Knowledgebase
Safe mode scan
Posted by Gunnar Þór Jónsson on 30/04/2013 09:29

 

The command line scanner for version 5 is aiscan.exe. Aiscan.exe is located in C:\Program Files\Common Files\Authentium\AntiVirus5\aiscan.exe. You can run the command line scanner by running the appropriate file at the bottom of this article under File attachments depending on your operating system architecture.

Note: Right-click and run as administrator if using Windows Vista or Windows 7.


Here is more information to run it from command prompt:

Usage: [options] [path to scan] [options] [path to scan] ...

Parameters are case sensitive.

Help options:

-?,-h,--help             - Show this help
-v,--version            - Shows version information and exit

Other actions:

-L,--malwarelist        - List malware detected by scan engine and exit
--malwareno            - Show the number of malware detected by signature
--update                  - Updates definition files from the web using credentials in ~/.authentium.ini                   or /usr/local/share/authentium/authentium.ini

Reporting options:

-V,--verbose,--list     - Be verbose in reporting
--progress-simple               - Show simple progress indicator
-l,--report=file        - Log to file
--append                - Append to log file if -l or --report= specified
-s,--syslog             - Log to system log (If supported by the OS)
--collect-samples=file  - Create an encrypted zip file with suspicious files to be submitted to support
--show-settings         - Show settings at the start of the scan

Target options:

  -H,--hard               - Scan all hard drives
  -C,--cdrom              - Scan all CD-ROM drives
  -R,--removable          - Scan all removable drives
  -N,--network            - Scan all network drives
  -S,--startup            - Scan all startup locations
  -f,--file=list          - Scan only files listed in the file

Scanning exclusions:

--nombr                 - Do not scan the Master Boot Record
--noboot                - Do not scan the Boot Sectors
--nomem                 - Do not scan memory
--nobasicmem            - Do not do basic memory scan
--noadvancedmem         - Do not do advanced memory scan
--exclude-folder=folder - Exclude folders with base of folder from scanning. May be specified multiple times
--exclude-file=file     - Exclude file from scanning. May be specified multiple times
--exclude-ext=ext       - Exclude extension from scanning. May be specified multiple times
--include-ext=ext       - Force scanning of the specified extension. May be specified multiple times
--limit-memory=size     - Limit the size of objects that will be extracted from archives. Size is in MB

Folder scanning options:

-F,--follow             - Follow symbolic links ( If supported by the OS)
-a,--ads                - Follow Alternate Data Streams ( If supported by the OS )
-x,--norecurse          - Do not recurse into subfolders

Scanning options:

--noheur                - Disable all heuristics
--heur-low              - Low heuristics (Default)
--heur-med,-A,--all     - Medium heuristics
--heur-high             - High heuristics
--paranoid              - Maximum heuristics
--noarchive             - Do not scan archive files
--archive=x             - Scan archives to level x.
--pua                   - Report potentially unwanted applications like Spyware and Adware
--noremtemplate         - Do not report remote templates

Detection options:

--disinfect             - Disinfect malware if found. Files may be deleted instead of disinfected.
--delete                - Delete files of interest to the scanning engine
--force-delete          - Delete all files of interest to the scanning engine, whether it is safe or not
--quarantine            - Quarantine files of interest to the quarantine folder
--move=folder           - Move files of interest to the specified folder
--copy=folder           - Copy files of interest to the specified folder


Macro options: (These will be valid if --disinfect is used and macro's are detected)

--macro-remove-all      - Remove any macros that are found
--macro-remove-variants - Remove macros even if a variant of a current virus is detected
--macro-remove-allifany - Remove all macros in a document if a variant of a current virus is detected




Attachments 
 

F-PROT Antivirus and Command Anti-Malware are products of CYREN