Questions about InnoculateIT

Hi,
I'm running InnoculateIT for about a month now and there are a few things I don't understand.
1. Rescue disk - How does this work? I thought it was a disk to scan in dos, but on reading the help, it seems to be a copy of my master boot disks. So, if they were infected would InnIT ask for the disk to replace the infection?
2. Dat files - I am accumulating a lot of them and wonder if the older ones can be removed (i.e. does the latest dat file contain all previous dats)?
3. I have real time protection boot https://discussions.virtualdr.com/n and file https://discussions.virtualdr.com/n. Does this include protection on the web, at websites, etc?
Thank you very much for any information on this. (I'm a former Mcafee user)
Sincerely, Nancee

I'd like to know the answers to these questions too, so I added my comment to get this post back on top.

------------------
The important thing is never to stop asking questions. Einstein

Hi Nancee, Summary from CA site:

Quote:

---

Can the virus signature update files be deleted? I have alot of the old virus updates on my PC.

Problem:
signature file update, delete old, aup, aup_.exe

Resolution:
Once you have applied the virus signature update to your copy of eTrust EZ Antivirus, you can delete the downloaded file.

The eTrust EZ Antivirus virus signature update files are cumulative and the latest virus signature update file contains the detection for all viruses detected in the previous virus signature update files.

Just download and apply the latest virus signature update file to your copy of eTrust EZ Antivirus and your virus detection will be up to date!

---

Forgot to add this link: http://www2.my-etrust.com/products/info/Antivirus/id2/2
That will give your answers on protection. You'll notice there is no listing for real time email scanning.

------------------
"Don't know where I'm goin but there's no sense being late"

[This message has been edited by griffinspc (edited 02-04-2002).]

Nancee, took me a little while to find it but if you go here: http://home.earthlink.net/~rmbox/Reticulated/Toys.html

and go down about 2 from the bottom, you'll find the eicar.com test virus you can download. It's harmless but you'll be able to use it to test your AV software. You can even include it in an e-mail you send to yourself and see what protection you have.

I've had it for years and it's very useful and I would have e-mailed it to you but didn't want to scare you to death. https://discussions.virtualdr.com/ https://discussions.virtualdr.com/ https://discussions.virtualdr.com/

------------------
"Don't know where I'm goin but there's no sense being late"

Hi Griffinspc!
I had a little problem with that eicar test. I downloaded the zip file (AV-Test.zip) and right clicked on it and scanned with InnoculateIT. It said no viruses found https://discussions.virtualdr.com/
Then I unzipped it to my desktop - it showed up as a folder titled AV-Test. I scanned that too, and it said no viruses found.
Am I doing something wrong or is my InnoculateIT not working?
Thank you.
(The read me seemed to indicate the file should be called Eicar.com - but mine isn't
https://discussions.virtualdr.com/ )
Sincerely, Nancee

Okay - I got InnoculateIT to recognize it. I copied the string in the read-me file and as soon as I saved it, InnIT identified it as the Eicar test string (it was txt at this point). When I changed it to Eicar.com it was detected as a virus. Also, I noticed in the read-me file it said the AV-Test file will not be recognized as a virus. I was getting worried InnoculateIT wasn't properly scanning my zip files! https://discussions.virtualdr.com/
Thank you Griffinspc for your help.
Sincerely, Nancee
Also, thank you for the link you provided, it was helpful!

Sorry. I should have said that you should change the extension to .com.

I think most sites have it set as a zipped file so you can download it without it setting off all sorts of alarms.

Did you email it to yourself?

------------------
"Don't know where I'm goin but there's no sense being late"

Hi Griffinspc!
No I didn't e-mail it to myself. I'm on AOL so I don't think anything would be detected in the mail. Maybe I'll try it and see what happens. I'll let you know.
(I was confused over the eicar.com because even after I unzipped it, it called itself AV-Test not eicar, so I copied and pasted the string in notepad.)
Sincerely, Nancee

Well, InnoculateIT's working well https://discussions.virtualdr.com/. I couldn't send it to myself. When I selected the file to put in as an attachment InnIT told me it was the eicar string test. When I clicked "open" to complete sending the attachment I got a notice telling me I wasn't allowed to open the file and to see the administrator, etc.
Thanks for suggesting that Griffinspc - I'm very happy with the results!
Sincerely, Nancee


[This message has been edited by Nanceel0 (edited 02-04-2002).]

someone told me you could delete the older versions of aup's so that's what I do..
seems to be okay

------------------
"If it ain't broke, work on it til it is"

Running InoculateIT here... have had a bit of experience with both email and web site viruses... Got an email virus from some guy who visited one of my sites so it emailed itself to me... Then on my ladyfriends PC she went to a site and clicked an infected link.... InoculateIT freaked and protected in each case.... I was pleased. And of course a full scan after the occurances killed the remnants...

------------------
"Some mornings it's just not worth chewing through the leather straps!" Emo P.

Thanks so much Abby and Adhoth! These are good things to hear. https://discussions.virtualdr.com/
Sincerely, Nancee