot obtain protection updates
and will not be protected against newly discovered threats.
Keeping current with LiveUpdate 61
When you should update
When you should update

Run LiveUpdate as soon as you have installed your product. Once you know
that your files are up-to-date, run LiveUpdate regularly to obtain updates.
For example, to keep your virus protection current, you should use
LiveUpdate once a week or whenever new viruses are discovered. Program
updates are released on an as-needed basis.
Request an update alert

To ensure your protection updates are current, you can request to receive
an email alert whenever there is a high-level virus outbreak or other
Internet security threat. The email alert describes the threat, provides
detection and removal instructions, and includes advice on keeping your
computer safe. You should always run LiveUpdate after you receive one of
these alerts.
To request an update alert
1 From your Web browser, navigate to securityresponse.symantec.com/
avcenter
2 On the Security Response Web page, scroll to the bottom of the page,
then click Symantec security response Free subscription.
3 On the security alert subscription Web page, fill in the subscription
form.
4 Click Send me FREE Security Alerts.
If you run LiveUpdate on an internal network

If you run LiveUpdate on a computer that is connected to a network that is
behind a company firewall, your network administrator might set up an
internal LiveUpdate server on the network. LiveUpdate should find this
location automatically.
If you have trouble connecting to an internal LiveUpdate server, contact
your network administrator.
If you can’t use LiveUpdate

When new updates become available, Symantec posts them on the
Symantec Web site. If you can’t run LiveUpdate, you can obtain new
updates from the Symantec Web site.
Obtain updates using LiveUpdate
w Your subscription must be current to obtain new protection updates from

the Symantec Web site.
To obtain updates from the Symantec Web site
1 Point your Web browser to securityresponse.symantec.com
2 Follow the links to obtain the type of update that you need.
Obtain updates using LiveUpdate

LiveUpdate checks for updates to all of the Symantec products that are
installed on your computer.
w If you connect to the Internet through America Online (AOL), CompuServe,

or Prodigy, connect to the Internet first, and then run LiveUpdate.
To obtain updates using LiveUpdate

1 Open your Symantec product.
2 At the top of the window, click LiveUpdate.
You might receive a warning that says that your subscription has
expired. Follow the on-screen instructions to complete the
subscription renewal.
3 In the LiveUpdate window, click Next to locate updates.
4 If updates are available, click Next to download and install them.
5 When the installation is complete, click Finish.
w Some program updates may require that you restart your computer after
you install them.
Set LiveUpdate to Interactive or Express mode

LiveUpdate runs in either Interactive or Express mode. In Interactive mode
(the default), LiveUpdate downloads a list of updates available for your
Symantec products that are supported by LiveUpdate technology. You can
then choose which product updates you want to install. In Express mode,
LiveUpdate automatically installs all available updates for your Symantec
products.
Keeping current with LiveUpdate 63
Run LiveUpdate automatically
To set LiveUpdate to Interactive or Express mode

1 Open your Symantec product.
2 At the top of the window, click LiveUpdate.
3 On the LiveUpdate welcome screen, click Configure.
4 On the General tab of the LiveUpdate Configuration dialog box, select
Interactive Mode or Express Mode.
5 If you selected Express Mode, select how you want to start checking
for updates:
2 To have the option of cancelling the update, select I want to
press the start button to run LiveUpdate.
2 To have any updates installed automatically whenever you start
LiveUpdate, select I want LiveUpdate to start automatically.
6 Click OK.
Turn off Express mode

Once you have set LiveUpdate to run in Express mode, you can no longer
access the LiveUpdate Configuration dialog box directly from LiveUpdate.
You must use the Symantec LiveUpdate control panel.
To turn off Express mode

2 In the Control Panel window, double-click Symantec LiveUpdate.
3 On the General tab of the LiveUpdate Configuration dialog box, select
Interactive Mode.
4 Click OK.

You can have LiveUpdate check for protection updates automatically, on a
set schedule, by enabling Automatic LiveUpdate. You must continue to run
LiveUpdate manually to receive product updates.
w Automatic LiveUpdate checks for an Internet connection every five

minutes until a connection is found, and then every four hours. If you have
an ISDN router that is set to automatically connect to your Internet service
provider (ISP), many connections will be made, with connection and phone
charges possibly being incurred for each connection. If this is a problem,
you can set your ISDN router to not automatically connect to the ISP or
disable Automatic LiveUpdate in the Norton AntiVirus options.
To enable Automatic LiveUpdate
3 In the Options window, under Internet, click LiveUpdate.

4 In the LiveUpdate pane, check Enable Automatic LiveUpdate.
5 Set how you want updates to be applied. Your options are:
Apply updates without LiveUpdate checks for and installs protection

interrupting me updates without prompting you. LiveUpdate
displays an alert when a protection update has
been downloaded. You should still run LiveUpdate
occasionally to check for program updates.
Notify me when updates LiveUpdate checks for protection updates and asks
are available if you want to install them.
6 Click OK.
To delete the schedule for Automatic LiveUpdate, disable Automatic

LiveUpdate.
To disable Automatic LiveUpdate

3 In the Options window, under Internet, click LiveUpdate.

4 In the LiveUpdate pane, uncheck Enable Automatic LiveUpdate.
5 Click OK.
What to do if a virus
is found
If Norton AntiVirus finds a virus on your computer, there are three possible
resolutions to the problem:
1 Fix the file

Removes the virus from the file or if the threat is a worm or Trojan
horse, deletes the file.
See “If you have 1 Quarantine the file
files in
Quarantine” on
Makes the file inaccessible by any programs other than Norton
page 70. AntiVirus. You cannot accidentally open the file and spread the virus,
but you can still evaluate it for possible submission to Symantec.
1 Delete the file
Removes the virus from your computer by deleting the file that
contains the virus, worm or Trojan horse. It should be used only if the
file cannot be repaired or quarantined.
Malicious threats can be found during a manual or scheduled scan or by

Auto-Protect when you perform an action with an infected file. Threats can
also appear during an instant messenger session or when sending an
email. The way that you handle a threat differs depending on whether a
scan or Auto-Protect found the threat.
If a virus is found during a scan

If Norton AntiVirus finds a virus, Trojan horse, or worm during a scan or
from an instant messenger session, you either receive a summary of the
automatic repair or deletion results, or you have to use the Repair Wizard
to resolve the problem.
66 What to do if a virus is found
If a virus is found during a scan
Review the repair details

If you have set your manual scan options so that Norton AntiVirus repairs
or deletes files automatically, and all infected files could be repaired or
deleted, the scan summary lists the number of files infected and repaired
or deleted. This information is presented for status purposes only; you don’t
need to take further action to protect your computer. If you want to know
more, you can check the repair details to see which files were infected and
with what threats.
To review the repair details

1 In the scanner window, in the Summary pane, click More Details.
2 When you are done reviewing the results, click Finished.
Use the Repair Wizard

If there are files that could not be fixed, or if you have set options so that
Norton AntiVirus asks you what to do when a virus is found, the Repair
Wizard opens. If Norton AntiVirus did not attempt a repair, the Repair
Wizard opens in the Repair pane. Otherwise, it opens in the Quarantine
window.
To use the Repair Wizard
1 If the Repair Wizard opens in the Repair pane, uncheck any files that
you don’t want Norton AntiVirus to fix.
All files are checked by default. This is the recommended action.
2 Click Fix.
If any files cannot be fixed or deleted, the Quarantine window opens.
All files are checked to be added to the Quarantine by default. This is
the recommended action.
3 In the Quarantine window, uncheck any files that you do not want to
quarantine.
4 Click Quarantine.
If any files could not be quarantined, the Delete pane opens.
If you do not delete the infected files, the virus remains on your
computer and can cause damage or be transmitted to others.
5 Uncheck any files that you do not want to delete.
What to do if a virus is found 67
If a virus is found by Auto-Protect
6 Click Delete.
Once all of the files have been repaired, quarantined, or deleted, the
Summary pane of the scanner window opens.
w After repairing a boot virus on your hard drive, restart your computer.

Auto-Protect scans files for viruses and other malicious threats when you
perform an action with them, such as moving them, copying them, or
opening them. If it detects a virus or virus-like activity, in most cases you
receive an alert telling you that a virus was found and repaired. How you
proceed depends on the operating system that you are using.
If you are using Windows 98/98SE/Me

If a virus or threat is found and repaired by Auto-Protect in Windows 98/
98SE/Me, you receive an alert telling you which file was repaired or
deleted.
To close the alert

4 Click Finish.
If you have set your options so that Auto-Protect asks you what to do when
it finds a virus, the alert asks you to choose an action. The recommended
action is always preselected.
Action Result
Repair the infected file Automatically eliminates the virus, Trojan horse, or
worm and repairs or deletes the infected file. When a
virus is found, Repair is always the best choice.
Quarantine the infected Isolates the infected file, but does not remove the threat.
file Select Quarantine if you suspect that the infection is
caused by an unknown threat and you want to submit
the threat to Symantec for analysis.
Delete the infected file Erases both the threat and the infected file. Select
Delete if Repair is not successful. Replace the deleted
file with the original program file or backup copy. If the
virus, Trojan horse, or worm is detected again, your
original copy is infected.
Action Result
Do not open the file, but Stops the current operation to prevent you from using
leave the problem alone an infected file. This action does not solve the problem.
You will receive an alert the next time that you perform
the same activity.
Ignore the problem and Adds the file that is suspected of containing a threat to
do not scan this file in the Exclusions list. When you add a file to the
the future Exclusions list, the file is excluded from any future
virus scans, unless you remove it from the list. Select
this option only if you know that the file does not
contain a virus.
Ignore the problem and Continues the current operation. Select this option only
continue with the if you are sure that a virus, Trojan horse or worm is not
infected file at work. You will receive an alert again. If you are not
sure what to do, select Do not open the file, but leave the
problem alone.
If a file cannot be repaired, you receive an alert telling you that the repair
was not made and recommending that you quarantine the file. You have
the same options as those listed in the table, with the exception of Repair
the infected file.
If you are using Windows 2000/XP

If a threat is found and either repaired or automatically deleted by Auto-
Protect in Windows 2000/XP, you receive an alert telling you which file
was repaired or deleted and which virus, Trojan horse, or worm was
infecting the file. If you have an active Internet connection, clicking the
virus name opens the Symantec Web page that describes the virus.
To close the alert

4 Click OK.
If the file cannot be repaired, you receive two alerts, one telling you that
Auto-Protect was unable to repair the file, and another telling you that
access to the file was denied.
See “If you have You can set your Auto-Protect options to try to quarantine any infected files
files in that it cannot repair. If you do this, you are informed if any files are
Quarantine” on
page 70. quarantined.
If a virus is found by Script Blocking
To resolve problems with unrepaired files

See “Perform a full 1 Run a full system scan on your computer to ensure that no other files
system scan” on
page 53.
are infected.
See “If a virus is 2 Follow the recommended actions in the Repair Wizard to protect your
found during a
scan” on page 65.
computer from the infected files.
If a virus is found by Script Blocking

See “Ensure that Script Blocking scans Visual Basic and JavaScript scripts for viruses. If it
protection settings
are enabled” on
detects a virus or virus-like activity, in most cases you receive an alert
page 51. telling you that a potential threat was found.
You must choose one of the options to remove the threat. The
recommended action is to stop the script from running. You can click Help
on the alert for additional information about how to respond.
If a threat is found by Worm Blocking

See “Ensure that If a program tries to email itself or email a copy of itself, it could be a worm
protection settings
are enabled” on
trying to spread via email. A worm can send itself or a copy of itself in an
page 51. email message without any interaction with you.
Worm Blocking continually scans outgoing email attachments for worms. If

it detects a worm, you receive an alert telling you that a malicious worm
was found.
The alert presents you with options and asks you what to do. If you were
not sending an email message at that time, then it is probably a worm and
you should quarantine the file. You can click Help on the alert for additional
information about how to respond.
After you have responded to the threat and deleted the file, you could still
have an infected system. Run LiveUpdate, scan your system, and, if
necessary, go to the Symantec security response Web page
(securityresponse.symantec.com) for the most up-to-date virus definitions
clean-up tools.
If you have files in Quarantine
If Inoculation alerts you about a change in

system files
w Inoculation protection is available on Windows 98/98SE/Me systems only.
See “Ensure that System files can change for a variety of reasons. You may have updated
protection settings
are enabled” on
your operating system or repartitioned your hard disk, or you could have a
page 51. virus. Norton AntiVirus alerts you when a change occurs in your system
files.
If you get an alert about a change in your system files, you have two
options. You can update your inoculation snapshot or repair the file. Before
you repair the file, be sure your virus definitions are up-to-date and run a
scan.
To respond to inoculation changes
4 In the Alert window, select the action that you want to take. Your
options are:
Update the saved copy of Use if the alert appears after a legitimate change
my Master Boot Record in system files.
Restore my Master Boot Use if you are certain the system did not change
Record for legitimate reasons.

Once a file has been placed in Quarantine, you have several options. All
actions that you take on files in Quarantine must be performed in the
Quarantine window.
To open the Quarantine window

3 In the Reports pane, on the Quarantined items line, click View

Report.
The toolbar at the top of the Quarantine window contains all of the actions
that you can perform on Quarantined files.
Add Item Adds files to Quarantine. Use this action to quarantine a

file that you suspect is infected. This action has no effect
on files that are already in Quarantine.
Properties Provides detailed information about the selected file and

the virus that is infecting it.
Repair Item Attempts to repair the selected file. Use this action if you
have received new virus definitions since the file was
added to Quarantine.
Restore Item Returns the selected file to its original location without
repairing it.
Delete Item Deletes the selected file from your computer.
Submit Item Sends the selected file to Symantec. Use this option if you
suspect that a file is infected even if Norton AntiVirus did
not detect it.
LiveUpdate Runs LiveUpdate to check for new protection and program

updates. Use this if you haven’t updated your virus
definitions for a while and then try to repair the files in
Quarantine.
If Norton AntiVirus cannot repair a file
To perform an action on a file in Quarantine

1 Select the file on which you want to perform the action.
2 In the toolbar, select the action that you want to perform.
3 When you are finished, on the File menu, click Exit.
If Norton AntiVirus cannot repair a file

See “Keeping One of the most common reasons that Norton AntiVirus cannot
current with
LiveUpdate” on
automatically repair or delete an infected file is that you do not have the
page 59. most up-to-date virus protection. Update your virus protection with
LiveUpdate and scan again.
If that does not work, read the information in the report window to identify
the types of items that cannot be repaired, and then take the appropriate
action.
File type Action
Infected files with .exe, .doc, .dot, or Use the Repair Wizard to solve the problem.
.xls file name extensions (any file See “Use the Repair Wizard” on page 66.
can be infected)
Hard disk master boot record, boot Replace using the Rescue Disks or your
record, or system files (such as operating system disks.
IO.SYS or MSDOS.SYS) and floppy See “About Rescue Disks” on page 36.
disk boot record and system files
If your computer does not start properly

See “About Rescue If you have a virus on your computer and need to start the computer from
Disks” on page 36
and “Create
an uninfected disk to remove the virus, or if you need to restore a boot
Emergency Disks” record, use your Rescue Disks. If you do not have Rescue Disks, you can
on page 22.
use your Emergency Disks to start the computer and remove the virus. If
you need to restore boot records and do not have Rescue Disks, or if you
need to restore system files, you must reinstall Windows.
If you need to use Rescue Disks (Windows 98/98SE/Me)

Sometimes a virus infection prevents your computer from starting
normally. Some viruses can only be removed if the computer is started
from a clean disk, not the infected hard disk. Often, a Norton AntiVirus
alert tells you when to use your Rescue Disks.
If your computer does not start properly
You first need to determine if your Rescue Disks are current. This means
that you have created or updated your Rescue Disks since you did any of
the following:
1 Added, modified, or removed internal hardware

1 Added, modified, or removed hard disk partitions
1 Upgraded your operating system
1 Updated virus definitions
If your Rescue Disks are not current, you can still use them to remove
viruses from your computer. When the Rescue Disk screen appears, use
only the Norton AntiVirus task.
To use your Rescue Disks

1 Insert the Basic Rescue Boot floppy disk into drive A and restart your
computer.
The Rescue program runs in DOS.
2 Use the arrow keys to select the program that you want to run.
A description of the selected program appears in the right pane of the
Rescue program. Your choices are:
Norton AntiVirus Scans your computer for viruses and repairs any
infected files
Rescue Recovery Checks and restores boot and partition information
3 Press Enter to run the selected program.

4 Follow the on-screen instructions for inserting and removing the
Rescue Disks.
5 When the Rescue program is done, remove the Rescue Disk from drive
A and restart your computer.
Look up viruses on the Symantec Web site
If you need to use Emergency Disks

See “Create If you have not created Rescue Disks, you can use Emergency Disks to
Emergency Disks”
on page 22.
restart your computer and scan for viruses.
To use Emergency Disks
1 Insert Emergency Disk 1 into drive A and restart your computer.
The Emergency program runs in DOS.
2 Ensure that Antivirus is selected, then press Enter to begin the
Norton AntiVirus Emergency program.
3 Follow the on-screen instructions for inserting and removing the
Emergency Disks.
The Emergency program automatically scans your computer and
removes viruses.
4 When the Emergency program is done, remove the Emergency Disk
from drive A and restart your computer.
If you are using the CD as an Emergency Disk

See “I cannot start If you are using the Norton AntiVirus CD as an Emergency Disk, you can
from drive A” on
page 80.
ignore all of the instructions to change disks, as all necessary information
is on the CD.
w You may need to change your computer’s BIOS Setup options to start from
the CD-ROM drive.
To use the CD as an Emergency Disk

The Emergency program scans your computer and removes viruses.
Look up viruses on the Symantec Web site

The Symantec Web site contains a complete list of all known viruses and
related malicious code, along with descriptions. You must be connected to
the Internet to look up viruses.
Look up viruses in Norton AntiVirus
To look up viruses
3 In the Reports pane, on the Online Virus Encyclopedia line, click View
Report.
The Symantec Web site opens in your Internet browser.
4 Use the links on the Web page to access the virus information for
which you are looking.

If you don’t have an active Internet connection, you can look up a virus
name from within Norton AntiVirus. The Virus List dialog box lists the
viruses in the current virus definition service files on your local computer.
Because of the large number of viruses, the Virus List file does not include
descriptions of each virus.
See “Keeping To ensure that you have the latest virus definitions, run LiveUpdate.
current with
LiveUpdate” on To look up virus names and definitions
page 59.
3 In the Reports pane, on the Virus List line, click View Report.
To get more information about a specific virus

1 In the Virus List dialog box, select the virus about which you want
more information.
2 Click Info.
3 When you are done viewing the list, in the Virus List dialog box, click
Close.
Troubleshooting
The information in this chapter will help you solve the most frequently
encountered problems. If you can’t find the solution to your problem here,
there is a wealth of information on the Symantec Web site. You can find
updates, patches, online tutorials, Knowledge Base articles, and virus
removal tools.
Explore the Symantec service and support Web site

The Symantec service and support Web site offers information focused on
your product and whether the product is for home or business use.
To explore the Symantec service and support Web site

1 Point your browser to www.symantec.com/techsupp
2 On the service and support Web page, click I am a home/small
business user.
3 On the introduction Web page, in the column on the left, click a link for
the information that you want.
If you cannot find what you are looking for using the links on the
introduction page, try searching the Web site.
78 Troubleshooting
Explore the Symantec service and support Web site
To search the Symantec service and support Web site

1 On the left side of any Web page in the Symantec service and support
Web site, click search.
2 Type a word or phrase that best represents the information for which
you are looking.
Use the following guidelines when searching the Symantec Web site:
2 Type a single word in lowercase letters to find all occurrences of
the word, including partial matches. For example, type install to
find articles that include the word install, installation, installing,
and so on.
2 Type multiple words to find all occurrences of any of the words.
For example, type virus definitions to find articles that include
virus or definitions or both.
2 Type a phrase enclosed in quotation marks to find articles that
include this exact phrase.
2 Use a plus (+) sign in front of all of the search terms and a space
between terms, if you use more than one term, to retrieve
documents containing all of the words. For example, +Internet
+Security finds articles containing both words.
2 For an exact match, type the search words in uppercase letters.
2 To search for multiple phrases, enclose each phrase in quotation
marks and use commas to separate the phrases. For example,
"purchase product", "MAC", "Norton SystemWorks" searches for
all three phrases, and finds all articles that include any of these
phrases.
3 Select the area of the Web site that you want to search.
4 Click Search.
Troubleshooting 79
Troubleshoot Norton AntiVirus problems

Here are some solutions to issues that might arise with Norton AntiVirus.
My Rescue Disk does not work

Due to the number of product-specific technologies used by manufacturers
to configure and initialize hard drives, the Rescue program cannot always
create a bootable disk automatically. If your Rescue Boot Disk does not
work properly, do one of the following:
1 If you have a special startup disk for your computer, add it to your
Rescue Disk set. In an emergency, start from that disk. Remove the
disk and insert your Rescue Boot Disk. At the DOS prompt, type
A:RSHELL, press Enter, then follow the on-screen instructions.
1 Use the Disk Manager or similarly named program that came with
your computer to make your Rescue Boot Disk bootable. Make sure to
test your modified Rescue Boot Disk.
Sometimes, your Rescue Boot Disk does not work properly because you
have more than one operating system installed, such as Windows 2000 and
Windows 98.
To modify your Rescue Boot Disk

1 Start up from your hard drive.
2 Insert your Rescue Boot Disk into drive A.
3 At the DOS prompt, type SYS A:
4 Press Enter.
This transfers the operating system to the Rescue Boot Disk. Be sure to
retest your Rescue Disks.
The alert tells me to use my Rescue Disks, but I did not create
them
See “To create With your Norton AntiVirus CD you can create Emergency Disks. Although
Emergency Disks
from the CD” on
they are not as powerful as the Rescue Disks you create, you can use the
page 22. Emergency Disks to recover from most common emergencies.
See “If you are You can use the CD that contains Norton AntiVirus as an Emergency Disk
using the CD as an
Emergency Disk”
if your computer can start from the CD-ROM drive.
on page 74.
Once you have created the Emergency Disks, use them to solve the
problem.
80 Troubleshooting
I cannot start from drive A

If your computer does not check drive A first on startup, use your
computer’s Setup program to change settings.
Be careful when making changes using your computer’s Setup program. If
you have never used it before, you may want to refer to your computer
manufacturer’s documentation.
To change your computer’s settings

A message appears telling you the key or keys to press to run SETUP,
such as Press <DEL> if you want to run SETUP.
2 Press the key or keys to launch the Setup program.
3 Set the Boot Sequence to boot drive A first and drive C second.
Setup programs vary from one manufacturer to the next. If you cannot
find the Boot Sequence option, use the Setup program’s Help system,
refer to the documentation that came with your system, or contact
your system’s manufacturer.
4 Save the changes, then exit the Setup program.
You may need to use a special boot disk rather than the Rescue Boot Disk.
In this case, use the boot disk or startup disk that came with your
computer.
See “My Rescue If your computer is set up with more than one operating system, such as
Disk does not
work” on page 79.
Windows 2000 and Windows 98, you may need to modify the Rescue Boot
Disk.
Auto-Protect does not load when I start my computer

If the Norton AntiVirus Auto-Protect icon does not appear in the lower-right
corner of the Windows taskbar, Auto-Protect is not loaded. There are three
likely reasons this is happening.
You may have started Windows in safe mode. Windows restarts in safe
mode if the previous shutdown did not complete successfully. For example,
you may have turned off the power without choosing Shut Down on the
Windows Start menu.
Troubleshooting 81
To restart Windows
1 On the Windows taskbar, click Start > Shut Down.
2 In the Shut Down Windows dialog box, click Restart.
3 Click OK.
Norton AntiVirus may not be configured to start Auto-Protect
automatically.
To set Auto-Protect to start automatically
4 Ensure that Start Auto-Protect when Windows starts up is checked.
Norton AntiVirus may not be configured to show the Auto-Protect icon in

the tray.
To show the Auto-Protect icon in the tray

4 Ensure that Show the Auto-Protect icon in the tray is checked.
I have scanned and removed a virus, but it keeps infecting

my files
There are four possible reasons a virus could be reappearing.
The virus might be in a program file with an unusual extension for which
Norton AntiVirus is not configured to look.
To reset Norton AntiVirus scanning options
3 In the Options window, under System, click Manual Scan.
4 Under Which file types to scan for viruses, click Comprehensive file
scanning.
5 Click Manual Scan > Bloodhound.
82 Troubleshooting
6 Ensure that Enable Bloodhound heuristics is checked, and click

Highest level of protection.
7 Click OK.
8 Scan all of the disks that you use and repair all infected files.
The source of the infection could also be a floppy disk. Scan all of the floppy
disks that you use to ensure that they are free of viruses.
See “If you need to Another reason could be that the virus is remaining in memory after you
use Rescue Disks
(Windows 98/98SE/
remove it from the boot record. It then reinfects your boot record. Use your
Me)” on page 72. Rescue Disks to remove the virus.
If the problem is a Trojan horse or worm that was transmitted over a shared
network drive, you must disconnect from the network or password protect
the drive to let Norton AntiVirus delete the problem.
Norton AntiVirus cannot repair my infected files

See “Keeping The most common reason that Norton AntiVirus cannot repair your infected
current with
LiveUpdate” on
files is that you do not have the most current virus protection on your
page 59. computer. Update your virus protection regularly to protect your computer
from the latest viruses.
If after using LiveUpdate the virus still cannot be repaired, the file may be
corrupted, or contain a new virus. There are two additional options:
See “If you have 1 Quarantine the file and submit it to Symantec.
files in
Quarantine” on 1 If a non-infected copy of the file exists, delete the infected file and
page 70.
replace it with the non-infected file.
I get an error when testing basic Rescue Disks

If you get the message Non-system disk, replace the disk and press any key
when testing your Rescue Disks, the Rescue program may not have
prepared the floppy boot files correctly.
To repair the Rescue Boot Disk without having to reformat the disk
and create a new Rescue Disk set
1 Remove the Rescue Boot Disk and restart your computer.
2 Insert the Rescue Boot Disk into the floppy disk drive.
3 On the Windows taskbar, click Start > Run.
4 In the Run dialog box, type SYS A:
5 Click OK.
Troubleshooting 83
I can’t receive email messages

There are three possible solutions to this problem.
Temporarily disable email protection. This might allow the problem email
message to download so that you can once again enable email protection.
You are protected by Auto-Protect and Script Blocking while email
protection is disabled.
To temporarily disable incoming email protection

3 In the Options window, under Internet, click Email.
4 Uncheck Scan incoming Email.
5 Click OK.
6 Download your email messages.
7 Reenable incoming email protection.
See “About Your email client may have timed out. Make sure timeout protection is
Internet options”
on page 42.
enabled.
If you continue to experience problems downloading email messages,

disable email protection.
To disable email protection
4 Uncheck Scan incoming Email.
5 Uncheck Scan outgoing Email.
6 Click OK.
I can’t send email messages

If you get the message, Norton AntiVirus was unable to send your email
message because the connection to your email server was disconnected,
your email client may be set to automatically disconnect after sending and
receiving mail.
For Norton AntiVirus to scan outgoing email messages for viruses, it

intercepts and scans the messages before they are sent to your email
84 Troubleshooting
provider. To resolve this issue, turn off this option within your email client.
Consult your email client manual for instructions on how to do this, or
disable Norton AntiVirus outgoing email scanning.
To disable outgoing email scanning
4 Uncheck Scan outgoing Email.
5 Click OK.
Service and support
solutions
The Service & Support Web site at http://service.symantec.com supports

Symantec products. Customer Service helps with nontechnical issues such
as orders, upgrades, replacements, and rebates. Technical Support helps
with technical issues such as installing, configuring, or troubleshooting
Symantec products.
Methods of technical support and customer service can vary by region. For
information on support offerings in your region, check the appropriate Web
site listed in the sections that follow.
If you received this product when you purchased your computer, your
computer manufacturer may be responsible for providing your support.
Customer service
The Service & Support Web site at http://service.symantec.com tells you
how to:
1 Subscribe to Symantec newsletters.
1 Locate resellers and consultants in your area.
1 Replace defective CD-ROMs and manuals.
1 Update your product registration.
1 Find out about orders, returns, or a rebate status.
1 Access Customer Service FAQs.
1 Post a question to a Customer Service representative.
1 Obtain product information, literature, or trialware.
86 Service and support solutions
Technical support
For upgrade orders, visit the Symantec Store at:

http://www.symantecstore.com
Technical support
Symantec offers two technical support options for help with installing,
configuring, or troubleshooting Symantec products:
1 Online Service and Support
Connect to the Symantec Service & Support Web site at
http://service.symantec.com, select your user type, and then select
your product and version. You can access hot topics, Knowledge Base
articles, tutorials, contact options, and more. You can also post a
question to an online Technical Support representative.
1 PriorityCare telephone support
This fee-based (in most areas) telephone support is available to all
registered customers. Find the phone number for your product at the
Service & Support Web site. You’ll be led through the online options
first, and then to the telephone contact options.
Support for old and discontinued versions

When Symantec announces that a product will no longer be marketed or
sold, telephone support is discontinued 60 days later. Technical
information may still be available through the Service & Support Web site
at:
http://service.symantec.com
Subscription policy
If your Symantec product includes virus, firewall, or Web content
protection, you may be entitled to receive updates via LiveUpdate.
Subscription length varies by Symantec product.
After your initial subscription ends, you must renew it before you can
update your virus, firewall, or Web content protection. Without these
updates, you will be vulnerable to attacks.
When you run LiveUpdate near the end of your subscription period, you are
prompted to subscribe for a nominal charge. Simply follow the instructions
on the screen.
Service and support solutions 87
Worldwide service and support

Technical support and customer service solutions vary by country. For
Symantec and International Partner locations outside of the United States,
contact one of the service and support offices listed below, or connect to
http://service.symantec.com and select your region under Global Service
and Support.
Service and support offices

North America
Symantec Corporation http://www.symantec.com/

555 International Way
Springfield, OR 97477
U.S.A.
Australia and New Zealand
Symantec Australia http://www.symantec.com/region/reg_ap/

Level 2, 1 Julius Avenue +61 (2) 8879-1000
North Ryde, NSW 2113 Fax: +61 (2) 8879-1001
Sydney
Australia
Europe, Middle East, and Africa
Symantec Customer Service Center http://www.symantec.com/region/reg_eu/

P.O. Box 5689 +353 (1) 811 8032
Dublin 15
Ireland
Latin America
Symantec Brasil Portuguese:

Market Place Tower http://www.service.symantec.com/br
Av. Dr. Chucri Zaidan, 920 Spanish:
12 andar http://www.service.symantec.com/mx
São Paulo - SP Brazil: +55 (11) 5189-6300
CEP: 04583-904 Mexico: +52 55 5322 3681 (Mexico DF)
Brasil, SA 01 800 711 8443 (Interior)
Argentina: +54 (11) 5382-3802
Every effort has been made to ensure the accuracy of this information.
However, the information contained herein is subject to change without
notice. Symantec Corporation reserves the right for such change without
prior notice.
July 25, 2002
88 Service and support solutions
Glossary
access rights The types of operations and files a user or

group can access and what the user or
group is permitted to do with those
directories and files.
administrator 1. A person who oversees the operation of a

network. 2. A person responsible for
installing programs on a network and
configuring them for distribution to
workstations. This person may also update
security settings on workstations.
alert A dialog box that appears in a graphical

user interface (GUI) to signal that an error
has occurred, or to provide a warning.
boot record A sector at the beginning of each disk that

identifies the disk’s architecture (sector
size, cluster size, and so on). For startup
disks, the boot record also contains a
program that loads the operating system.
browser A software application that makes

navigating the Internet easy by providing a
graphical user interface. This lets the user
click menus, icons, or buttons rather than
learn difficult computer commands. Also
called a Web client.
90 Glossary
compressed file A file that has been compressed using a

special data storage format in order to save
space on your disk.
download To transfer a file from one computer system

to another, through a modem or network.
Download usually refers to the act of
transferring a file from the Internet, a BBS
(bulletin board system), or a service such as
America Online.
email (electronic mail) A method of exchanging messages and files

with other people via computer networks. A
popular protocol for sending email is SMTP
(Simple Mail Transfer Protocol). Popular
protocols for receiving email are POP3
(Post Office Protocol 3) and IMAP4
(Internet Message Access Protocol 4). Web-
based email services use HTTP (Hypertext
Transfer Protocol) for sending and
receiving email.
executable file A file containing program code that can be

launched. Generally includes any file that is
a program, extension, or a system file.
extension The three-letter ending on a file name that

can associate the file with an activity or
program, so that double-clicking the file
causes the program to start. Examples
include .txt (text) and .exe (programs).
file type A code that is stored in each file that

associates it with a program or activity.
HTML (Hypertext Markup A standard language for documents on the

Language) World Wide Web. Codes inserted in a text
file instruct the Web browser on how to
display a Web page’s words and images for
the user, and define hypertext links
between documents.
icon A graphic symbol used to represent a file,

folder, disk, or other entity.
infected file A file that contains a virus, Trojan horse, or

worm.
Glossary 91
JavaScript A scripting language that is similar to, but

less capable than, Java. JavaScript code can
be included in Web pages to add
interactivity and other functionality.
known virus A virus for which Norton AntiVirus has a

definition. See also virus definition.
local A term that refers to your computer, as

opposed to a remote computer.
log A record of actions and events that take

place on a computer or handheld device.
network A set of computers and associated

hardware connected together in a work
group for the purpose of sharing
information and hardware among users.
operating system A program that ties the capabilities of

computer hardware and software to input/
output devices such as disks, keyboards,
and mouse devices.
password A character sequence entered by users to

verify their identities to a network or
program. The most secure passwords are
difficult to guess or find in a dictionary, and
contain a combination of capital letters,
lowercase letters, numbers, and symbols.
POP3 (Post Office Protocol 3) An email protocol used to retrieve email

from a remote server over an Internet
connection.
program A set of instructions that can be executed

by a computer, and are written for a specific
purpose such as word processing or
creating a spreadsheet. Also called
software.
Quarantine A disk location established by Norton

AntiVirus to isolate files suspected to
contain a virus so that the files can’t be
opened or executed.
92 Glossary
removable media Disks that can be removed, as opposed to

those that cannot. Some examples of
removable media are floppy disks, disk
cartridges (such as SyQuest and Bernoulli,
for example), CDs, and Zip disks.
script A list of instructions that can be executed

without user interaction. Unlike other types
of programs, scripts can be opened with
text editors or word processing programs,
so they are very easy to change. Examples
of scripts include Visual Basic programs
and network login scripts.
startup disk A disk that contains the system files

necessary to start your computer. Startup
disk usually refers to a floppy disk or CD
that can be used to start the computer in an
emergency.
threat A circumstance, event, or person with the

potential to cause harm to a system in the
form of destruction, disclosure,
modification of data, and/or denial of
service.
timeout A predetermined period of time during

which a given task must be completed. If
the timeout value is reached before or
during the execution of a task, the task is
canceled.
unknown virus A virus for which Norton AntiVirus does

not contain a definition. See also virus
definition.
Glossary 93
virus A self-replicating program intentionally

written to alter the way your computer
operates without your permission or
knowledge. A virus attaches copies of itself
to other files, and when activated, may
damage files, cause erratic system
behavior, or merely display annoying
messages. Self-replication differentiates
viruses from other virus-like computer
infections such as Trojan horse programs
and worms. See also virus-like activity.
virus definition Virus information that lets an antivirus

program recognize and alert you to the
presence of a specific virus. See also
unknown virus.
Virus List A list that shows all of the viruses for which
Norton AntiVirus has a virus definition. It is
important to update this list regularly.
virus-like activity An activity or action that Norton AntiVirus

perceives as the work of a possible
unknown virus. Virus-like activity alerts do
not necessarily indicate the presence of a
virus, but should be investigated.
Web page A single document on the World Wide Web

that is identified by a unique URL. A Web
page can contain text, hyperlinks, and
graphics.
Web site A group of Web pages managed by a single

company, organization, or individual. A
Web site may include text, graphics, audio
and video files, and hyperlinks to other
Web pages.
94 Glossary
worm A program that replicates without infecting

other programs. Some worms spread by
copying themselves from disk to disk, while
others replicate only in memory to slow a
computer down. So far, worms do not exist
in the Macintosh world.
write-protect Write-protecting disks prevents viruses

from infecting them. To write-protect a 3.5-
inch disk, slide the tab on the back of the
disk to uncover the hole through the disk.
Also referred to as a locked disk or
read-only disk.
Index
A C
accessing Options 40 CD-ROM drive, starting Norton AntiVirus
Activity Log 12, 45 from 74
Adobe Acrobat Reader, installing 48 changing scan schedules 57
AOL 62 changing settings 40
Automatic LiveUpdate 42, 63 CompuServe 62
Auto-Protect computer requirements 19
description 35 connecting to the Internet automatically 63
disabling 35 Contents tab in Help 47
enabling 35, 51 creating
failure to load on startup 80, 81 Emergency Disks 22
options 41 Rescue Disks 36
avoiding viruses 16 custom scans
changing schedule 57
deleting 55
B deleting schedule 58
backing up file before repair 43 running 55
Bloodhound scheduling 56
options 41
technology 14
booting D
absent 79 default options 44
Auto-Protect failure to load 80, 81 definitions of technical terms 46
changing floppy disk drive settings 80 deleting
floppy disk drive fails 80 custom scans 55
Rescue Disks fail 79 infected files 67
scan schedule 58
dialog box Help 47
96 Index
disabling Information Wizard

Automatic LiveUpdate 64 features 27
Auto-Protect 35 how to use 27
displaying the Norton AntiVirus toolbar 34 when it appears 27
Inoculation
alerts 70
E options 43
Emergency Disks responding to alerts 70
creating 22 instant messenger
using 74 options 42
using the CD 74 scanning transferred files 51
emergency preparations 17 support and options 11
enabling Internet options 42
Automatic LiveUpdate 42 Intrusion Detection service 60
Auto-Protect 35
Office Plug-in 43
J
JavaScript 15
F
file extensions, unusual 81
file scans 53 L
files, reinfected after virus removal 81 launching Norton AntiVirus 33
firewalls, using LiveUpdate 61 list of viruses 14
floppy disk scans 53 LiveUpdate options 42
floppy drives, unable to boot from 80 Log Viewer 12
folder scans 53 activities in 45
full system scans 53 contents 45
monitoring activities in 45
G
glossary 46 M
macros, defined 12
maintaining protection 16
H Miscellaneous options 43
hard drive scans 53 multiple schedules for a scan 57
Help
for dialog boxes 47
online Help 47 N
procedural 47 networks, using LiveUpdate 61
new features in Norton AntiVirus 11
Norton AntiVirus
I accessing from Windows Explorer 34
Index tab in Help 47 starting 33
infected files updating virus definitions 62
cannot repair 82 Windows tray icon 34
reinfected 81
Index 97
O Q
Office Plug-in Quarantine
enabling 43 files in 70
status 39 infected files in 67
online Help 47 options 71
online tutorials 50
online Virus Encyclopedia 49, 75
operating systems
R
multiple 79 registering your software 28
required for install 19 removable drive scans 53
Options removing
accessing 40 Norton AntiVirus from your computer 30
Auto-Protect 41 other antivirus programs 21
Advanced 41 previous copies of Norton AntiVirus 21
Bloodhound 41 Repair Wizard 66
Exclusions 41 repairing infected files
changing settings 43 in Windows 2000/XP 68
email in Windows 98/98SE/Me 67
Advanced 42 required computer configuration 19
scanning 42 Rescue Disks
Inoculation 43 absent 79
instant messenger 42 creating 36
Internet 42 defined 36
LiveUpdate 42 failure to start from 79
Manual Scan 41 testing 37
Bloodhound 41 updating 37
Exclusions 41 using 72, 73
Miscellaneous 43 restoring boot record and system files 72
Other 43 running custom scans 55
resetting defaults 44
Script Blocking 41 S
settings categories 40 safe mode 80
Other options 43 scan summary 66
scanning
P automatic 56
password protection during installation 23
option 12, 43 entire computer 53
Prodigy Internet connection 62 files at startup 43
product serial number 28 from a boot disk 72
individual elements 53
scheduling
custom scans 56
LiveUpdate 64
virus scans 56
98 Index
Script Blocking 15 U
monitoring by 51
uninstalling
options 41
Norton AntiVirus 30
virus found by 69
other antivirus programs 21, 22
security response Web page 49
previous copies of Norton AntiVirus 21
serial number 28
updating
Service and Support 85
from Symantec Web site 61
setting options 40
Rescue Disks 37
settings categories 40
virus protection 61
setup program, changing boot drive
User’s Guide PDF 48
sequence 80
starting
Norton AntiVirus 33 V
Norton AntiVirus from the CD-ROM viewing the Activity Log 45
drive 74 virus alert options 67
your computer from a floppy disk 72 virus definition service 14
startup virus definitions 14
Auto-Protect failure to load 81 alternate sources 61
changing floppy disk drive settings 80 described 60
floppy disk drive fails 80 downloading from Symantec Web site 61
Rescue Disks absent 79 updating with LiveUpdate 62
Rescue Disks fail 79 virus descriptions 14
scanning files at 43 Virus Encyclopedia 49
submitting files to Symantec 71 Virus List 75
subscriptions 60 virus protection
Symantec Response Center Web site 49 alerts 43
Symantec service and support Web site 77 system scans 53
Symantec Solutions Web site 49 updating 63
Symantec Store Web site 49 virus repair
Symantec Web site 49, 50, 75 in Windows 2000/XP 68
connecting to 34 in Windows 98/98SE/Me 67
downloading product updates 61 viruses
system status 38 avoiding 16
behavior 13
T defined 12
found by Auto-Protect 67
Technical Support 85
found during a scan 65
Technical Support Web site 49
looking up in Norton AntiVirus 75
testing Rescue Disks 37
looking up on Web site 74
tray icon 34
submitting to Symantec 71
Trojan horses 13
viewing descriptions 75
tutorials 50
Visual Basic scripts 15
Index 99
W
Web
filtering service 60
Web sites, Symantec 61
Windows Explorer menu, displaying 34
Windows operating systems 19
Windows safe mode 80
Windows tray icon 34, 35
Worm Blocking
introducing 12
monitoring by 14, 51
options 42
stops worms 15
threats found by 69
worms 13
100 Index
Norton AntiVirus
CD Replacement Form
CD REPLACEMENT: After your 60-Day Limited Warranty, if your CD becomes unusable, fill out and return 1) this form, 2) your damaged
CD, and 3) your payment (see pricing below, add sales tax if applicable), to the address below to receive replacement CD. DURING THE 60-
DAY LIMITED WARRANTY PERIOD, THIS SERVICE IS FREE. You must be a registered customer in order to receive CD replacements.
If your Symantec product was installed on your computer when you purchased it, contact your hardware manufacturer for CD replacement
information.
FOR CD REPLACEMENT
Please send me: ___ CD Replacement
Name ________________________________________________________________________________________________
Company Name _______________________________________________________________________________________
Street Address (No P.O. Boxes, Please) ____________________________________________________________________
City ______________________________________________________ State _______ Zip/Postal Code _________________
Country* _________________________________________ Daytime Phone _______________________________________
Software Purchase Date _________________________________________________________________________________
*This offer limited to U.S., Canada, and Mexico. Outside North America, contact your local Symantec office or distributor.
Briefly describe the problem: ____________________________________________________________________________
CD Replacement Price $ 10.00 SALES TAX TABLE: AZ (5%), CA (7.25%), CO (3%), CT (6%), DC (5.75%), FL (6%), GA (4%),
Sales Tax (See Table) ______ IA (5%), IL (6.25%), IN (5%), KS (4.9%), LA (4%), MA (5%), MD (5%), ME (6%), MI
Shipping & Handling $ 9.95 (6%), MN (6.5%), MO (4.225%), NC (6%), NJ (6%), NY (4%), OH (5%), OK (4.5%), PA
(6%), SC (5%), TN (6%), TX (6.25%), VA (4.5%), WA (6.5%), WI (5%).
TOTAL DUE ______ Please add local sales tax (as well as state sales tax) in AZ, CA, FL, GA, MO, NY, OH, OK,
SC, TN, TX, WA, WI.
FORM OF PAYMENT ** (CHECK ONE):

___ Check (Payable to Symantec) Amount Enclosed $_________ __ Visa __ Mastercard __ AMEX
Credit Card Number___________________________________________________________________ Expires __________
Name on Card (please print) _________________________________Signature ___________________________________
**U.S. Dollars. Payment must be made in U.S. dollars drawn on a U.S. bank.
MAIL YOUR CD REPLACEMENT ORDER TO:

Symantec Corporation
Attention: Order Processing
555 International Way
Springfield, OR 97477 (800) 441-7234
Please allow 2-3 weeks for delivery within the U.S.
Symantec and Norton AntiVirus are trademarks of Symantec Corporation.
Other brands and products are trademarks of their respective holder/s.
© 2002 Symantec Corporation. All rights reserved. Printed in the U.S.A.

Nav 2003

Uploaded by

Copyright:

Available Formats

Nav 2003

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Nav 2003

Uploaded by

Copyright:

Available Formats

User’s Guide

Norton AntiVirus™ User’s Guide

6. U.S. GOVERNMENT RESTRICTED RIGHTS:

If you’re installing Norton

On your desktop, double-click My Computer,

Which file system are you using?

w For detailed instructions and an animated Web tutorial that

If you use a FAT file system

Check for viruses that affect installation.

Insert the Norton AntiVirus CD into your CD-ROM

Run a full system scan.

Was a virus found?

w For detailed instructions and an animated Web tutorial that

If you use an NTFS file system

Check for viruses that affect installation.

Can you establish a connection to the Internet?

Was a virus found?

w For detailed instructions and an animated Web tutorial that

After you’ve checked for viruses, it’s safe to install

Uninstall any other antivirus programs on your

Close all open programs on your computer

Install Norton AntiVirus from the Norton AntiVirus

Did you see the message “Norton AntiVirus has

If you’re installing Norton AntiVirus for the first time

Chapter 1 About Norton AntiVirus

Chapter 2 Installing Norton AntiVirus

Chapter 3 Norton AntiVirus basics

Chapter 4 Protecting disks, files, and data from viruses

Chapter 5 Keeping current with LiveUpdate

Chapter 6 What to do if a virus is found

Service and support solutions

Norton AntiVirus provides comprehensive virus prevention, detection, and

What’s new in Norton AntiVirus

1 Expanded file repair and deletion

How viruses work

Computer viruses infect system files and documents created by programs

Macro viruses spread quickly

Trojan horses hide their true purposes

Worms take up space

How viruses spread

To prevent virus-infected programs from getting onto your computer,

How Norton AntiVirus works

Norton AntiVirus continually monitors your computer to protect you from

The virus definition service stops known viruses

Bloodhound technology stops unknown viruses

Script Blocking stops script-based viruses

Worm Blocking stops worms before they spread

Auto-Protect keeps you safe

Using Auto-Protect, Norton AntiVirus automatically:

How to maintain protection

See “Schedule 1 Schedule periodic scans to occur automatically.

Prepare for emergencies

Before installing Norton AntiVirus, take a moment to review the system

Installation of Norton AntiVirus is not supported on Windows 95/NT,

w If you are planning to upgrade your Windows operating system from

Your computer must also meet the following minimum requirements.

Operating system Requirements

Windows 2000 1 Intel Pentium processor (or compatible) at 133 MHz or

Windows XP 1 Intel Pentium processor (or compatible) at 300 MHz or