README FIRST!

Before installing or running F-PROT Professional for Windows 95
the first time, please verify that your F-PROT Professional disk
is write-protected. If you suspect your computer has a virus,
boot from a floppy disk that is write-protected and then scan
for viruses.

For a list of International Distributors of F-PROT Professional,
see the DISTRIB.TXT file, located on disk #3.

There is now a file included on the first installation diskette,
called FILESNEW.TXT It is a list of file descriptions and files that
have changed since the previous release.

In addition to the full version release of F-PROT Professional, we 
distribute updates that are available on our BBS, FTP and Web
site. These updates include the changes from the last version 
released, but are not the full product. Updates should not be applied
to versions more than 1 release behind the update version.
 
The easiest way to use the update file is to: 
1.  Place the update file in a temporary directory.
2a. If you have chosen the .EXE version, execute that file.
    All updating functions will occur automatically.
2b. If you have chosen the zipped version, extract the files. 
    After you have unzipped the update, run the FP32UP.EXE file.
    All updating functions will occur automatically.
3.  The new files will overwrite the existing files. 
4.  If you are working with the .ZIP version of the update, and 
    prefer to copy the files manually, it may be necessary to close 
    a file, such as the real-time protection DVP, so it may be updated.
    If the update is for DVP, this may be accomplished by clearing 
    the Enable DVP checkbox (Preferences/Active Protection). After 
    updating, be sure to re-enable DVP.

RELEASE NOTES
___
Notes on F-PROT Professional for Windows 95 v2.27
6/9/97

PRODUCT ENHANCEMENTS
New virus signatures have been added for this release.

F-MACRO functionality is now integrated into the main scanner used
in F-PROT Professional for Windows 95 and in DVP. It is therefore 
unnecessary to use the separate F-MACRO.EXE scanner. Additionally,
you can now copy updates of the MACRO.DEF file to F-PROT 
for quick and easy updates of macro virus signatures. The MACRO.DEF 
file is updated frequently on our Web and FTP sites to provide maximum 
protection. 

There is a new option, "Remove all macros if variant is found", now
available for scan tasks and for DVP. If this option is selected, all 
macros are removed from any file containing a new or modified 
variant of a macro virus. The "Remove all..." option is located in the 
Properties dialog box, directly below the Scan method, and in the Active
Protection (Preferences|Active Protection|Dynamic Virus Protection)
dialog box. This new option is only available when the Action to take 
is "Disinfect" or "Disinfect/Query". If this option is not selected, 
and the Action to take is "Disinfect" or "Disinfect/Query", files that 
contain remnants or are variants of macro infections are renamed.
This option works the same way as the /REMNANTS switch in F-MACRO.EXE.

For Administrators: There are 3 new settings available in the 
SETUP.INI file. They are: 
  ScanHMA=       This allows you to enter either YES or NO to
                 have F-PROT Professional scan the High Memory Area.
                 The default is YES. Example: ScanHMA=YES
                 Located in [ActiveProtection]
    
  InstallFNET=   This allows you to enter either YES or NO to
                 have F-PROT Professional install F-NET.EXE to the hard
                 drive. The default is YES. Example:INSTALLFNET=YES
                 Located in [F-PROT for Windows NT]
  F-NET.EXE provides workstation to FPN server communication, preserves
  the last access date when network files are scanned, and it allows
  compressed and migrated to be skipped during a network scan.If a 
  person selects NO and already has the product installed, it will 
  still remove F-NET on the next installation. This setting should be 
  used if you are not using Netware servers, otherwise, F-PROT32 may 
  give an error saying "Unable to propagate servers ".

   
  PrevReq=       This allows you to enter either YES or NO to
   PrevReqMsg=   have F-PROT Professional check to see if a previous 
                 version of F-PROT Professional is installed on your
                 system. This is useful in preventing an unauthorized
                 installation. The default is NO.
                 Example: PrevReq=YES. If you use this option you can 
                 also enter a custom message. Example:
                 PrevReqMsg=Call Ext.12 if you wish to install F-PROT
                 Located in [SETUP]
Modifications should be made to SETUP.INI prior to installation. 


FIXES


SPECIAL NOTES
The task that is used to create a custom configuration for using the
right mouse feature has been renamed. The new name is r-mouse.fpt. The
instructions given in the 4/17 release have been modified to reflect
this change.

Notes on F-PROT Professional for Windows 95 v2.26
4/17/97

PRODUCT ENHANCEMENTS
New virus signatures have been added for this release.

As of this release, there is now a way to customize the task 
for scanning from the shortcut menu. To use this new feature,
select the "New Task" button and name the task "R-mouse". 
It is necessary to use this name only. The name is not 
case sensitive, but you cannot include spaces. After the 
task named R-mouse is created, you can select the 
"Action to take". Anything entered in the "Drive/paths to scan" 
box will be ignored, and the selected file(s) scanned instead. 
Options in the "Files" box can be modified as usual. When 
complete, simply right click on the folder/file (either on the 
desktop or in Explorer)that you want scanned and choose 
"F-PROT Virus Scan" from the shortcut menu.

A new version of F-MACRO is now included in all versions of F-PROT
Professional. F-MACRO is a DOS utility that is used to scan for macro
viruses in Microsoft Word and Excel files. This can be used from DOS 
and from a diskette. As of this release, F-MACRO has an additional file
associated with it. That file is named MACRO.DEF. MACRO.DEF contains 
the virus signatures and must be located in the same directory as 
F-MACRO.EXE. The installation of F-MACRO requires that you copy the 
SE_FMAC.EXE (a self executing zipped file located on the installation 
diskettes) file to a unique directory. You can then extract it by 
executing the file. Once SE_FMAC is run, there will be three files, 
MACRO.DEF, F-MACRO.EXE and F-MACRO.TXT. We recommend that you copy 
these files to a floppy diskette in addition to leaving them on the 
hard drive.

FIXES
After a scheduled scan was completed, the tooltip for the blue 
F-AGENT icon, displayed in the tray portion of the taskbar,
was not updated to indicate when the next scan would occur. 
This is now fixed.

We fixed a problem concerning the naming of .fpt (F-PROT Task) files
that resulted in the following error message: 
 "Could not synchronize internal name with .fpt filename. 
  File may be marked as read-only."

We have fixed a problem that caused a GPF if over 255 characters
are used when renaming a task. They are limited to 80 Characters.
There were some reports of F-PROT causing data on floppy disks to 
become inaccessible when disinfecting a virus. This is now fixed.

SPECIAL NOTES
F-PROT Professional creates tasks with an extension of .FPT.
This extension is then associated with F-PROT Professional.
We have made a change so that now, if you use a program that 
uses the .FPT extension, such as FOXPRO, F-PROT does not modify 
the association. However, we now have three options to choose
from by editing the SETUP.INI file prior to installation. They
are: SKIP, OVERWRITE and PROMPT. SKIP which is the default, 
leaves the current association alone. OVERWRITE associates all
files with the .FPT extension to F-PROT. PROMPT asks if we should
overwrite the current association and associate with F-PROT. 
SETUP.INI can be found on the first installation disk. To edit 
the SETUP.INI locate the key AssociateUsed= under the section 
heading [FPT Task Files]. The existing entry, SKIP, can then be 
changed to PROMPT or OVERWRITE.

The /OLD command line switch can now be used when starting F-PROT32.EXE
from the command line to prevent the display of the warning message 
that F-PROT uses to inform you that the version is old and needs to be 
updated. This may be used in a batch file or from the MS-DOS prompt 
as follows:     <Path>    F-PROT32.EXE /OLD

We have received some questions regarding the way the "Automatically 
Deny Access" option for DVP under Active Protection works.
In the past, many of our users requested the ability to view the files 
on the infected floppy after notification of an infection. For this 
reason, the "Automatically Deny Access" option is not in place. 
We will be changing this for future versions. We suggest the "Action
on infection" option for DVP be set to "Disinfect" rather than "Report 
only" under these conditions. 

Running F-PROT.EXE from the F-PROT Rescue disk made in Win95 will not 
scan the boot sector if formatted in VFAT32.  After giving a warning 
that it was unable to scan the boot sector, it will continue to scan 
sub directories if you press enter.

Notes on F-PROT Professional 2.25 
for Windows 95
(Includes Patch 1 and Patch 2 details under the BUG FIXES section)
2/25/97

PRODUCT ENHANCEMENTS
New virus signatures have been added for this release.
 
We have added the ability to disinfect macro viruses in files which
are read-only.

We have added a new message to inform you if a file cannot be deleted
or disinfected because the disk is write protected.

Support for VFAT32 is included with this release of F-PROT Professional
for Windows 95. In addition, we are now able to scan the MBR.

The report file will now display "Scanning inside ZIP files" if they 
are included as a target to scan.

Support for NetWare Client 32 (Novell's service) has been added to this
release. This allows an administrator to configure F-PROT Professional
to run on a NetWare server and fixes an error initializing DVP. At the 
present time there are some limitations, which only affect files on a 
NetWare file server not on a Microsoft network or local workstation. 
These are as follows: We only scan files on executes (opens)- not on 
closes, and there is no disinfect or delete of infected files. There is
a report if an infection is discovered. These issues will be resolved 
for the next release.

For FPN and AlertTrack users: 
Notification of virus infections at the workstation, now can be sent 
to AlertTrack. Version 2.25 of FPN needs to be loaded to enable this
feature, and FPN Administration must be configured to use AlertTrack. 
If both AlertTrack and FPN are loaded, the message will be sent by 
the method configured (pager, broadcast etc.)in AlertTrack. 

To set this up choose Preferences/Network.../Netware 
then select Log infections. Next select the FPN server, from the 
drop-down list box, to send the message to. Alerts will indicate that 
an infection has been found and show the SERVER NAME/USER NAME/ADDRESS.
Both the on-demand scanner and DVP, the real-time scanner, send 
notification of virus infection to AlertTrack.

BUG FIXES
(v.2.25 patch 2)-There were some reports of an inability to exit the
Setup program of F-PROT Professional for Windows 95. It was then
necessary to end the task using CTRL-ALT-DEL. This is now fixed.

(v.2.25 patch 2)-There was a report that the shortcut command of
"F-PROT Virus Scan", accessed by clicking the right mouse button on a 
file or folder, was preventing "Add to Zip" and "Quick View" from 
displaying in the shortcut menu. This is partially fixed. "Quick View" 
displays as it should, but "Add to Zip" will display on folders only, 
not with files. This can be resolved by re-installing WinZip.

(v.2.25 patch 2)-When clearing the "Log Infections" check box under
Preferences/Network, the FPN server name to log to is now cleared in
the registry. 

(v.2.25 patch 2)- There was a problem when F-PROT Professional for 
Windows 95 was installed on a computer that was not connected to a 
network and DVP detected a virus. DVP would try to communicate with a 
NetWare server which caused the computer to crash. This is now fixed.

(v.2.25 patch 1)- We have repaired a conflict with our file ACTIVITY.DLL 
and the Microsoft IntelliMouse driver. This conflict prevented the scroll 
wheel on the mouse from functioning.

A cosmetic problem with F-PROT Professional for DOS macro virus 
identification has been fixed. If F-PROT Professional for DOS detects
a macros virus, a screen displays warning you that you must use either 
F-MACRO or one of the Windows products to disinfect. The problem was 
that the display contained extraneous text characters.

We have fixed a bug in F-PROT which caused GPF's when scanning an .XL? file
on a write-protected drive.

The report window scan progress gauge will now function properly when
scanning subdirectories.

When F-PROT Professional is installed in a read-only directory, F-NET
and F-PROT32 will now communicate properly. 

The ability to choose retry or cancel when attempting to scan an empty
floppy disk drive, now functions correctly.  

An intermittent problem (if you use the feature which allows you to log 
infections to an FPN server) where the F-NET log reports that is has 
lost it's connection to an FPN server, has been fixed.

SPECIAL NOTES
If an infected file is sent by e-mail, using the feature located under 
Preferences/Network/Messaging, the extension will always begin with a 
"v", as in .V??.

We have included a beta copy of a new version of the F-PROT for DOS 
scanner which includes the ability to disinfect macro viruses. This 
scanner eliminates the need to run an additional scan with F-MACRO,
since it contains the same identification and disinfection for
macro viruses as F-MACRO, F-PROTW, F-PROT32 and DVP. However, there
is no support for the /REMOVEALL and the /REMNANTS switches which
are available in F-MACRO.  

The beta F-PROT for DOS file is a self extracting file called 
SE_FPROT.EXE. When it is extracted it will be called F-PROTM.EXE. 
When it is ready for final release it will be called F-PROT.EXE. If 
you are running this beta version of F-PROT for DOS from a floppy disk 
we recommend a memory manager (such as QEMM, 386^MAX, or HIMEM.SYS 
(DEVICE=HIMEM.SYS) in CONFIG.SYS) be present to increase the speed 
of the task. F-PROTM.EXE requires 460 KB of disk space and 444 KB 
of RAM. The current release version of F-PROT.EXE requires 150 KB 
of disk space and 412 KB of RAM.

Notes on F-PROT Professional 2.24c1
for Windows 95
11/01/96

DVP.VXD (Dynamic Virus Protection which provides real-time protection) now
includes detection and disinfection of the ExcelMacro/Laroux virus.

We have also fixed some minor problems with DVP.VXD which occured when
DVP was in the middle of scanning a boot sector and was asked to scan a
file on close. F-AGENT.EXE would occasionally cause a GPF when first
installed. This is now fixed. We have corrected a problem with F-PROT32.EXE
when scanning read-only drives, and document files. The new F-NET.EXE
corrects a problem where servers were having connections entitled
NOT-LOGGED-IN.

Notes on F-PROT Professional 2.24c
for Windows 95
9/13/96

Detection and disinfection for both Hare and Laroux (the Excel macro virus)
are included with this version of F-PROT Professional for Windows (all
platforms). Therefore, it is no longer necessary to scan with F-HARE
or F-XL.EXE. We have also added many other new virus signatures.

F-PROT Professional now contains the .XL? extension for files to scan.
This file will be automatically added to your list of files to include.
You may delete it if you do not wish to have these files scanned.
To do this, access "Preferences" and then "Files to Include/Exclude". Select
"Files to Include", click on .XL? and select "Delete".

We have added a new file, FPWCFG.EXE, which allows Administrators to
modify F-PROT32.EXE. Modifying F-PROT32.EXE will permit the administrator
to restrict the ability to scan network drives, to disinfect, and also
prevent a user from turning off DVP (real-time protection) by preventing
access to the Active Protection menu item. FPWCFG.EXE is a separate
file, included on the installation diskettes and with a download of F-PROT
Professional for Windows 95, but it is not copied to the hard drive during
installation. If you wish to keep a copy located in your F-PROT directory,
you must copy it manually. 

We have provided a method which allows modification of the F-PROT32.EXE file
to occur prior to distribution. The idea is to configure F-PROT Professional
for your needs and still be able to run the setup program for installation.
You can also simply use FPWCFG.EXE to modify F-PROT32.EXE after installation
or to adjust your setting selections. Various methods are described below.

If an Administrator is planning on modifying F-PROT32.EXE prior to
distribution on diskette, please use the following procedure:

1. From the Windows 95 "Start" menu, select "Run". Execute the SETUP program
   for F-PROT and add the word "Admin" to the run line as follows:
                            A:SETUP ADMIN
2. Setup will proceed as usual. However, during setup the FPWCFG.EXE program
   will execute automatically and prompt you to make your changes.
3. After making your changes, choose the save button within FPWCFG.EXE.
4. Setup will ask for a blank diskette. This diskette will become the
   replacement for the original disk #2, and will have the modified
   F-PROT32.EXE, but not FPWCFG.EXE.
5. Use the new disk for distribution.

Another way to run FPWCFG.EXE is to copy it to your F-PROT directory, locate
it from Explorer, and double-click.
The F-PROT Config dialog box will open. Browse and select the F-PROT32.EXE
file and then select the Options button. The default installation will show
all options with an "X" in the box, i.e. selected. From the Options dialog
box you may select or clear the capability of scanning the network and
allowing disinfection. You may also select or clear Active Protection.
When you clear the Active Protection check box, the user will no longer be
able to access the Active Protection menu item from the Preferences menu.
To modify again, simply run FPWCFG.EXE again and change the options.

F-MACRO.EXE is now shipped with all F-PROT products. It is a self extracting
file called SE_FMAC.EXE. F-MACRO is the DOS utility which can be used to
disinfect macro viruses for Word and Excel. Please note that 2 new switches
"REMOVEALL", and "REMNANTS" have been added. These new switches are for
MS WORD documents only. After exploding the self extracting file, check the
F-MACRO.DOC file (a text file) for a full description.

We have also added the following features to F-PROT32.EXE:

1. A built in self test which determines if any changes have been made to the
file. If so, we will display a dialog box indicating that we may be infected.

2. There are interface improvements to the task list.  We keep the selected
task visible in the task list window. If you have a large number of tasks,
you'll find yourself scrolling down to locate the task. The last selected
task is re-selected on program load. This keeps the most frequently used task
accessible.

3. The maximum number of copies of F-PROT32 you may have running
at once is now five.

4. If neither of the e-mail options are selected in the "Messaging" dialog box
(located from the "Network" menu in "Preferences") then the File/Send menu
option in the F-PROT Report Window (which displays after a scan is run)
will be disabled.

Our next release will support for VFAT32 to allow F-PROT Professional
for Windows 95 to scan the MBR. We apologize for any inconvenience that
this may cause.

F-NET.EXE, the component responsible for logging to F-PROT Professional
for NetWare, can no longer communicate with versions 2.23a or earlier.
If you're running FPN, please update to 2.24c or higher.

F-PROT PROFESSIONAL for DOS
We have added some new return codes for F-PROT.EXE. RETURN CODE 90 indicates
that a macro virus has been found. The return codes (0-8) which currently
exist will function as usual. However, if there is a macro virus detected, the
second digit following the 9 will indicate the return code. For example, 3
indicates a boot/file virus has been found. If the return code is 93 it means
that a macros virus was also found.

If you will be scanning Excel files for Laroux with the DOS version of F-PROT,
please be advised that detection but not disinfection is offered. Be sure to
add the XL? extension to any existing scans. The /DOC switch will also scan
all XL? files plus DOC files, in this version.

Special Notes from previous versions of F-PROT Professional:

In an effort to reduce the size of the readme files we remove most of the notes
from older versions as they become less relevant. We will, however, leave 
certain notes which are still pertinent.

If you have an evaluation copy of F-PROT Professional and the evaluation
  period has expired: To eliminate the Free trial period expiration message,
  you can either purchase the product and reinstall, or simply uninstall
  using Windows 95 Add/Remove Programs function.
 
Notes on 2.22.2
When F-PROT completes a scan, it updates the last results field in the 
current FPT (F-PROT Task) file. If the F-PROT files are on a network
directory that prevents writes, F-PROT will normally display an error
message when attempting to update the file. 

Because many network administrators have chosen to run F-PROT from a 
protected directory on the network, we now check for the read-only file
attribute on an .FPT file prior to updating it. If the attribute is set,
we will not attempt to update the .FPT file, and the error message will not
appear when trying to update the file.

TECHNICAL SUPPORT

Command Software Systems has greatly expanded its technical support to
include a variety of electronic services. You may contact us at any one
of the following:

Command Software Systems, Inc.
1061 E. Indiantown Rd., Suite 500
Jupiter, FL  33477

     Voice: 561/575-3200 8:00 am to 8:00 pm EST.
     Fax: 561/575-3026
     BBS: 561/575-1281
     CIS: 75300,3645 (Type GO PCVENF at any CIS ! prompt. We're in section 9.)
MCI Mail: COMMAND
Internet: 75300.3645@compuserve.com, support@commandcom.com
     FTP: ftp.commandcom.com

World Wide Web: http://www.commandcom.com

In Europe contact:

Command Software Systems, Inc. 
UK Branch
Ground Floor	
Millbank Tower
Millbank
London SW1P 4QP

   Voice: +44 171 931-9301
     Fax: +44 171 931-9302
     BBS: +44 171 931-9303
Internet: command@command.co.uk
          helpdesk@command.co.uk
          sales@command.co.uk
