Load !Killer by double clicking it's icon. After a short time a screen will
be displayed reminding you of the legal position regarding VProtect and
!Killer. Click on the Close box of that window to proceed.

!Killer's icon will then appear on the right of the icon bar, with 'Ready'
beneath it. If this does not happen, and you get the message 'Internal
integrity check failed' instead, stop using that copy of !Killer.

!Killer will check whether any viruses are already loaded, and either remove
them, or render them impotent in the case of ones which cannot easily be
removed from memory. Error boxes are used to report any viruses discovered. 

You will also get a warning from !Killer if it finds that VProtect is not
loaded (or indeed if it was loaded, and is removed).

As supplied, !Killer is set up to scan adfs::0 by default. This is easily
alterable, and is covered shortly. However, to avoid making this too verbose
these instructions assume initially that none of the options have been
altered.

A scan may be started in several ways:

a) By clicking MENU on the icon, and then SELECT on 'Scan'.

b) By clicking SELECT on the icon.

c) By dragging a directory/application to the icon.

d) By clicking on any filing system icon (this facility is off by default).

e) In response to an attempt to load a virus - !Killer will offer to scan
the source of the attempted infection (this facility is off by default).

f) By pressing SHIFT/CTRL/TAB with the mouse pointer in a filer window.

Before the scan begins you will be asked 'Do you want to scan...' followed
by the path. If the path is very long, it will not all be shown. Click OK to
start the scan, or Cancel to abort the scan. During this the word below the
icon bar icon will change to 'Waiting'.

When you click on 'OK' the window will disappear, and a new window entitled
'Virus Killer' will appear. Most of the time this will act as a progress
window showing which file is currently being checked (the text below the
icon bar icon will say 'Looking'). There are two boxes in the window, Abort
and Pause. Abort stops the run, and Pause suspends the run until Continue is
clicked.

If an infection is found an error box will be displayed to draw your
attention to it. If the progress window is at the back of the desktop you
may bring it to the front by clicking SELECT on the icon bar icon. A message
in red, of the form 'MyMOD virus loaded by....' will indicate the nature of
the problem. Three options are offered, Abort, Remove and Skip. Abort
terminates the scan at that point. Skip ignores the problem and continues
the scan. Remove will cure the problem, either by deleting the file, or by
removing the offending line from a !Boot file. The text below the icon bar
icon will change to 'Virus' when an infection is found, or '!Boot' when a
!Boot file which loads a virus is found.

At the end of the scan an error box saying 'Scan of ... completed' will be
displayed - this is provided so that you can know a scan has finished even
it you had put another window on top of the progress display. The text below
the icon bar icon will say 'Scanned' at this point.

The progress window will say how many objects were checked, and how many
infections were found. When you have seen this, click OK. !Killer will now
attempt to send it's log file to an editor (such as !Edit). The log file not
only details infections, but also takes a very critical look at the contents
of !Boot files, reporting anything it thinks could possibly be used for
suspicious activities. When reporting an infection it also includes the time
and date stamp of the file, which in some cases can be useful for tracing
back the spread of an infection to the original source.

A little practice soon makes log files simple, and you may like to keep them
to allow comparison with files in the future. By default log files are saved
in the Logs directory within !Killer.

The behaviour of !Killer is controlled by an Options file, and by various
menu options. A facility is provided to allow you to save the current
options and customise !Killer's operation to suit it's environment.

In the rough caricatures that follow, a / to the left of a menu entry shows
that it may be ticked depending upon circumstances, and a > to the right
shows that it leads to a submenu.
    

The main menu:

 _____________
|    Killer   |
|-------------|
|  Info     > | Displays an information box giving version number etc.
|  Scan       | Starts a scan. Will be grey until a FS and Device are chosen.
| /FS       > | Select the current FS. Will be ticked if one is chosen.
| /Device   > | Select the current device. Will be grey until a FS is chosen.
|  Options... | Alter how the program behaves. 
|  Quit       | Quit the program
 -------------

The FS menu:

 ____________
| Filing Sys |
|------------|
|/adfs       | This lists whichever FSs are available. If there is only one
 ------------   it will be ticked automatically.

The Device menu:

 ____________
| Device     |
|------------|
|/:0         | This lists whichever devices are available on the current FS.
 ------------   If there is only one it will be ticked automatically. In the
                case of a network where you are not logged on to any server
                the message 'Log on!' will be displayed in grey.


The Options dialogue box:

(this may also be reached directly by clicking ADJUST on the icon bar icon)


The box is split into functional groups.

Scanning
--------

Confirm : Whether to seek user confirmation before beginning a scan, or
removing an infection.

Notify : Whether to notify the user when a virus is found, or a scan is
complete.

Immediate : Whether !killer should start a scan of it's default FS and
Device as soon as it is loaded.


Auto-Kill
---------

The 'Auto Kill' section has just one option :

'On' whether to turn the facility on. The purpose of this facility is to
provide an easy way to immediately clean up a source of infection when it is
discovered. It works by offering a scan of <Obey$Dir> immediately after an
infection of some kind has been discovered. Note that on systems using
VProtect this will never occur since VProtect will prevent such files from
ever being loaded. 


Auto-Scan
---------

The 'Auto Scan' section has two options, 'On' and 'Intelligent'. You may
only alter the setting of 'Intelligent' when the facility is turned on. 
This facility may be used to insist upon offering a scan whenever any filing
system icon is clicked. This means that, for example, any new floppy can be
scanned before it is seen by the desktop. By turning off the confirm option
the scan will start automatically. The 'Intelligent' option makes the
assumption that hard discs, and any discs which have been seen before,
should not be checked every time.


Log-File
--------

The settings for the log file may not be altered whilst a scan in in
progress.   

'On' turns log file generation on/off.

'Keep' prevents the log file from being deleted after it has been loaded or
mailed electronically.

'Load' causes the log file to be sent to the resident text editor (!Edit for
example). If the text editor cannot be found the text will be scrolled on
the screen in a window.

'EMail' turns on the facility where a copy of the log file is sent via
electronic mail. This facility does not work with !MailMan, and therefore
should not be used outside Acorn. The writable field is used to specify the
address for the mail/

'Path' specifies where log files are kept. This is normally in the logs
directory within !killer. However you may wish to change it if a) you want
to write protect the floppy, or b) you want to use a faster media. To change
the path click SELECT within the icon, type in the new path, and press
RETURN. Should the error 'Not a directory' be produced the original path
will be put back in the icon, and you should check and then re-enter the
path you wanted to use.


Save Options
------------

Click on this icon to save the current settings. The current FS and Device
are also saved, and become the default FS and Device when !killer is next
loaded. By turning on the 'Immediate' scanning option !killer will scan that
FS and Device as soon as it is loaded.

Hide Options
------------

This facility allows !Killer to be set and left running, with the
possibility of alteration of the settings minimised. While it is turned on
clicking MENU brings up a reduced menu consisting only of Info, Scan and
Quit. The full menu may be produced by CTRL-MENU. The options dialogue box
may be accessed directly by CTRL-ADJUST on the icon bar icon.


About !Killer
-------------

!Killer has been compiled using the DABS PRESS ABC Basic Compiler, and
therefore needs both ABCLib and FPEmulator to run.

!Killer originated in Acorn, and is now developed, marketed and supported by
Pineapple Software (Telephone (+44)(0)81 599 1476).
                          

About Viruses
-------------

It is almost certain that there are, or will be, viruses which !killer does
not know about. To assist in the development of !killer please send a
clearly marked sample of any virus you discover to Pineapple Software or
Acorn's Customer Services department. In cases where the virus infects a
file, or an application, please include an example.


Using !Killer with compressed filesystems
-----------------------------------------

!Killer is able to handle compressed files in two formats:

a) By Computer Concepts' Compression. CFS will show up as a filesystem -
simply select the device to scan as usual.

b) By Mark Smith's ARCFS utility, which allows Spark-style archives to be
handled in situ. 
