****************************************************************************
FIX_ZOHER (version 1.00)
Trend Micro, Inc.
http://www.antivirus.com
****************************************************************************


I. File List

    o  FIX_ZOHER.EXE     - Fix tool for WORM_ZOHER.A
    o  README_ZOHER.TXT  - This file


II. How to Use

    1.  Turn off all applications running in your system, including any
        antivirus software that may be installed to avoid conflicts that may
        occur while the tool is scanning the system.

    2.  Copy the tool "FIX_ZOHER.EXE" into any folder on the hard disk.

    3.  Run the tool "FIX_ZOHER.EXE". You can run it from a floppy disk. The
        tool will display its actions on your system. The tool will also log
        events in a log file named "fix_zoher.log" located in the same folder
        as the tool.

    4.  Enable any antivirus software that is installed and perform a manual
        scan.


III. Description

    This tool is designed to clean a system that was infected by
    WORM_ZOHER.A

	This tool will clean the system without having to boot using the
	boot disk or emergency rescue disk (ERD).

	The tool supports the following features:

        o   Terminates all instances of the worm in memory.
        o   Scans all local hard drives and removes all remaining copies
            of the worm.

IV. Parameters

    <folder>    The folder where the tool will begin scanning. If 
                unspecified, the tool will scan all local hard drives.
         /Q     Quiet mode: Disables opening message. Removes
                virus/worm and clean infected computer.
         /F     Fast mode: skips the hard disk scanning for all
                remaining copies of the worm	
         /?     Displays help information


V. Requirements

    This tool is designed to run under Windows NT/2000 and Windows 9x/ME.

    If you are using Windows NT 4.0, you need to copy the file "PSAPI.DLL"
    to the Windows system folder, which is usually "C:\WINNT\system32". You
    may find the "PSAPI.DLL" file on the Windows NT 4.0 Setup CD in the
    following locations:

        \Support\Debug\i386\PSAPI.DLL
        \Support\Debug\Alpha\PSAPI.DLL
        \Support\Debug\MIPS\PSAPI.DLL
        \Support\Debug\PPC\PSAPI.DLL


VI. History:

    Version 1.00 - First release

VII. Others
    This tool has been tested under the following platforms:
        Windows 9x
        Windows ME
        Windows NT 4.0 Workstation and Server
        Windows 2000 Professional and Server


VIII. For more information regarding these virii, please visit our website
    at:

    <http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=
        WORM_ZOHER.A>