4. Configuration
The Amon switches
If you need to change the default settings of AMON, create a configuration file
SYS:NOD32/AMON.CFG. Each line may contain one of the following switches
(one switch per line):
• -onread+ - enables testing files being read (default setting)
• -onread- - disables testing files being read
• -onwrite+ - enables testing files being created and modified
(default setting)
• -onwrite- - disables testing files being created and modified
• -onrename+ - enables testing files being renamed (default
setting)
• -onrename- - disables testing files being renamed
• -all - enables testing files with any extension (default
setting)
• -all- - allows testing of the files with default extensions
only
• -recipient=USER1,USER2... - when an infiltration is detected,
AMON sends a message to all users in the list. It is possible to list
several users delimited by a comma. To prevent message flood in case
of massive system infection, AMON sends one message each 30
seconds at the maximum
• -notify - when an infiltration is detected, AMON sends a
message to the user who attempted to access the
infected file
The following switches are identical with switches used in NOD32 for
DOS and Windows:
• -pattern
• -log
• -logappend
• -logrewrite
2