Updating Anti-Ransomware Definitions

To refresh threat information on demand, select 1. Refresh from the Threat Information Refresh screen (STRAR> 52).

The Update ATP Definitions (UPDATPDFN) screen appears:

   ​       ​  ​      ​     Update ATP Definitions (UPDATPDFN)     ​                  
 ​
  ​       ​  ​                                                                    
 Type choices, press Enter.​                                                     
                                                                                
 Refresh source . . . . . . . . .​  ​ *WEB         ​ *WEB, *DIR                    
 If *WEB:*RAZLEE,*INTERNET,*LAN  ​  ​ *RAZLEE      ​ *RAZLEE, *INTERNET, *LAN...   
 If *DIR: '/dir/' . . . . . . . .​  ​ '/SMZVDTA/tmp/'                             
                                                                                
                                                                                
                                                    
                            
 Port . . . . . . . . . . . . . .​  ​ 80           ​ 1-65535                       
                                                                                
                                                                                
                                                                                
                                                                                
                                                                                
                                                                                
                                                                                
                                                                                
                                                                                
                                                                 ​        Bottom​ 
 F3=Exit   F4=Prompt   F5=Refresh   F12=Cancel   F13=How to use this display    
 F24=More keys                                                                 ​
 
                                                                                

To refresh definitions from the web, set the Refresh source field to *WEB and the For *WEB field to the source from which you are refreshing the definitions. Possible choices are *RAZLEE to refresh from Raz-Lee's definitons and *BACKUP to refresh from a backup.

To refresh definitions from a directory on the same system, set the Refresh source field to *DIR and the For *DIR field to the pathname of the directory, between single quotation marks.

  1. Download BADEXTA.TXT ( the Anti Ransomware database file) from http://av.razlee.com/BADEXTA.TXT to a PC.
  2. Transfer the BADEXTA.TXT file from the PC to the directory /SMZVDTA/tmp in IFS.
  3. On the Update ATP Definitions (UPDATPDFN) screen, set the Refresh source field to *DIR and the For *DIR field to '/SMZVDTA/tmp' (including the single quotation marks.
  4. To update the definitions immediately, enter the command SMZV/UPDATPDFN SOURCE(*DIR) DIR('/SMZVDTA/tmp/')

To schedule updates, as either a one-time or recurring event, select 2. Schedule Refresh from the Threat Information Refresh main menu (STRAR > 52). The standard Work with Job Schedule Entries (WRKJOBSCDE) screen appears, with an entry for virus scanning.

                        ​ Work with Job Schedule Entries​               ​ RLDEV   ​ 
 ​
  ​       ​  ​                                            ​ 18/10/20​  15:52:48 UTC​ 
                                                                                
                                                                                
 Type options, press Enter.​                                                     
  ​
 2=Change​  ​ 3=Hold​  ​ 4=Remove​  ​ 5=Display details​  ​ 6=Release​                 
  ​
 8=Work with last submission​   ​ 10=Submit immediately​                         
                                                                                
                                                                   ​
 Next​        
                         ​
 -----Schedule------​            ​ Recovery​  Submit​      
 Opt​  Job​        ​ Status​  Date​      ​ Time​     ​ Frequency​  ​ Action​  ​ Date​        
     ​ AV$UPDATP ​  ​ SCD ​  ​ *ALL     ​  03:00:00​  *WEEKLY ​  ​ *SBMRLS​  ​ 19/10/20​    
                                                                                
                                                                                
                                                                                
                                                                                
                                                                                
                                                                                
                                                              ​
  ​  ​       Bottom​ 
 Parameters or command​                                                          
 ===>​                                                                           
 F3=Exit​  ​ F4=Prompt​         ​ F5=Refresh​  ​ F6=Add​   ​ F9=Retrieve​                
 F11=Display job queue data​  ​ F12=Cancel​  ​ F17=Top​  ​ F18=Bottom​                 
                                                                                

To see and change the parameters for a scheduled job, type 2 in the Opt field for that line and press Enter. The Change Job Schedule Entry (CHGJOBSCDE) screen for that command appears, showing the values for the job.

   ​     ​  ​        ​   Change Job Schedule Entry (CHGJOBSCDE)   ​                  
 ​
  ​     ​  ​                                                                      
 Type choices, press Enter.​                                                     
                                                                                
 Job name . . . . . . . . . . . .​ >​ AV$UPDATP​    ​ Name                          
 Entry number . . . . . . . . . .​ >​ 001232​       ​ 000001-999999, *ONLY          
 Command to run . . . . . . . . .​  ​ SMZV/UPDATPDFN                              
                                                                                
                                                                                
                                                                                
                                                                                
                                                                                
                                                                    
            
 Frequency  . . . . . . . . . . .​  ​ *WEEKLY      ​ *SAME, *ONCE, *WEEKLY...      
 Schedule date  . . . . . . . . .​  ​ *NONE        ​ Date, *SAME, *CURRENT...      
 Schedule day . . . . . . . . . .​  ​ *ALL         ​ *SAME, *NONE, *ALL, *MON...   
     ​           + for more values​  ​              ​                               
 Schedule time  . . . . . . . . .​  ​ '03:00:00'   ​ Time, *SAME, *CURRENT         
                                                                                
                                                                                
                                                                 ​
        Bottom​ 
 F3=Exit   F4=Prompt   F5=Refresh   F10=Additional parameters   F12=Cancel      
 F13=How to use this display        F24=More keys                              ​
 
                                                                                

To add a scheduled job, press the F6 key from the Work with Job Schedule Entries (WRKJOBSCDE) screen. The Add Job Schedule Entry (ADDJOBSCDE) screen for that command appears, showing the values for the job.

   ​     ​  ​        ​     Add Job Schedule Entry (ADDJOBSCDE)    ​                  
 ​
  ​     ​  ​                                                                      
 Type choices, press Enter.​                                                     
                                                                                
 Job name . . . . . . . . . . . .​  ​              ​ Name, *JOBD                   
 Command to run . . . . . . . . .​  ​                                             
                                                                                
                                                                                
                                                                                
                                                                                
                                                                                
                                                                    
            
 Frequency  . . . . . . . . . . .​  ​              ​ *ONCE, *WEEKLY, *MONTHLY      
 Schedule date  . . . . . . . . .​  ​ *CURRENT     ​ Date, *CURRENT, *MONTHSTR...  
 Schedule day . . . . . . . . . .​  ​ *NONE        ​ *NONE, *ALL, *MON, *TUE...    
     ​           + for more values​  ​              ​                               
 Schedule time  . . . . . . . . .​  ​ *CURRENT     ​ Time, *CURRENT                
                                                                                
                                                                                
                                                                                
                                                                 ​
        Bottom​ 
 F3=Exit   F4=Prompt   F5=Refresh   F10=Additional parameters   F12=Cancel      
 F13=How to use this display        F24=More keys                              ​
 
                                                                                

Set the Command to run field to SMZV/UPDATPDFN.