Frequently Asked Question

Malware and antivirus software

Command list

Options:

--help

show help and quit

--version

show version information and quit

--base-dir=FOLDER

load modules from FOLDER

--quar-dir=FOLDER

QUARANTINE folder

--and

show activity indicator

Scanner options:

--files

scan files (default)

--no-files

do not scan files

--boots

scan boot sectors (default)

--no-boots

do not scan boot sectors

--arch

scan archives (default)

--no-arch

do not scan archives

--max-archive-level=LEVEL

maximum archive nesting LEVEL (default 0 = unlimi
ted)

--scan-timeout=LIMIT

scan archives for LIMIT seconds at maximum

--max-arch-size=SIZE

scan only the first SIZE bytes in archives (default 0
= unlimited)

--mail

scan email files

--no-mail

do not scan email files

--sfx

scan self-extracting archives

--no-sfx

do not scan self-extracting archives

--rtp

scan runtime packers

--no-rtp

do not scan runtime packers

--exclude=FOLDER

exclude FOLDER from scanning

--subdir

scan subfolders (default)

--no-subdir

do not scan subfolders

--max-subdir-level=LEVEL

subfolder maximum nesting LEVEL (default 0 =
unlimited)

--symlink

follow symbolic links (default)

--no-symlink

skip symbolic links

--ext-remove=EXTENSIONS

remove EXTENSIONS delimited by colon from scannin
g

--ext-exclude=EXTENSIONS

exclude EXTENSIONS delimited by colon from scannin
g

Methods:

--adware

scan for Adware/Spyware/Riskware

--no-adware

do not scan for Adware/Spyware/Riskware

--unsafe

scan for potentially unsafe applications

--no-unsafe

do not scan for potentially unsafe applications

--unwanted

scan for potentially unwanted applications

--no-unwanted

do not scan for potentially unwanted applications

--pattern

use signatures

--no-pattern

do not use signatures

--heur

enable heuristics

--no-heur

disable heuristics

--adv-heur

enable Advanced heuristics

--no-adv-heur

disable Advanced heuristics

Remove:

--action=ACTION

perform ACTION on infected objects. Available
actions: none, clean, prompt

--quarantine

copy infected files to Quarantine (supplements
ACTION)

--no-quarantine

do not copy infected files to Quarantine
General options

Protection record

--log-file=FILE

log output to FILE

--log-rewrite

overwrite output file (default - append)

--log-all

also log clean files

--no-log-all

do not log clean files (default)

 

Exit codes:
0 - no threat found
1 - threat found but not cleaned
10 - some infected files were not cleaned
101 - archive error
102 - access error
103 - internal error
Exit codes greater than 100 mean that the file was not scanned and thus can be infected.