User Guide

Removing Infections From Your System
74 Dr Solomon’sAnti-Virus
Understanding false detections
A false detection occurs when Dr Solomon’s Anti-Virus sends a virus alert
message or makes a log file entry that identifies a virus where none actually
exists. You are more likely to see false detections if you have anti-virus
software from more than one vendor installed on your computer, because
some anti-virus software stores the code signatures it uses for detection
unprotected in memory.
Thesafestcoursetotakewhenyouseeanalertmessageorlogentryistotreat
it as a genuine virus threat, and to take the appropriate steps to remove the
virus from your system. If, however, you believe that a Dr Solomon’s
Anti-Virus component has generated a false detection—it has, for example,
flagged as infected a file that you have used safely for years—verify that you
are not seeing one of these situations before you call Network Associates
technical support:
• You have more than one anti-virus program running. Ifso, Dr Solomon’s
Anti-Virus components might detect unprotected code signatures that
another program uses and report them as viruses. To avoid this problem,
configureyour computerto run onlyone anti-virusprogram,thenshutthe
computer down and turn off the power. Wait a few seconds before you
start the computer again so that the system can clear the other program’s
code signature strings from memory.
• You have a BIOS chip with anti-virus features. Some BIOS chips provide
anti-virus features that can trigger false detections when Dr Solomon’s
Anti-Virusruns.Consulttheuser’sguidefor your computerto learnabout
how its anti-virus features work and how to disable them if necessary.
• You have an older Hewlett-Packard or Zenith PC. Some older models
from thesemanufacturers modify the boot sectors ontheir hard disks each
time they start up. Dr Solomon’s Anti-Virus components might detect
thesemodificationsas viruses,whentheyarenot.Consulttheuser’sguide
foryourcomputertolearnwhetheritusesself-modifyingbootcode.To
solve the problem, use the Dr Solomon’s Anti-Virus Command Line
scanner to add validation information to the startup files themselves. This
methoddoes notsaveinformationaboutthebootsectoror the masterboot
record.
• You have copy-protected software. Depending on the type of copy
protectionused,DrSolomon’sAnti-Viruscomponentsmightdetectavirus
inthebootsectororthemasterbootrecordonsomefloppydisksorother
media.
If none of these situations apply, contact Network Associates technical
supportorsende-mailto [e-mail] explanation
of the problem you encountered.