clamwin-users — Clamwin users discussion list

RE: [Clamwin-users] Is this suport in clam-win or an eta on when supported?

[Alch <al...@us...>]

> 
> >From the ClamAV unix/linux database update list:
> 
> ClamAV databases updated (2004.06.30 12:31 +0000): daily.cvd, 
> viruses.db2
> version: 376
> 
> Submission: n/a
> Sender: Trog
> Virus name:
>         PP97M.Kelly.A
>         PP97M.Master.A
>         PP97M.PMG.A
>         PP97M.Scene.A
>         PP97M.Shape.A
>         PP97M.Vic.A
>         PP97M.Xjan.A
>         W97M.Obsol.A
>         W97M.Ocor.A
>         W97M.One.A
>         W97M.Onex.B
>         W97M.Opey.U
>         W97M.Outlaw.A
> Notes: CVS is required to detect PowerPoint macro viruses. <----------
> 
> Any Idea if this is supported or not and if not well .36 have 
> that support.

As the message from Torg is dated 30 June and Clamwin 0.35 was released
17 May I presume it may not be in there. 0.36 will definitely support
this. In the meanwhile you can download sosdg build
(http://sosdg.org/clamav-win32/clamav-devel.exe) and replace
clamscan.exe and freshclam.exe in the clamwin/bin folder.

Cheers,
Alch
 
> Thanks
> Robert
> 
> 
> -------------------------------------------------------

[Clamwin-users] Is this suport in clam-win or an eta on when supported?

[Robert M. <ro...@mi...>]

From the ClamAV unix/linux database update list:

ClamAV databases updated (2004.06.30 12:31 +0000): daily.cvd,
viruses.db2
version: 376

Submission: n/a
Sender: Trog
Virus name:
        PP97M.Kelly.A
        PP97M.Master.A
        PP97M.PMG.A
        PP97M.Scene.A
        PP97M.Shape.A
        PP97M.Vic.A
        PP97M.Xjan.A
        W97M.Obsol.A
        W97M.Ocor.A
        W97M.One.A
        W97M.Onex.B
        W97M.Opey.U
        W97M.Outlaw.A
Notes: CVS is required to detect PowerPoint macro viruses. <----------

Any Idea if this is supported or not and if not well .36 have that support.

Thanks
Robert

Re: [Clamwin-users] pythoncom problem

[Filippo P. (S.G. Consulting) <pa...@sg...>]

I installed pywin32-201 and everything seems to work.

Thanks,
Filippo


Alch wrote:

> Hi, 
> Having python installed should not be a problem if you have
> python 2.3 and pywin32-201
> (https://sourceforge.net/projects/pywin32/) installed.
> 
> It seems that ActiveState python that comes with
> win32all-163 (now pywin32) creates a dll conflict. So if you
> hace ActivePython 2.3, just install pywin32-201 and it
> should be fine.
> 
> Let me know how you go.
> 
> Cheers,
> Alch
> 
>>-----Original Message-----
>>From: cla...@li... 
>>[mailto:cla...@li...] On Behalf 
>>Of Filippo Pacini (S.G. Consulting)
>>Sent: Wednesday, June 30, 2004 10:35 PM
>>To: cla...@li...
>>Subject: [Clamwin-users] pythoncom problem
>>
>>
>>Hi all,
>>I installed ClamWin 0.35 on my pc. At the end of the installation and 
>>every time I try to start ClamWin I get the following error (I write 
>>from Italy so the error is in Italian):
>>
>>Impossibile trovare il punto di ingresso 
>>?PyCom_SetAndLogCOMErrorFromPyException@@YAJPBDABU_GUID@@@Z della 
>>procedura nella libreria a collegamento dinamico pythoncom23.dll
>>
>>Translated should be something like:
>>Can't find 
>>?PyCom_SetAndLogCOMErrorFromPyException@@YAJPBDABU_GUID@@@Z 
>>procedure entry point in pythoncom23.dll dynamic shared library.
>>
>>I have a pc with Windows 2000 Professional, and with 
>>Activestate Python 
>>2.2 and Activestate Python 2.3 (I need both).
>>
>>Any idea on what the problem can be?
>>

RE: [Clamwin-users] pythoncom problem

[Alch <al...@us...>]

Hi, 
Having python installed should not be a problem if you have
python 2.3 and pywin32-201
(https://sourceforge.net/projects/pywin32/) installed.

It seems that ActiveState python that comes with
win32all-163 (now pywin32) creates a dll conflict. So if you
hace ActivePython 2.3, just install pywin32-201 and it
should be fine.

Let me know how you go.

Cheers,
Alch
> -----Original Message-----
> From: cla...@li... 
> [mailto:cla...@li...] On Behalf 
> Of Filippo Pacini (S.G. Consulting)
> Sent: Wednesday, June 30, 2004 10:35 PM
> To: cla...@li...
> Subject: [Clamwin-users] pythoncom problem
> 
> 
> Hi all,
> I installed ClamWin 0.35 on my pc. At the end of the installation and 
> every time I try to start ClamWin I get the following error (I write 
> from Italy so the error is in Italian):
> 
> Impossibile trovare il punto di ingresso 
> ?PyCom_SetAndLogCOMErrorFromPyException@@YAJPBDABU_GUID@@@Z della 
> procedura nella libreria a collegamento dinamico pythoncom23.dll
> 
> Translated should be something like:
> Can't find 
> ?PyCom_SetAndLogCOMErrorFromPyException@@YAJPBDABU_GUID@@@Z 
> procedure entry point in pythoncom23.dll dynamic shared library.
> 
> I have a pc with Windows 2000 Professional, and with 
> Activestate Python 
> 2.2 and Activestate Python 2.3 (I need both).
> 
> Any idea on what the problem can be?
> 
> -- 
> Filippo Pacini - S.G. Consulting
> Tel/Fax: +39 0577 992046
> Web    : http://www.sgconsulting.it
> 
> 
> 
> -------------------------------------------------------
> This SF.Net email sponsored by Black Hat Briefings & 
> Training. Attend Black Hat Briefings & Training, Las Vegas 
> July 24-29 - 
> digital self defense, top technical experts, no vendor pitches, 
> unmatched networking opportunities. Visit www.blackhat.com 
> _______________________________________________
> Clamwin-users mailing list
> Cla...@li...
> https://lists.sourceforge.net/lists/listinfo/clamwin-users
> 

[Clamwin-users] pythoncom problem

[Filippo P. (S.G. Consulting) <pa...@sg...>]

Hi all,
I installed ClamWin 0.35 on my pc. At the end of the installation and 
every time I try to start ClamWin I get the following error (I write 
from Italy so the error is in Italian):

Impossibile trovare il punto di ingresso 
?PyCom_SetAndLogCOMErrorFromPyException@@YAJPBDABU_GUID@@@Z della 
procedura nella libreria a collegamento dinamico pythoncom23.dll

Translated should be something like:
Can't find ?PyCom_SetAndLogCOMErrorFromPyException@@YAJPBDABU_GUID@@@Z 
procedure entry point in pythoncom23.dll dynamic shared library.

I have a pc with Windows 2000 Professional, and with Activestate Python 
2.2 and Activestate Python 2.3 (I need both).

Any idea on what the problem can be?

-- 
Filippo Pacini - S.G. Consulting
Tel/Fax: +39 0577 992046
Web    : http://www.sgconsulting.it

[Clamwin-users] How to deal with files that cannot be quarantined?

[James H. <jhe...@le...>]

Hello,

I've just checked out the manual and was wondering how to deal with 
files that can't be quarantined.  I recently received an email from a 
user's computer and it appears that they are infected with:

C:/WINNT/SYSTEM32/SPOOLSV.EXE: Worm.Lovgate.W-2 FOUND

The problem I have is that an error was reported during the quarantine 
process:

ERROR: error moving file 'C:/WINNT/SYSTEM32/SPOOLSV.EXE'.
clamscan: cannot unlink 'C:/WINNT/SYSTEM32/SPOOLSV.EXE': Permission denied.

What is the best solution to this problem? Is it common?  Should I take 
the machine offline, delete the SPOOLSV.EXE and replace it with a clean 
one?

I read the mailing list and it looks like it _may_ be a false positive, 
but how should I deal with this in the future?

Thank you,

James

Re: [Clamwin-users] Inconsistent scan results between machines. Hopefully false positives on Worm.Lovgate.W-2

[Nathan B. <na...@bb...>]

Alch wrote:

>Well if kaspersky tells it's clean then  good chances are it is a false
>positive.
>Nathan, I haven't got your email (probablygot filtered out by clamav at
>sourceforge),
> please zip it wit password clamwin and send to cl...@cl...
>
>Cheers,
>Alch
>  
>
OK. I've resent it.  Thanks.

Nathan

RE: [Clamwin-users] Inconsistent scan results between machines. Hopefully false positives on Worm.Lovgate.W-2

[Alch <al...@us...>]

Well if kaspersky tells it's clean then  good chances are it is a false
positive.
Nathan, I haven't got your email (probablygot filtered out by clamav at
sourceforge),
 please zip it wit password clamwin and send to cl...@cl...

Cheers,
Alch

> -----Original Message-----
> From: cla...@li... 
> [mailto:cla...@li...] On Behalf 
> Of Nathan Barham
> Sent: Sunday, June 20, 2004 12:46 PM
> To: cla...@li...
> Subject: Re: [Clamwin-users] Inconsistent scan results 
> between machines. Hopefully false positives on Worm.Lovgate.W-2
> 
> 
> Alch wrote:
> 
> >Hi,
> >
> >I'm afraid this is not a false positive, my spoolsv.exe 
> (Win2k SP4) is 
> >being reported as clean by clamwin 0.35, (database 23/361). 
> However to 
> >be sure, please zip your spoolsv.exe and send it to me (alch @
> >users.sourceforge.net) for a closer look. You may laso try couple of 
> >the online scanners (http://www.kaspersky.com/scanforvirus, and the 
> >others). Also if you are ever in doubt about your current clamwin 
> >install, try online clamav scanner found at www.clamwin.com
> >
> >  
> >
> Thanks for your reply.
> 
> The Kaspersky scanner you noted finds it clean.  The Clamwin online 
> scanner at www.clamwin.com finds it infected with 
> Worm.Lovgate.W-2.  I 
> have sent you the zip file.  Please let me know what you find.
> 
> Thanks much,
> 
> Nathan Barham
> 
> 
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by The 2004 JavaOne(SM) 
> Conference Learn from the experts at JavaOne(SM), Sun's 
> Worldwide Java Developer Conference, June 28 - July 1 at the 
> Moscone Center in San Francisco, CA REGISTER AND SAVE! 
> http://java.sun.com/javaone/sf Priority Code NWMGYKND 
> _______________________________________________
> Clamwin-users mailing list
> Cla...@li...
> https://lists.sourceforge.net/lists/listinfo/clamwin-users
> 

Re: [Clamwin-users] Inconsistent scan results between machines. Hopefully false positives on Worm.Lovgate.W-2

[Nathan B. <na...@bb...>]

Alch wrote:

>Hi,
>
>I'm afraid this is not a false positive, my spoolsv.exe (Win2k SP4) is
>being reported as clean by clamwin 0.35, (database 23/361). However to
>be sure, please zip your spoolsv.exe and send it to me (alch @
>users.sourceforge.net) for a closer look. You may laso try couple of the
>online scanners (http://www.kaspersky.com/scanforvirus, and the others).
>Also if you are ever in doubt about your current clamwin install, try
>online clamav scanner found at www.clamwin.com
>
>  
>
Thanks for your reply.

The Kaspersky scanner you noted finds it clean.  The Clamwin online 
scanner at www.clamwin.com finds it infected with Worm.Lovgate.W-2.  I 
have sent you the zip file.  Please let me know what you find.

Thanks much,

Nathan Barham

RE: [Clamwin-users] Inconsistent scan results between machines. Hopefully false positives on Worm.Lovgate.W-2

[Alch <al...@us...>]

Hi,

I'm afraid this is not a false positive, my spoolsv.exe (Win2k SP4) is
being reported as clean by clamwin 0.35, (database 23/361). However to
be sure, please zip your spoolsv.exe and send it to me (alch @
users.sourceforge.net) for a closer look. You may laso try couple of the
online scanners (http://www.kaspersky.com/scanforvirus, and the others).
Also if you are ever in doubt about your current clamwin install, try
online clamav scanner found at www.clamwin.com


Regards,
Alch

> -----Original Message-----
> From: cla...@li... 
> [mailto:cla...@li...] On Behalf 
> Of Nathan Barham
> Sent: Sunday, June 20, 2004 4:58 AM
> To: cla...@li...
> Subject: [Clamwin-users] Inconsistent scan results between 
> machines. Hopefully false positives on Worm.Lovgate.W-2
> 
> 
> Hello list,
> 
> I have about 5 Windows 2000 (SP4) machines, all either 
> running clamwin 
> .34 or .35, which have all started claiming  
> C:\WINNT\System32\spoolsv.exe is infected with Worm.Lovgate.W-2.  In 
> cases where the machine has archived service pack files, 
> C:/WINNT/ServicePackFiles/i386/spoolsv.exe is also being flagged as 
> infected.
> 
> I've searched my registries for a few of the keys related to 
> Worm.Lovgate.w and so far haven't found any.
> 
> In the process of trying to replace a deleted spoolsv.exe 
> with a clean 
> copy on a floppy, I discovered that the same file, on the 
> same floppy, 
> will scan as clean on one machine, and infected on another.  This is 
> true with updated virus definitions, and between versions.
> 
> This either have to be false positives or false negatives, and I'm 
> hoping like mad for the former.  Anyone else seeing this?
> 
> Any help much appreciated.
> 
> Nathan Barham
> 
> 
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by The 2004 JavaOne(SM) 
> Conference Learn from the experts at JavaOne(SM), Sun's 
> Worldwide Java Developer Conference, June 28 - July 1 at the 
> Moscone Center in San Francisco, CA REGISTER AND SAVE! 
> http://java.sun.com/javaone/sf Priority Code NWMGYKND 
> _______________________________________________
> Clamwin-users mailing list
> Cla...@li...
> https://lists.sourceforge.net/lists/listinfo/clamwin-users
> 

[Clamwin-users] Inconsistent scan results between machines. Hopefully false positives on Worm.Lovgate.W-2

[Nathan B. <na...@bb...>]

Hello list,

I have about 5 Windows 2000 (SP4) machines, all either running clamwin 
.34 or .35, which have all started claiming  
C:\WINNT\System32\spoolsv.exe is infected with Worm.Lovgate.W-2.  In 
cases where the machine has archived service pack files, 
C:/WINNT/ServicePackFiles/i386/spoolsv.exe is also being flagged as 
infected.

I've searched my registries for a few of the keys related to 
Worm.Lovgate.w and so far haven't found any.

In the process of trying to replace a deleted spoolsv.exe with a clean 
copy on a floppy, I discovered that the same file, on the same floppy, 
will scan as clean on one machine, and infected on another.  This is 
true with updated virus definitions, and between versions.

This either have to be false positives or false negatives, and I'm 
hoping like mad for the former.  Anyone else seeing this?

Any help much appreciated.

Nathan Barham

Re: [Clamwin-users] Hi all. Up dating Win-clam AV from my linux server.

[Russ P. <ava...@us...>]

gr...@li... wrote:
> Win av was desinged to get it's update's from a http server, I would think
> it best to keep with this theam as it keeps the process simplyfied and
> there is less to go wrong , just my opion , but thanks for the input as it
> is a valid work around when  you don't have a www server avalible ..

I agree that a http server is the best way to go, but I didn't know if 
you had one :-)

I've just added both methods of getting updates to the advanced section 
of the docs.

Russ

Re: [Clamwin-users] Hi all. Up dating Win-clam AV from my linux server.

[<gr...@li...>]

Win av was desinged to get it's update's from a http server, I would think
it best to keep with this theam as it keeps the process simplyfied and
there is less to go wrong , just my opion , but thanks for the input as it
is a valid work around when  you don't have a www server avalible ..

> gr...@li... wrote:
>
>> Hi.
>> My linux server check for updates very 1/2 hour, so I would like to
>> setup
>> Win clam av on my network machines to update from my the linux server..
>> How can i do this ?
>
> I've just seen Alex's response involving setting up a web server, which
> is probably the best way to do it. Just for the sake of completeness,
> however, I'd like to add that you could also simply copy the main.cvd
> and daily.cvd files from the Linux server to the relevant location on
> your Windows boxes. How you do that depends on your server setup - if
> it's running Samba, you could share the relevant directory and set up
> batch files on the Windows boxes to do the copying.
>
> Russ
>
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by The 2004 JavaOne(SM) Conference
> Learn from the experts at JavaOne(SM), Sun's Worldwide Java Developer
> Conference, June 28 - July 1 at the Moscone Center in San Francisco, CA
> REGISTER AND SAVE! http://java.sun.com/javaone/sf Priority Code NWMGYKND
> _______________________________________________
> Clamwin-users mailing list
> Cla...@li...
> https://lists.sourceforge.net/lists/listinfo/clamwin-users
>

Re: [Clamwin-users] Hi all. Up dating Win-clam AV from my linux server.

[Russ P. <ava...@us...>]

gr...@li... wrote:

> Hi.
> My linux server check for updates very 1/2 hour, so I would like to setup
> Win clam av on my network machines to update from my the linux server..
> How can i do this ?

I've just seen Alex's response involving setting up a web server, which 
is probably the best way to do it. Just for the sake of completeness, 
however, I'd like to add that you could also simply copy the main.cvd 
and daily.cvd files from the Linux server to the relevant location on 
your Windows boxes. How you do that depends on your server setup - if 
it's running Samba, you could share the relevant directory and set up 
batch files on the Windows boxes to do the copying.

Russ

RE: [Clamwin-users] Hi all. Up dating Win-clam AV from my linux server.

[Alch <al...@us...>]

You can set up a web server on your linux box and place main.cvd and
daily.cvd (the ones that are downloaded by freshclam, usually in
/usr/local/share/clamav) into your webroot directory or just make
/usr/local/share/clamav your webroot. Then point all clients to use your
linux box ip address instead of database.clamav.net

> -----Original Message-----
> From: cla...@li... 
> [mailto:cla...@li...] On Behalf 
> Of gr...@li...
> Sent: Wednesday, June 16, 2004 7:42 PM
> To: cla...@li...
> Subject: [Clamwin-users] Hi all. Up dating Win-clam AV from 
> my linux server.
> 
> 
> Hi.
> My linux server check for updates very 1/2 hour, so I would 
> like to setup Win clam av on my network machines to update 
> from my the linux server.. How can i do this ?
> 
> Gregory Machin
> 0725248096
> 
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by The 2004 JavaOne(SM) 
> Conference Learn from the experts at JavaOne(SM), Sun's 
> Worldwide Java Developer Conference, June 28 - July 1 at the 
> Moscone Center in San Francisco, CA REGISTER AND SAVE! 
> http://java.sun.com/javaone/sf Priority Code NWMGYKND 
> _______________________________________________
> Clamwin-users mailing list
> Cla...@li...
> https://lists.sourceforge.net/lists/listinfo/clamwin-users
> 

[Clamwin-users] Hi all. Up dating Win-clam AV from my linux server.

[<gr...@li...>]

Hi.
My linux server check for updates very 1/2 hour, so I would like to setup
Win clam av on my network machines to update from my the linux server..
How can i do this ?

Gregory Machin
0725248096

Re: [Clamwin-users] can't update its virus definition

[Kent E. <ken...@gr...>]

On Tue, 2004-06-08 at 21:10, Russ Phillips wrote:
> Kent Emia wrote:
> 
> > hello to all ClamWin users
> > 
> > i can't get my version of clamWin 0.35 to update its virus definition
> > can you guyz shed me some light
> <SNIP>
> 
> > running 'freshclam' from c:\Program Files\ClamWin\bin\ it would say
> > 
> > ERROR: Can't parse the config file /usr/local/etc/clamav.conf
> 
> Have you tried using the GUI? Right-click on the system tray icon & 
> select "Download Virus Database Update". Does that work? Running 
> freshclam manually involves passing a bunch of parameters. It's much 
> simpler to use the GUI.
> 
> Russ

ahhh i was not able to mention it .. yes i did it several times and i
also tried different servers ... 

can u give me the url for a certified server of virus definition 


-- 
=========
Kent Emia

[Clamwin-users] can't update its virus definition

[Kent E. <ken...@gr...>]

hello to all ClamWin users

i can't get my version of clamWin 0.35 to update its virus definition
can you guyz shed me some light

thanks


> >hi there ... 
> >im still worried that my clamAV windows version is still
> >not able to update virus definition to the internet
> >
> >what is the proper url for the download of virus definition
> >
> >  
> >
> Generally, it involves running freshclam.exe.
> 
> BTW, If you use clamav to scan your PC files (e.g not for mail
server),
> try the more user-friendly ClamWin instead.

yah im using the clamWin but still can't get it download a definition

> 
> If you're using it to scan mail for a mail server :
> Step 1 : try downloading new clamav Win32 binary from
> http://clamav.or.id/snapshot/clamav-devel-latest.cygwin.zip
> 
> Step 2 : follow installation instructions on http://clamav.or.id
> 
> When you succesfully run (on command prompt)
> 
> cd \clamav-devel-latest\bin
> freshclam

running 'freshclam' from c:\Program Files\ClamWin\bin\ it would say

ERROR: Can't parse the config file /usr/local/etc/clamav.conf




> 
> Your installation is updated.
> If you download the snapshot version, the virus definition is
> just 1 day old (at most).
> 
> If you want to download the virus definition manually,
> go to www.clamav.net/mirrors.html, pick a mirror,
> and download daily.cvd and main.cvd.
> 
> Example :
> database.clamav.net/daily.cvd               (choose a mirror 
> automatically), or
> clamav.antispam.or.id/daily.cvd            (pick a mirror manually)


-- 
=========
Kent Emia

[Clamwin-users] RE: Clamwin-users digest, Vol 1 #2 - 1 msg

[Orb_Sp <or...@ii...>]

Ravi,

Use this link, http://www.rainingfrogs.co.uk/, to search for any viruses.
Just type in somefool.z and you will find that it known as:
Worm.SomeFool.Z Vendor: Clamav

4 aliases were found for Worm.SomeFool.Z
W32.Netsky.Z@mm Vendor: Symantec
W32/Netsky-Z Vendor: Sophos
W32.Pinfi Vendor: Symantec
W32/Parite-B Vendor: Sophos

Details of the above information can be found here:
http://www.rainingfrogs.co.uk/index.php?search=num&vid=32067


Kindest Regards,

Rikki

-----Original Message-----
From: cla...@li...
[mailto:cla...@li...] On Behalf Of
cla...@li...
Sent: Friday, 4 June 2004 1:00 PM
To: cla...@li...
Subject: Clamwin-users digest, Vol 1 #2 - 1 msg

Message: 1
From: "Sharma, Ravi" <rav...@in...>
To: "'cla...@li...'"
	 <cla...@li...>
Date: Fri, 4 Jun 2004 00:22:54 +0530 
Subject: [Clamwin-users] Worm.SomeFool.Z ?

Hi All,

What is the equivalent of Worm.SomeFool.Z in Symantec Antivirus.
Surprise Norton Antivirus server is showing one machine is infected
with virus, but Norton is unable to detect during scan, but Clamwin
is detecting but giving name Worm.SomeFool.Z FOUND, but gain surprise
infection is showing in LOG file, which I never heard about it.

Any one put more light in to it.

Ravi

[Clamwin-users] Worm.SomeFool.Z ?

[Sharma, R. <rav...@in...>]

Hi All,

What is the equivalent of Worm.SomeFool.Z in Symantec Antivirus.
Surprise Norton Antivirus server is showing one machine is infected
with virus, but Norton is unable to detect during scan, but Clamwin
is detecting but giving name Worm.SomeFool.Z FOUND, but gain surprise
infection is showing in LOG file, which I never heard about it.

Any one put more light in to it.

Ravi


The information contained in, or attached to, this e-mail, may contain
confidential information and is intended solely for the use of the
individual or entity to whom they are addressed and may be subject to legal
privilege.  If you have received this e-mail in error you should notify the
sender immediately by reply e-mail, delete the message from your system and
notify your system manager.  Please do not copy it for any purpose, or
disclose its contents to any other person.  The views or opinions presented
in this e-mail are solely those of the author and do not necessarily
represent those of the company.  The recipient should check this e-mail and
any attachments for the presence of viruses.  The company accepts no
liability for any damage caused, directly or indirectly, by any virus
transmitted in this email. 

[Clamwin-users] ClamWin manual

[Russ P. <ava...@us...>]

Hi,

As you probably noticed, the latest version of ClamWin came with a 
manual. You probably also noticed that it isn't the best manual ever to 
have been bundled with a piece of software ;-)

I'd like to improve the manual, so if you have any comments on how it 
can be improved, please e-mail me or the list. I am intending to add 
more screen shots, but if you have any other ideas or constructive 
criticisms, I'd like to hear them.

Russ Phillips