The magazine of the Melbourne PC User Group
Norton AntiVirus Gold 5.0
Bob Burt
 bobburt@melbpc.org.au

It should not be necessary to stress, to any readers of computer software articles such as this, the importance of protecting your programs and files against virus attacks, particularly as the growing popularity of the Internet increases the risks of picking up infected files. It is sufficient to say that there are a just a handful of first-class programs that can fill the bill by providing reliable protection. NAV Gold 5.0 is one of them.

The package

NAV 5.0, in its Gold version, consists of virus protection products for Windows 95/98, Windows NT, Windows 3.1x and DOS. You, like me, would probably need to use just one of them. In my case, I used the version to suit Windows 95. A CD-ROM installation disc is provided, plus an emergency boot-up floppy disk and a set of floppy installation disks for Windows 3.1x and/or DOS.

A slim User's Guide is provided, containing all the required instructions and advice.


Figure 1.  NAV main screen


Figure 2. NAV options


Figure 3. Repair wizard reports infected file

Installation

This is certainly straightforward for Windows 95/98 users. You follow the onscreen messages to install the program and prepare the three rescue disks recommended for emergency start-up if NAV 5.0 finds a virus in memory. NAV then provides for:

  • Automatic loading of the program each time you start the computer
  • An automatic scan of your disks once a week
  • Protection when you download files from the internet
  • Protection when you receive e-mail.
Running the program

NAV 5.0 provides a very simple interface, from which you can:

  • Scan drives, individual files or directories for viruses
  • Schedule virus scans
  • Update your Norton rescue disks
  • Customise NAV 5.0
  • Use online Help
  • Quarantine infected or suspect files
  • Submit a potentially infected file to SARC (Symantec AntiVirus Research Center) for analysis.
I n my test run of the program for this article, I scanned my C: drive and checked 4075 files in 9 minutes 33 seconds. Along the way, one .COM file was ear-marked as "exhibiting virus-like activity". The "virus" was not identified and, to follow the recommended procedure, I "quarantined" the offender. This enabled me to check further by calling up LiveUpdate, the Symantec Internet Web page that provides free updates to the virus check and repair listings. The required .EXE file was duly downloaded, containing the SARC Intelligent Updater and the new material. However, checking the quarantined file with the updated material in place was still not successful in identifying or subsequently removing the "virus" from the file.


Figure 4. Scanning files for viruses

Figure 5. Detection of virus behaviour


Figure 5. NAV could not repair, so quarantines it

However, I was not actually greatly concerned about the possibility of an actual infection, since the file passed muster with both VBuster and the Norton System Doctor, a component of Norton Utilities that is always active on my computer and which generates its own virus scan and also employs LiveUpdate and uses Rescue disks. The file in question is SD.COM, which is generated by the installation of a rather early black-and-white graphics scanner called ScanDo. Perhaps NAV 5.0 is suspicious of this program's activity because it calls up a run-time version of Windows 3, under which the scanner operates.

Conclusion

These days, it is certainly preferable for a virus-protection program to occasionally produce a false indication of virus activity rather than miss a true infection. If you are undecided about a file that has been earmarked as suspicious, you can always send a copy to SARC for analysis.

Whatever virus-protection program you select to safeguard your programs and data, you should ensure that the originators provide regular free updates and response to urgent enquiries. Symantec and NAV 5.0 clearly do this.


Figure 7. Scan results


Figure 8. Quarantuned item.


Figure 9. SARC Intelligent Updater

Reprinted from the February 1999 issue of PC Update, the magazine of Melbourne PC User Group, Australia

[About Melbourne PC User Group]