background image

Introducing Norton AntiVirus Corporate Edition 

8

How Norton AntiVirus prevents infections

A virus is a computer program designed so that, when run, it attaches a 
copy of itself to another computer program or document. Thereafter, 
whenever the infected program is run or a document containing a macro 
virus is opened, the attached virus program is activated and attaches itself 
to yet other programs and documents. In addition to replicating, viruses are 
generally programmed to deliver a payload. Most viruses simply display a 
message on a particular trigger date. Some, however, are programmed 
specifically to damage data by corrupting programs, deleting files, or 
reformatting disks.

Symantec engineers track reported outbreaks of computer viruses to 
identify new viruses. Once a virus is identified, information about the virus 
(a virus signature) is stored in a virus definitions file, which contains the 
necessary information to detect and eliminate the virus. When Norton 
AntiVirus scans for viruses, it is searching for these telltale virus signatures. 

The Norton AntiVirus LiveUpdate feature makes sure your virus protection 
remains current. Updated virus definitions files are available from Symantec 
regularly. With LiveUpdate, Norton AntiVirus connects automatically to a 
special Symantec Web site, determines if your files need updating, 
downloads the proper files, and installs them in the proper location.

Virus infections can be easily avoided. Viruses that are quickly detected 
and removed from your computer cannot spread to other files and cause 
damage. Norton AntiVirus uses a variety of methods to detect file, boot, 
and macro viruses early:

File System Realtime Protection: Constantly monitors activity on your 
computer by looking for virus signatures when a file is executed or 
opened, and when modifications have been made to a file, such as 
renaming, saving, moving, or copying a file to and from folders.

To supplement detection of known viruses, Norton AntiVirus includes 
a powerful component called Bloodhound. With this advanced 
heuristic technology, Norton AntiVirus can detect a high percentage of 
new or unknown viruses not yet analyzed by anti-virus researchers.

Signature-based scanning: Norton AntiVirus relies on signature or 
pattern-based scanning to detect viruses. Norton AntiVirus searches for 
residual virus signatures in infected files. This search is called a scan. If 
a virus signature is detected, Norton AntiVirus notifies you that one or 
more of your files is infected. 

Содержание 10551441 - AntiVirus Corporate Edition

Страница 1: ...Norton AntiVirus Corporate Edition User s Guide...

Страница 2: ...Documentation may include technical or other inaccuracies or typographical errors Symantec reserves the right to make change without prior notice No part of this publication may be copied without the...

Страница 3: ...an authorized dealer postage prepaid for a full refund at any time during the sixty day period following the delivery to you of the Software LIMITED WARRANTY Symantec warrants that the media on which...

Страница 4: ...4...

Страница 5: ...unmanaged protection 14 Chapter 3 Using Norton AntiVirus Corporate Edition What Norton AntiVirus Corporate Edition does 15 Getting started 16 Opening Norton AntiVirus Corporate Edition 16 Navigating...

Страница 6: ...anaging the Quarantine 34 Rescanning files in the Quarantine 34 Clearing Backup Items 36 Submitting a potentially infected file to Symantec Security Response for analysis 36 Setting an exclusion 37 In...

Страница 7: ...ent users For administrators Chapter 2 Managing Norton AntiVirus presents a few issues that relate to standalone clients and managed clients For client users Chapter 3 Using Norton AntiVirus presents...

Страница 8: ...ed virus definitions files are available from Symantec regularly With LiveUpdate Norton AntiVirus connects automatically to a special Symantec Web site determines if your files need updating downloads...

Страница 9: ...tures and behavior With this information they develop a virus definition that Symantec products use to detect and eliminate the new virus during scans At least weekly and whenever a destructive new vi...

Страница 10: ...Introducing Norton AntiVirus Corporate Edition 10...

Страница 11: ...AntiVirus server These computers running in connected mode join a group of managed computers monitored by a network administrator Managed computers can be more closely monitored and virus intrusion po...

Страница 12: ...ditionally realtime status of virus submissions to Symantec and definitions deployment to infected endpoints is available from the Central Quarantine console Convenient update options for networked co...

Страница 13: ...ng what to scan Norton AntiVirus File System Realtime Protection scans all file types by default Manual scheduled custom and startup scans also examine all file types by default You can choose to scan...

Страница 14: ...lient You must uninstall the standalone client for Windows 3 x DOS before rolling out the managed client If the Norton AntiVirus Corporate Edition standalone client is installed on a server that you w...

Страница 15: ...or viruses Managing the Quarantine What Norton AntiVirus Corporate Edition does Norton AntiVirus Corporate Edition safeguards computers from virus infection no matter what the source Computers are pro...

Страница 16: ...Edition virus protection may be either a standalone or an administrator managed installation The procedures in this chapter assume a standalone installation with the preset or default option settings...

Страница 17: ...y Disk and Scan Computer are tasks in the Scan category Individual icons represent each category in the left pane When you click categories and other items in the left pane the right pane responds wit...

Страница 18: ...s Corporate Edition makes a backup copy of infected items before attempting a repair After verifying that Norton AntiVirus Corporate Edition cleaned an infected item of viruses you should delete the c...

Страница 19: ...e viruses that have infected your computer with additional relevant information about the infection Scan Histories Keep track of the scans that have occurred on your computer over time Scans are displ...

Страница 20: ...orate Edition main window click Help On the Help menu click Help Topics New Custom Scan If you regularly scan the same set of files or folders you can create a Custom Scan restricted to those items At...

Страница 21: ...initions files are not updated after installation Symantec supplies updated virus definitions files that contain the necessary information about all newly discovered viruses at least weekly Make it a...

Страница 22: ...server 5 Click Next to start the automatic update Note If necessary you can configure the LiveUpdate Internet connection or specify a proxy server To do so open LiveUpdate from the Windows Start menu...

Страница 23: ...ot use LiveUpdate You can download the updates from the Symantec Security Response Web site For more information see To visit the Symantec Security Response Web site on page 21 If you don t have a mod...

Страница 24: ...s no need to scan the message itself Turning File System Realtime Protection off temporarily Every time you start your computer File System Realtime Protection makes sure your computer is virus free S...

Страница 25: ...ans faster by scanning only files with selected extensions such as exe com dll doc and xls Although this method offers less protection it is an efficient way to scan because viruses affect only certai...

Страница 26: ...Windows loads Custom scans Scan specified file sets at any time A single weekly Scheduled Scan of all files is generally sufficient protection as long as File System Realtime Protection is always runn...

Страница 27: ...uble click a drive or folder to open or close it Click the check box to select or deselect items The symbols mean the following The file drive or folder is not selected If the item is a drive or folde...

Страница 28: ...n begins the scan and reports the results You can scan a single file without opening the Norton AntiVirus Corporate Edition program To scan a single item In a My Computer or Explorer window right clic...

Страница 29: ...are to scan all files clean the virus from an infected file and quarantine the infected file if the virus cannot be removed Note If you change settings they apply only to the scan that you are schedu...

Страница 30: ...the tree control check boxes to specify where to scan You can check anything from the entire computer to a single file For more information see Using on demand scans on page 26 7 If desired click Opti...

Страница 31: ...e file For more information see Using on demand scans on page 26 7 If desired click Options to change to default settings for what is scanned and how to respond if a virus is detected Generally it is...

Страница 32: ...ion of the scan results are reported If no viruses are detected the list box is blank and the status is completed If viruses are detected during the scan the dialog box includes the name of the infect...

Страница 33: ...file Delete Permanently Deletes the infected file Move To Quarantine Places the infected file in the Quarantine Properties Displays information about the virus Depending on the preset action for a vir...

Страница 34: ...e to clean a virus from an infected file on detection but to place the file in the Quarantine if it cannot be cleaned To manually add a file to the Quarantine 1 Open Norton AntiVirus Corporate Edition...

Страница 35: ...local Quarantine will be aware when updated virus definitions arrive and will take an automatic action configured by your administrator For example the action may be to silently scan clean and restore...

Страница 36: ...analysis Sometimes Norton AntiVirus Corporate Edition cannot clean a virus from a file Or you suspect a file is infected and is not being detected Symantec Security Response formerly known as Symante...

Страница 37: ...infected A false positive occurs when Norton AntiVirus Corporate Edition detects remnants of virus code in files that have been partially cleaned for example by other virus protection programs The vi...

Страница 38: ...r example If you copy a large folder that is in the exclusions list and prescan exclusions is enabled the copying process is shorter since the folder contents are excluded prior to scanning If you cop...

Страница 39: ...from a scan 38 exclusions about 37 setting 38 L LiveUpdate immediate update 22 scheduled update 22 Lotus Notes Realtime Protection 24 M managed clients benefits 11 differences from standalone clients...

Страница 40: ...e items 28 scheduled 28 29 startup 30 Scheduled Scans deleting 29 scheduled scans about 26 scheduling 28 29 servers migrating 14 setting anti virus policy 13 standalone clients benefits of managed cli...

Отзывы: