The following should be part of your Config.SYS file:
device=c:\windows\himem.sys
dos=high, umb
device=c:\windows\emm386.exe noems
files=65
buffers=64
stacks=9,256
fcbs=10,6
lastdrive=z
devicehigh=c:\windows\setver.exe
devicehigh=c:\cdrom\oakcdrom.sys /d:mscd001
(I'm assuming your CDROM driver is in a directory called CDROM on C: root, use the directory you have it in and the appropriate driver name.)
In your Autoexec.BAT, the resident drivers should be preceded by LH:
@echo off
path ;
c:\antivir\antivir.exe /dosscan /autofix
LH c:\cdrom\mscdex.exe /d:mscd001 /m:12
LH c:\audio\au3drv.exe /parameters
LH c:\tablet\tabletdvr.exe
LH c:\speech\speechcard.exe
path c:\windows;c:\windows\command;c:\;c:\antivir;c:\speech;
prompt $p$g
set temp=c:\windows\temp
ver
These are SAMPLE files, put your appropriate drivers and the like in. An antivirus 'boot scan' pass is not resident; resident programs are loaded into Upper Memory with this layout and DOS is loaded into both High Memory and Upper Memory to leave plenty open for your apps. The bootup is based on DOS 7 in Win9x, if you are using earlier Windows you have a directory C:\DOS vice C:\Windows\Command.