[Dr.Web] menu contains three commands
         [DOS shell], [About...], and [Exit].

[Test]   menu contains five commands
         [Test memory], [Scan], [Cure],
         [Statistics], and [Report].

[Setup]  menu contains three commands
         [Desktop], [Options], and [Paths].

Speedkeys:

Alt-X, Alt-F4  - Shell to DOS,
F1             - Help,
F5             - Scan (a given file, directory,
                 drive),
Ctrl-F5        - Cure (a given file, directory,
                 drive),
F9             - Display configuration options
                 panel,
F10, Space     - Main menu,
Tab, Shift-Tab - Move  from  one menu field to
                 another,
Esc            - Abort scanning.
{}
Unknown error!
{}
File not found!
Specify the pathname correctly.
{}
Disk error!
If this happened  during  writing,
check whether there is enough free
disk space.
{}
Memory allocation error!
Reboot the system and repeat
the command once again.
{}
Insufficient memory space!
Free the memory and repeat
the command once again.
{}
Dr. Web's environment settings corrupted!
Possibly, error in memory allocation.
{}
Disk error!
..., probably at physical level!
Check your disk!
{}
Error reading REPORT file!
Probably,you opened a nonexistent REPORT
file. Deselect the DON'T CREATE button in
the REPORT FILE field in OPTIONS panel.
{}
Drive not found!
Type a different drive name letter.
{}
[DOS Shell] command
   temporarily  interrupts  Dr. Web  to  shell to
   DOS. To resume Dr. Web  session, type EXIT and
   press RETURN.

[About] command
   displays information about Dr. Web.

[Exit] command
   terminates the current Dr. Web session.
{}
[Test memory] command
   scans computer memory for resident viruses  at
   any time in a scanning session.

[Scan] command
   scans  user-defined  drives,  directories, and
   files  for   computer  viruses  or  suspicious
   files.

[Cure] command
   removes  viruses  from boot sectors and files.

[Statistics] command
   displays full statistical data for each  drive
   tested  in  the  current scanning session.

[Report] command
   opens  the  REPORT file containing the results
   of testing or curing of memory, boot  sectors,
   drives and files. Its name is specified in the
   REPORT FILE text box in the panel displayed on
   choosing  the  FILES... command from the SETUP
   menu.  This  field is operative only if either
   the  OVERWRITE  or APPEND button in the REPORT
   FILE  field  in the OPTIONS panel of the SETUP
   is selected.
{}
[Desktop...] command
   provides  a  few  options  for configuring the
   screen   display   mode   to    suit    user's
   preferences.

[Options...] command
   provides a few options for configuring the way
   in which scanning progress is reported on  the
   screen.

[Paths...] command
   is used to specify the  pathnames  and  search
   pattern of files that are essentional for  the
   normal operation of Dr. Web program.
{}
The original boot sector  is  not  found  in  the
"hide-out" where the detected virus must  conceal
it. Either this virus is a modification  of  some
known virus and hides the boot  sector  elsewhere
or your computer is  infected  with  a  few  boot
viruses such that one virus  is  superimposed  on
another. If  this  is  the  case,  your  computer
cannot be booted from such an infected disk.

For help, call the technical maintenance service
of DialogueScience,Inc., Moscow.
{}
This  virus  does  not  save  the  original  boot
sector.  If   you  permit  Dr. Web  to  cure  the
machine, a standard  boot sector will be restored
instead  of  the  original  boot  sector  of your
machine.  DO NOT permit Dr. Web to cure your disk
if  it  is  formated  by   nonconventional   disk
administrators  like  ADM,  Disk  Manager, SSTOR,
etc., otherwise data on your disk may be lost.
{}
You  can  suppress  this  prompt by selecting the
TEST  ONE  FLOPPY  ONLY  check  box  in the panel
displayed  on  choosing  the DESKTOP command from
the SETUP menu.
{}
The   file  cannot  be  restored  because  it  is
infected by

(1) an  overwriting virus which does not save the
 original  program  code, or

(2) a companion virus, or

(3) a trojan virus, or

(4) the file is damaged beyond repair.

Delete and restore the file from a backup copy.
{}
Curing  is  not possible because your computer is
protected  by  SHERIFF  security system. To clean
the computer, quit Dr. Web,  disable SHERIFF, and
then cure your computer.
{}
Dr.  Web  has   detected   self-infection.   This
happens, as  a  rule, when Dr. Web is infected by
an  hitherto-unknown virus.   Close   down   your
computer  and  forward a copy of the infected Dr.
Web  program  to  its  designer or our authorized
dealer.  Soon  you  will  receive   a   cost-free
add-on database file to kill  the  virus  or  the
next  upgraded  version  capable of detecting and
eradicating this virus.
{}
This message warns you that the file had one size
prior to  opening  and  a  different  size  after
opening.  Possibly,  memory  contains  an  active
resident virus that has  infected  the  file.  In
such a case, the file size  increases.  Or  there
may be an active stealth virus in the memory that
is trying to hide its  copy  in  the  file  being
tested. In such a case, the file size decreases.

Close  down  the  computer, reboot from a "clean"
bootable diskette and test the suspected files.
{}
Drive not ready!
Insert a diskette into drive
and repeat the test or abort testing.
{}
This panel displays full statistical information
about the drives checked in the current scanning
mission.
{}
Screen mode
-----------
 [X] Expanding windows
     smoothly  and  gradually opens menu and
     message panels.

 [X] Mouse support
     provides mouse support. Deselect this option
 if a nonstandard  mouse  driver  not  compatible
 with  Microsoft  mouse  is  installed  in   your
 machine.

 [X] Load screen font
     loads national screen fonts
     of Dr. Web program.

 [X] Beep
     option enables and disables sound  alarm  on
 detecting known viruses in memory, boot  sectors
 or files.

 [X] Autosave setup
     automatically   saves    the    user-defined
 settings in  the  configuration  file  DRWEB.INI
 prior to ending a session or shelling to DOS.

Additional preferences
----------------------

 [X] "Snow" prevention
             If  snow  appears  on  CGA monitors,
             check this item to suppress the glow
   of electron beam in its reverse scanning path.

 [X] Screen output via BIOS
             uses BIOS Int 10h to send the output
             to  the  screen.  This mode  is very
   slow  compared to direct access of videomemory
   which  is the default mode. Check this item if
   problems  arise  in  outputing  to  screen  by
   direct access of videomemory.

 [X] Print "Ok" after filename
             writes "Ok" after the name of a file
             on the  screen if the file is  found
   clean in the course of testing.

 [X] Print packer name
             writes  the  name  of   the  packer,
             achiver,  or the encoder programs in
   the  scanning  progress window. This option is
   operative  only  if  the  CHECK PACKED,  CHECK
   ARCHIVES,  or CHECK E-MAIL box is selected  in
   the  FILES  field  of  the  panel displayed on
   choosing the OPTIONS command  from  the  SETUP
   menu.

 [X] Report for each drive
             generates a report containing   the
             scanning results upon completion  of
   scanning a logical drive.  To resume scanning,
   click or choose OK from the report panel.

 [X] Test one floppy only
             will not  prompt  you  for   testing
             another  diskette.   Deselect   this
   option  when  you  want  to test more than one
   diskette.

Language (if available)
--------
  tells Dr. Web to display menus and messages  in
  the  selected  language  if   an    alternative
  language is supported.

Color Scheme
------------
  Choosing one of the six option buttons, adjust
  the color display to suit best your preference:

 () Color 1   Default  color  scheme  of Dr. Web
               program,
 ( ) Color 2   This  scheme is created with Turbo
               Vision,
 ( ) Color 3   This  scheme  is drawn from Norton
               Utilities Version 5,
 ( ) Color 4   This  scheme  is drawn from  ADinf
               program,
 ( ) Mono 1    Both  these  schemes  display  the
               message in white against black
 ( ) Mono 2    background.  Choose Mono 1 or 2
               that is  best  suited for your
               monitor.

Screen height
-------------
   Vertical size of screen displays
 ()  25 lines
 ( )  30 lines
 ( )  45 lines
{}
Main settings
-------------
   are  the  basic    configuration    parameters
   controlling the operation of Dr. Web.

 [X] Memory test
             tells Dr.Web to verify the memory at
             the start  of each scanning session.
   The memory  range  to  be  tested is  selected
   in this panel in the MEMORY RANGE field.

Memory range
------------
 ( )  640   - conventional memory
 () 1088   - conventional memory, UMB, and  HMA.

 [X] Boot sector test
             tells Dr.Web to scan the master boot
             record and boot sectors of drives.

 [X] Heuristic analysis
             tells Dr.Web to check files and boot
             sectors  of  drives  for   new   and
   unknown  viruses.  In  this  mode Dr. Web will
   verify whether a program is an executable file
   or  a virus code.

[X] Check TSR viruses
             tells Dr.Web to check the changes in
file size (if any) at the time of  executing  the
seek and open  commands.  Many  resident  viruses
infect a file when it is opened  for  reading  or
writing.  Resident  stealth  viruses,   on    the
contrary,  try  to  conceal  their  presence   in
infected files.

Files
-----
   field contains check boxes to tell  Dr. Web to
   verify  packed  files  and  to  cure  infected
   files.  The cure check box is  operative  only
   when  the CURE command is chosen from the TEST
   menu or when its speedkey Ctrl-F5 is pressed.

 [X] Check packed
             When this  box  is  selected, packed
             files   will  be   exploded   in   a
   temporary directory prior to testing. For this
   purpose, you must specify a drive for creating
   a temporary directory in the TEMP  DRIVE  text
   box  in  the panel displayed  on  choosing the
   FILES... command from the SETUP menu.

 [X] Check archives
             box tells Dr.WEb to check the  files
             inside an archive file created  with
   ARJ, PKZIP, RAR, LHA, ZOO, ICE and HA.

 [X] Check E-mail
             tells  Dr.Web  to  check  the  files
             encoded  by  UUENCODE    and    MIME
             utilities.

 [X] Delete damaged
             When this box is selected,  Dr.  Web
             will delete the virus  infected  and
  damaged files that do not yield to restoration.


 [X] Prompt for cure
             When this  box  is selected, Dr. Web
             will ascertain  your intention prior
   to  curing an infected file. When this box  is
   deselected,  Dr. Web will automatically remove
   virus codes from infected files.

Infected files          defines the  method   for
--------------          removing   viruses   when
                        cure command is selected.

 () Cure               Deletes the  virus  codes
                        from infected files.

 ( ) Delete             Deletes  infected   files
                        from the drive.

 ( ) Rename             Renames infected files by
                        substituting "V" for  the
                        first   letter   in   the
filename extension.  Files of extensions COM and
EXE are renamed with the default name  but  with
extensions VOM and VXE, respectively.

Report file         will  create  a    file   for
-----------         writting the results of every
                    scanning mission.

 ( ) Don't create   Report file is not created.

 ( ) Overwrite      The results of every scanning
                    mission  will  be overwritten
                    in the report file.

 () Append         The results of every scanning
                    mission  will  be appended at
                    the  end  of   the   existing
                    report file.

The name of the report file is to be specified in
the  menu box [Setup]|[Files]|[Report file name].
If  the  full  pathname  of  the  report  file is
entered  in  this  box, the results of a scanning
mission can be viewed through the command [Test]|
[Report].

{}
Virus database path
-------------------
   In this text box, you type and edit  the  path
   name of the  directory  where  virus  database
   files are stored.

Database search pattern
-----------------------
   In the text box, you can type a search pattern
   for finding add-on update files  to  the  main
   virus  database.  Upon  finding  them,  Dr.Web
   automatically appends them to the  main  virus
   database DRWEBASE.VDB, which is released  once
   along with the program update.  Add-on  files,
   DRWvvvnn.VDB, are released almost  once  every
   week. Registered users can obtain them free of
   cost from our authorized dealers.

Temp drive
----------
   In the   text box, type the name letter of the
   drive where  Dr. Web  can  create  a temporary
   directory for  exploding  and  testing  packed
   files. The  TEMP  DRIVE must be READ/WRITE and
   have enough free space (about 500-1000 Kb) for
   storing temporary  files.  If  there  is a RAM
   drive of  sufficient space in your machine, it
   is  a  good idea to specify it as a TEMP DRIVE
   as this  will speed up the work.

Report file name
----------------
   In this text box, type the full pathname where
   you  want  Dr. Web to create a REPORT FILE for
   writing the results of scanning sessions.

File type
---------
   field contains four option  boxes for choosing
   the type of files to be tested:

 ( ) All files    files of any extension;

 () By format    files having internal structure
                  of executable  program  modules
                  (COM, EXE, SYS), Winword "macro
                  containing"  documents    (DOC,
                  DOT),  and  Excel  spreadsheets
                  (XL?);

 ( ) Programs     executable  files  of extension
                  COM,  EXE,  SYS, BAT, CMD, DRV,
                  BIN, DLL,  OV?,  BOO, PRG, VXD,
                  386, SCR, FON,  DO?,  XL?, WIZ;

 ( ) User-defined In  the  text  box  under  this
  À COM EXE SYS  field,  you can enter  and edit
                  the  type of  files  and  their
   filename  extension.  Only  files  of the type
   specified in this  text  box  will  be  tested
   and  cured  in  scanning  sessions, unless you
   type a  different file  specification  in  the
   panel displayed on choosing  the  SCAN command
   from the TEST menu. For  example, if the user-
   defined  files  field  specifies  COM  and EXE
   files  but you specify BIN files  in  the SCAN
   command panel, then Dr. Web will  verify  only
   BIN  files and ignore COM and EXE files in the
   current session.
{}
In the text  field  of the SCAN PATH panel,  type
the name  of  a drive, directory, subdirectory or
file for testing and curing. The  pathname can be
specified with global wildcard characters; e.g.,
C:,  C:\DOS, C:\DOS\*, C:\DOS\FILE.*, C:\DOS\*.*,
... If several paths are specified  concurrently,
they must be separated by intervening spaces, for
example, C: D:\FILE.EXE E:\UTIL\UNKNOWN\*.COM.

The global  characters  *  and *: denote that all
logical drives in the hard disk must be scanned.
{}
Insufficient space  in  TEMP  DRIVE for exploding
this packed  file.  Specify  a  different   drive
having sufficient  free  space  for  creating   a
temporary directory  in  the  text box under TEMP
DRIVE  in the  panel  displayed  on choosing  the
PATHS...  command from  the SETUP menu. Otherwise
the  whole  or a part of the file will be skipped
in scanning.
{}
This file  or  the  boot   sector of the drive is
infected. Unless  you  permit Dr. Web to cure the
situation, the consequences will be unpredictable
and disastrous.
{}
Virus databases not found!
Virus  databases  essential  for  searching   and
curing are missing. Check whether they  exist  in
the disk or whether  the  path  and  pattern  are
properly specified in the VIRUS DATABASE PATH and
DATABASE SEARCH PATTERN fields.
{}
Main virus database not found!
There is no  main  virus  database  DRWEBASE.VDB.
Check whether this file exists  in  the  disk  or
whether the  VIRUS  DATABASE  PATH  and  DATABASE
SEARCH PATTERN fields of the FILES group  in  the
SETUP panel are properly filled in.
{}
You have typed certain options that are not valid
for Dr. Web command line. Type the  command  line
properly and run Dr. Web once again.
{}
Memory seems to  contain  an  active  TSR  virus.
Reboot  the  computer  from  a  "clean"  bootable
diskette containing the Dr. Web program and  test
the memory and drives in your system.
{}
