Lenovo ThinkPad Edge 15 - Manual (Page 141)

Appendix B. Antidote Delivery Manager
Antidote Delivery Manager works by delivering instructions from an administrator to each system and by
supporting commands to combat a virus or a worm. The administrator prepares a script containing the
actions desired on each system. The repository function safely delivers the script to the system within
minutes and runs the commands. Commands include restricting network connections, displaying messages
to the users, restoring files from backups, downloading files, executing other system commands, and
rebooting the machine either to the same operating system or to switch in to or out of the Rescue and
Recovery environment. Both the repository function and the commands work in either the normal operating
system (such as Windows XP) or in the Rescue and Recovery environment.
The overall strategy to combat a virus is to reduce the spread and damage of the malicious code, apply
patches and cleanup to each system, and then bring the restored machines back on to the network. For a
highly destructive and fast spreading virus, it might be necessary to remove systems from the network and
conduct all repair operations in the Rescue and Recovery environment. Although this is the safest method, it
is also disruptive to users, if applied during normal working hours. In some circumstances, shifting to the
Rescue and Recovery environment can be delayed or avoided by restricting the network capabilities.
The next step is to get patches and cleanup code downloaded, and clean code run and patches set up
for installation. In general, patches are designed to be installed while the operating system is running, but
clean up and other operations might be more appropriate in the Rescue and Recovery environment. When
the corrective actions are complete, the system can then be restored to normal operation with Windows
XP running and network configurations restored.
The following two sections describe the repository operation and commands in detail. Then installation and
configuration of the function is presented. The following sections are examples of how to use the system for
the common tasks of testing, responding to destructive viruses, addressing machines connected by wireless
or Virtual Private Networks (VPNs), and fixing less destructive problems.
Installing the Antidote network component
The Rescue and Recovery 4.21 program must be installed on all client systems. Configuration can be made
before the installation or performed later.
Note: Antidote driver functionality will not be installed in the operating system by default because of
potential conflicts with other drivers.
Windows Vista
Complete the following steps to install Antidote Delivery Manager on client systems with Windows Vista:
1. With administrative privileges, launch the MS DOS Command Prompt.
2. Change the directory to %rr%\adm.
3. Run iuservice -install.
4. Execute net start tvtnetwk.
Windows XP
Complete the following steps to install Antidote Delivery Manager on client systems with Windows XP:
1. With administrative privileges, launch the MS DOS Command Prompt.
2. Change the directory to %tvtcommon%\pfdinst.
© Copyright Lenovo 2008, 2010 133