======= partial user manual for installation on Windows 2K, XP and 2003 =======

2.2	Install the Recovery Console on Windows 2000, XP, 2003

If you have multiple boot partitions installed on your system, you do not have
to install the Recovery Console if other operating systems can access and modify
the partition where the <OLD_SYSTEM_DRIVE> is on. Or you have an Emergency Boot
Disk/CD available to complete the tasks specified in section 2.3 and 2.4, you do
not have to install the Recovery Console either.

Otherwise, please insert the Windows 2000, XP or 2003 Operating System CD to
install the Recovery Console first so that you can finish the tasks specified in
section 2.3 and 2.4.

To install the Recovery Console, Run "<CDROM_DRIVE>:\i386\winnt32 /cmdcons" and
follow the instructions given.

2.3	Post-Installation on Windows 2000, XP, 2003
Microsoft implements a so-called Windows File Protection (WFP) scheme on Windows
2000, ME, XP and 2003 to prevent other applications, either normal or malicious,
from modifying system files.

Unfortunately, this good intention also prevents newly invented protection
mechanism such as Win-Trap from being easily integrated with the system. So,
bear with us for this inconvenience to get Win-Trap technology across to protect
your system from malicious code such as Code Red, SQL Slammer etc. worms and
malicious programs such as W32.Bugbear and W32.Sobig etc. email viruses and
Trojans.

Note:
Win-Trap product will modify some system files, especially kernel32.dll file
under <SYSTEM_DRIVE>:\<WINDOWS_DIR>\System32, to install the protection layer
for the system. In order to keep any booting disaster (no data loss and damage
at all) from happening, it is suggested that you back up the file
<SYSTEM_DRIVE>:\<WINDOWS_DIR>\System32\kernel32.saved.dll to a different
filename such as kernel32.old.dll under <SYSTEM_DRIVE>:\<WINDOWS_DIR>\System32
directory so that the kernel32.dll can be restored later if needed.

2.3.1	Install With Multiple Booting Partitions
If your computer has multiple booting partitions, then you can reboot to another
partition after you ran the installation procedure above.

Then, you run a command line prompt by running "cmd.exe" program. Please notice
that the other operating system must be able to recognize the partition
information for the drive where Win-Trap has been installed.

Then, you change the current directory to
<OLD_SYSTEM_DRIVE>:\<WINDOWS_DIR>\System32, and then run "phinstall.bat" batch
file.

This step completes the installation procedure for Win-Trap, finally!

2.3.2	Install From the Recovery Console
If your computer does not have multiple booting partitions, but you have
installed the Recovery Console option during the installation of Win-Trap
product, then you boot into the Recovery Console.

Then, you change the current directory to
<OLD_SYSTEM_DRIVE>:\<WINDOWS_DIR>\System32, and then run "batch phinstall.bat"
command.

This step completes the installation procedure for Win-Trap. Type "exit" and
ENTER key to reboot the whole system.

2.3.3	Install With An Emergency Boot CD
There are many emergency boot systems available on the Internet. Some of them
are free. One example is "Emergency Boot CD". The website is
http://www.ebcd.i-am.ru/.
Note:
PH Security does not endorse its content and cannot verify its usefulness of the
above website. Visit and use at your own risk.

If you are using an emergency boot CD to boot the system up, then you have to go
into an interface where you can access the partition for
<OLD_SYSTEM_DRIVE>:\<WINDOWS_DIR>\System32 directory. Then, you change the
current directory to <OLD_SYSTEM_DRIVE>:\<WINDOWS_DIR>\System32 and then do the
following (commands themselves might have to be modified)
	Delete kernel32.dll
	Rename ternel32.dll kernel32.dll
	Cd dllcache
	copy kernel32.dll kernel32.saved.dll
	del kernel32.dll

This completes the installation procedure for Win-Trap. Reboot the system.

======================== NOTES ===========================================
1.11	Symbols And Acronyms Explained
<SYSTEM_DRIVE>
Is used to indicate the drive where the operating system directories are
located.

<OLD_SYSTEM_DRIVE>
Is used to indicate the drive where the operating system was installed with the
Win-Trap software package when the system is booted up by another partition or
the emergency console or other means to complete the install/uninstall/repair
procedure for Win-Trap. During installation and repair procedure,

<OLD_SYSTEM_DRIVE>:\<WINDOWS_DIR>\SYSTEM32 directory has the file as
ternel32.dll, has a file as phrestore.bat during the uninstall procedure. These
two files are indicative of where the system directory was.

<WINDOWS_DIR>
Is used to indicate the Windows directory where the operating system is located.

Note:
To find out the above three symbols, use "set" command from a command-line
console, then you should see the last line of the output such as
"windir=c:\winnt", where <SYSTEM_DRIVE> is c and <WINDOWS_DIR> is winnt.

<CDROM_DRIVE>
	Is used to indicate the CDROM drive letter.
