a. Create a folder called "Virus".
b. In case you wish us to examine a specific file or files infected with a virus
simply copy them to the above folder and skip to the last section which begins with
the words 'Compress all files…' In any other case, please read on.
c. On a computer suspected as virus-infected, please copy the following files from
your WINDOWS or WINNT folder to the "Virus" folder: COMMAND.COM, WIN.COM,
WININIT.EXE, EXPLORER.EXE, NOTEPAD.EXE
d. Copy the NORMAL.DOT file from your Office Template folder to the "Virus"
folder. The Office Templates folder is usually located in C:\WINDOWS\Application
Data\Microsoft\Templates or in C:\Program Files\Microsoft Office\Templates.
e. Copy a few MS-Word documents (*.DOC) and Excel spread sheets (*.XLS) that you
have recently worked with to the "Virus" folder (two or three of each
will suffice).
Compress all files in the "Virus" folder into a sample
file called: VIRUS.ZIP (you can use the WINZIP shareware software for this purpose)
f. Note: When compressing the files, please make sure to protect the archive with
a password (an option available in many compression programs).
3.2 eMail Virus Samples
a. Open your email client (software) and click on the New Mail button
b. Address the email to: esafe.virus@eAladdin.com
c. Write your name in the SUBJECT line
d. In the body of the message include: Your name, address, phone number and email
address
Operating system (brand and version). Also include the date of last
virus tables update and a Short description of the suspected virus-related behavior.
If appropriate, include the password that opens the zipped archive.
e. If the virus was detected by the other anti-virus product please include: Name
of the product and version, Name of the virus displayed by this other anti-virus
product, Date of the last update of the anti-virus product.
f. Attach the file with the samples to the email message
g. Click on Send
3.3 Create an Email Dump:
If you received a virus by mail save the mail in a password protected zip file.
Instructions on how to create an email dump can be found here. Address the email
to: virus@eSafe.com
3.4 Send Virus Samples vir Regular Mail
a. Copy the file with the samples to a newly formatted floppy disk
b. Label the floppy disk with your name, address, phone number and date of Last
Virus Table Update
c. Mail this floppy disk to:
Aladdin Knowledge Systems, Ltd.
Attention
CSRT
POBox 25333, Haifa 31250
ISRAEL.
