From eScan Wiki
(Difference between revisions)
Revision as of 09:09, 22 March 2010 WikiSysop (Talk | contribs) ← Previous diff |
Revision as of 10:09, 22 March 2010 WikiSysop (Talk | contribs) Next diff → |
||
Line 60: | Line 60: | ||
- | <B>Scan Actions</B> | + | <B><font size=3>Scan Actions</font></B> |
- | These option are the action to be taken in case of any infected object found by scanner. | + | <font size=1.5>These option are the action to be taken in case of any infected object found by scanner.</font> |
- | -ly, --log-only | + | <B><font size=2>-ly, --log-only</font></B> |
Only Report infection found / detected in the scanned log. No action on infected | Only Report infection found / detected in the scanned log. No action on infected | ||
files. | files. | ||
- | -dl, --disinfect-log | + | <B><font size=2>-dl, --disinfect-log</font></B> |
Will try to Disinfect, if not possible shall Report infection found / detected | Will try to Disinfect, if not possible shall Report infection found / detected | ||
in the scanned log. | in the scanned log. | ||
- | -dd, --disinfect-delete | + | <B><font size=2>-dd, --disinfect-delete</font></B> |
Will try to Disinfect, if not possible shall delete the infected object. | Will try to Disinfect, if not possible shall delete the infected object. | ||
- | -dq, --disinfect-quarantine | + | <B><font size=2>-dq, --disinfect-quarantine</font></B> |
- | Will try to Disinfect, if not possible shall quarantine (Default) the infected | + | Will try to Disinfect, if not possible shall quarantine (Default) the infected object. |
- | object. | + | <B><font size=2>-dr, --disinfect-rename</font></B> |
- | -dr, --disinfect-rename | + | |
Will try to Disinfect, if not possible shall rename the infected object. | Will try to Disinfect, if not possible shall rename the infected object. | ||
- | -dp, --disinfect-prompt | + | <B><font size=2>-dp, --disinfect-prompt</font></B> |
- | Will try to Disinfect, if not possible shall prompt for the action to be taken | + | Will try to Disinfect, if not possible shall prompt for the action to be taken on the infected object. |
- | on the infected object. | + | |
Following Actions will be prompted: | Following Actions will be prompted: | ||
Do Nothing | Do Nothing | ||
Line 84: | Line 82: | ||
Rename | Rename | ||
Cancel Scan | Cancel Scan | ||
- | -di, --delete-infected | + | <B><font size=2>-di, --delete-infected</font></B> |
Will Delete the Infected object. | Will Delete the Infected object. | ||
- | -ri, --rename-infected | + | <B><font size=2>-ri, --rename-infected</font></B> |
Will Rename the Infected object. | Will Rename the Infected object. | ||
- | -qi, --quarantine-infected | + | <B><font size=2>-qi, --quarantine-infected</font></B> |
Will Quarantine the Infected object. | Will Quarantine the Infected object. | ||
- | -pr, --prompt | + | <B><font size=2>-pr, --prompt</font></B> |
- | Will Prompt for an Action to be taken on the infected object without trying | + | Will Prompt for an Action to be taken on the infected object without trying to disinfect it. |
- | to disinfect it. | + | <B><font size=2>-qp, --quarantine-path*</font></B> |
- | -qp, --quarantine-path* | + | |
Sets the Quarantine Path for the infected object. It sets action as quarantine. | Sets the Quarantine Path for the infected object. It sets action as quarantine. | ||
While setting Quarantine Path, make sure that user has write permission to | While setting Quarantine Path, make sure that user has write permission to | ||
Line 99: | Line 96: | ||
Example | Example | ||
# escan -qp /var/MicroWorld/var/quarantine/escan | # escan -qp /var/MicroWorld/var/quarantine/escan | ||
- | -re, --rename-extension* | + | <B><font size=2>-re, --rename-extension*</font></B> |
Renames infected file with this extension. Extension must be alphanumeric string | Renames infected file with this extension. Extension must be alphanumeric string | ||
starting with alphabet and 1 to 5 characters long. Please do not put dot (’.’) | starting with alphabet and 1 to 5 characters long. Please do not put dot (’.’) | ||
before extension value. | before extension value. | ||
- | Example | + | Example |
# escan -re mwt | # escan -re mwt | ||
- | * Quarantine path and Rename extension Parameters are descarded, if action is set as ’prompt’. In that case default qurantine path | + | </B>NOTE:</B> Quarantine path and Rename extension Parameters are descarded, if action is set as ’prompt’. In that case default qurantine path |
’/var/MicroWorld/var/quarantine/escan’ and default rename extension ’.mwt’ will be used. | ’/var/MicroWorld/var/quarantine/escan’ and default rename extension ’.mwt’ will be used. | ||
Also, provide only one of -qp or -re, otherwise both the parameters will be ignored and default values will be used. | Also, provide only one of -qp or -re, otherwise both the parameters will be ignored and default values will be used. | ||
Line 111: | Line 108: | ||
- | <B>Recursion Options</B> | + | <B><font size=3>Recursion Options</font></font></B> |
- | -rr, --recursion | + | <B><font size=2>-rr, --recursion</font></B> |
Will Scan files in the Directories and in the Sub-Directories recursively. | Will Scan files in the Directories and in the Sub-Directories recursively. | ||
By default this option is enabled. | By default this option is enabled. | ||
- | -rr-, --no-recursion | + | <B><font size=2>-rr-, --no-recursion</font></B> |
Will scan only the files in the directory of subject to scan without following | Will scan only the files in the directory of subject to scan without following | ||
any sub-directory in the path. | any sub-directory in the path. | ||
- | -lk-, --no-symlink | + | <B><font size=2>-lk-, --no-symlink</font></B> |
While scanning the object(s), any symbolic link in the path will be will not be | While scanning the object(s), any symbolic link in the path will be will not be | ||
followed and will be ignored. By default, all symbolic link scanning is disabled. | followed and will be ignored. By default, all symbolic link scanning is disabled. | ||
- | -lk, --all-symlink | + | <B><font size=2>-lk, --all-symlink</font></B> |
While scanning the object(s), any symbolic link in the path will be resolved and | While scanning the object(s), any symbolic link in the path will be resolved and | ||
will be scanned. | will be scanned. | ||
- | -cr-, --no-cross-fs | + | <B><font size=2>-cr-, --no-cross-fs</font></B> |
While resolving the symbolic link in scan path or object, if any object is found | While resolving the symbolic link in scan path or object, if any object is found | ||
on other device (physical device or logical file system), the object will be | on other device (physical device or logical file system), the object will be | ||
ignored and path will not be followed. By default, any cross file system scanning | ignored and path will not be followed. By default, any cross file system scanning | ||
is diabled. | is diabled. | ||
- | -cr, --cross-fs | + | <B><font size=2>-cr, --cross-fs</font></B> |
While resolving the symbolic link in scan path or object, if object(s) is/are | While resolving the symbolic link in scan path or object, if object(s) is/are | ||
foundon other device, the path will be followed for scanning. | foundon other device, the path will be followed for scanning. | ||
- | <B>Scan Options</B> | + | <B><font size=3>Scan Options</font></B> |
- | -m0, --mem-scan-only | + | <B><font size=2>-m0, --mem-scan-only</font></B> |
In current scan session, scan memory for any virus(es). | In current scan session, scan memory for any virus(es). | ||
- | -m, --mem-scan | + | <B><font size=2>-m, --mem-scan</font></B> |
For every scan, memory will be scanner before performing any other scanning. | For every scan, memory will be scanner before performing any other scanning. | ||
By defualt, memory is set to scan at every scan session startup. | By defualt, memory is set to scan at every scan session startup. | ||
- | -m-, --no-mem-scan | + | <B><font size=2>-m-, --no-mem-scan</font></B> |
Disbale all memory scan at scan session startup. | Disbale all memory scan at scan session startup. | ||
- | -au, --auto-update | + | <B><font size=2>-au, --auto-update</font></B> |
At every scan session startup, update virus definition database, before scanning. | At every scan session startup, update virus definition database, before scanning. | ||
- | -pk, --pack | + | <B><font size=2>-pk, --pack</font></B> |
Scan packed files on scan path. | Scan packed files on scan path. | ||
- | -pk-, --no-pack | + | <B><font size=2>-pk-, --no-pack</font></B> |
Do not scan any packed files on scan path. | Do not scan any packed files on scan path. | ||
- | -ac, --archives | + | <B><font size=2>-ac, --archives</font></B> |
Scan archived files on scan path. | Scan archived files on scan path. | ||
- | -ac-, --no-archives | + | <B><font size=2>-ac-, --no-archives</font></B> |
Do not scan archived files on scan path. | Do not scan archived files on scan path. | ||
- | -db, --mails | + | <B><font size=2>-db, --mails</font></B> |
Scan plain mails & mail database files on scan path. | Scan plain mails & mail database files on scan path. | ||
- | -db-, --no-mail | + | <B><font size=2>-db-, --no-mail</font></B> |
Do not scan plain mails & mail database files on scan path. | Do not scan plain mails & mail database files on scan path. | ||
- | -hu, --heuristic | + | <B><font size=2>-hu, --heuristic</font></B> |
Perform heuristic checks for any suspected pattern of unknown virus(es) in object(s). | Perform heuristic checks for any suspected pattern of unknown virus(es) in object(s). | ||
- | -hu-, --no-heuristic | + | <B><font size=2>-hu-, --no-heuristic</font></B> |
Do perform heuristic checks for suspected pattern of unknown virus(es). | Do perform heuristic checks for suspected pattern of unknown virus(es). | ||
- | -sx, --scan-ext | + | <B><font size=2>-sx, --scan-ext</font></B> |
Scan file(s) having defined extension(s). | Scan file(s) having defined extension(s). | ||
Seperate multiple extensions by ’,’. | Seperate multiple extensions by ’,’. | ||
Line 168: | Line 165: | ||
To scan files having extensions exe or com | To scan files having extensions exe or com | ||
# escan -sx exe,com /home | # escan -sx exe,com /home | ||
- | -xx, --exclude-ext | + | <B><font size=2>-xx, --exclude-ext</font></B> |
Exclude file(s) having defined extension(s) on scan path. | Exclude file(s) having defined extension(s) on scan path. | ||
Seperate multiple extensions by ’,’. | Seperate multiple extensions by ’,’. | ||
Line 176: | Line 173: | ||
To exclude files having extension exe, com type | To exclude files having extension exe, com type | ||
# escan -xx exe, com /home | # escan -xx exe, com /home | ||
- | * By default, all files with extension ’.mwt’ will be exclude, if not explicitly declared in scan extension list. | + | <B>NOTE:</B> By default, all files with extension ’.mwt’ will be exclude, if not explicitly declared in scan extension list. |
- | -xd, --exclude-dirs | + | <B><font size=2>-xd, --exclude-dirs</font></B> |
Exclude directory(ies) on scan path. | Exclude directory(ies) on scan path. | ||
Seperate multiple directories by ’,’. | Seperate multiple directories by ’,’. | ||
Line 185: | Line 182: | ||
To exclude the /var and /opt directory from scanning | To exclude the /var and /opt directory from scanning | ||
# escan -xd /var,/opt / | # escan -xd /var,/opt / | ||
- | -dh, --max-depth | + | <B><font size=2>-dh, --max-depth</font></B> |
While performing recursive scanning, it allows scanner to follow the defined | While performing recursive scanning, it allows scanner to follow the defined | ||
number of depth only. This option is ignored, if recursive scanning is disabled. | number of depth only. This option is ignored, if recursive scanning is disabled. | ||
Line 191: | Line 188: | ||
To scan upto 2 level of depth while scanning /home | To scan upto 2 level of depth while scanning /home | ||
# escan -dh 2 /home | # escan -dh 2 /home | ||
- | -ms, --max-size | + | <B><font size=2>-ms, --max-size</font></B> |
As larger files takes more time to scan, exclude the larger file(s) by providing | As larger files takes more time to scan, exclude the larger file(s) by providing | ||
this option. suffix the size parameter with | this option. suffix the size parameter with | ||
Line 202: | Line 199: | ||
- | <B>General Options</B> | + | <B><font size=3>General Options</font></B> |
- | -v, --version | + | <B><font size=2>-v, --version</font></B> |
Display the MicroWorld eScan version inforamtion(s). | Display the MicroWorld eScan version inforamtion(s). | ||
- | -y0, --display-none | + | <B><font size=2>y0, --display-none</font></B> |
Do not display any output on the terminal while scan is in progress. | Do not display any output on the terminal while scan is in progress. | ||
- | -ym, --display-minimum | + | <B><font size=2>-ym, --display-minimum</font></B> |
Display Minimum output on terminal. Only initialization alert, | Display Minimum output on terminal. Only initialization alert, | ||
scan configuration and scan result statistics will be printed. | scan configuration and scan result statistics will be printed. | ||
- | -yi, --display-infected | + | <B><font size=2>-yi, --display-infected</font></B> |
In addition to above information, all infection and action details | In addition to above information, all infection and action details | ||
will be printed to terminal. | will be printed to terminal. | ||
- | -y, --display-all | + | <B><font size=2>-y, --display-all</font></B> |
Display eveything on terminal. | Display eveything on terminal. | ||
- | -l, --log-path | + | <B><font size=2>-l, --log-path</font></B> |
Will set the scan log file path. eScan creates escan directory in | Will set the scan log file path. eScan creates escan directory in | ||
log directory to differentiate escan log from other logs. | log directory to differentiate escan log from other logs. | ||
- | -l0, --no-log | + | <B><font size=2>-l0, --no-log</font></B> |
Do not log any thing. No log file will be created. | Do not log any thing. No log file will be created. | ||
- | -lm, --log-minimum | + | <B><font size=2>-lm, --log-minimum</font></B> |
Log Minimum infomation. Only initialization alert, scan configuration | Log Minimum infomation. Only initialization alert, scan configuration | ||
and scan result statistics will be printed. | and scan result statistics will be printed. | ||
- | -li, --log-infections | + | <B><font size=2>-li, --log-infections</font></B> |
In addition to above information, all infection and action details | In addition to above information, all infection and action details | ||
will be printed in log file. | will be printed in log file. | ||
- | -la, --log-all | + | <B><font size=2>-la, --log-all</font></B> |
Log everything. | Log everything. | ||
- | -ss, --save-settings | + | <B><font size=2>-ss, --save-settings</font></B> |
Save the provided scan setting as default settings before scanning. | Save the provided scan setting as default settings before scanning. | ||
- | -so, --save-only | + | <B><font size=2>-so, --save-only</font></B> |
Save the provided scan setting as default settings and exit without | Save the provided scan setting as default settings and exit without | ||
scanning. | scanning. | ||
- | -G, --restore-global | + | <B><font size=2>-G, --restore-global</font></B> |
This option is available to non-root user’s only. All user (except root) | This option is available to non-root user’s only. All user (except root) | ||
has their own default settings configuration saved. This option reset | has their own default settings configuration saved. This option reset | ||
the user’s default settings with the Global settings (root’s settings). | the user’s default settings with the Global settings (root’s settings). | ||
- | -ui, --av-info | + | <B><font size=2>-ui, --av-info</font></B> |
Display the AV engine version, last virus signature update date and | Display the AV engine version, last virus signature update date and | ||
virus signature count and exit. | virus signature count and exit. | ||
Line 243: | Line 240: | ||
- | <B>Update Options (for root only)</B> | + | <B><font size=3>Update Options (for root only)</font></B> |
These options are available to root user only. | These options are available to root user only. | ||
- | -u, --update | + | <B><font size=2>-u, --update</font></B> |
Start downloading the latest virus definitions. | Start downloading the latest virus definitions. | ||
- | -x, --use-proxy | + | <B><font size=2>-x, --use-proxy</font></B> |
Use Proxy for downloading the updates from internet. | Use Proxy for downloading the updates from internet. | ||
- | -x-, --no-proxy | + | <B><font size=2>-x-, --no-proxy</font></B> |
Do not use the Proxy for downloading the updates from internet. | Do not use the Proxy for downloading the updates from internet. | ||
- | -xi, --proxy-ip | + | <B><font size=2>-xi, --proxy-ip</font></B> |
IP Address of the Proxy Server. | IP Address of the Proxy Server. | ||
- | -xt, --proxy-port | + | <B><font size=2>-xt, --proxy-port</font></B> |
Port of the Proxy Server | Port of the Proxy Server | ||
Example: | Example: | ||
To download the Virus defination using the proxy setting | To download the Virus defination using the proxy setting | ||
# escan -u -xi 192.168.0.25 -xt 8080 | # escan -u -xi 192.168.0.25 -xt 8080 | ||
- | -xa, --use-proxy-auth | + | <B><font size=2>-xa, --use-proxy-auth</font></B> |
Use the Proxy authentication for downloading the virus definition. | Use the Proxy authentication for downloading the virus definition. | ||
- | -xa-, --no-proxy-auth | + | <B><font size=2>-xa-, --no-proxy-auth</font></B> |
Do not use Proxy authentication for downloading the virus definition. | Do not use Proxy authentication for downloading the virus definition. | ||
- | -xu, --proxy-user | + | <B><font size=2>-xu, --proxy-user</font></B> |
Proxy authentication user name. | Proxy authentication user name. | ||
- | -pw, --proxy-passwd | + | <B><font size=2>-pw, --proxy-passwd</font></B> |
Proxy authentication password. | Proxy authentication password. | ||
- | -ul, --server-list | + | <B><font size=2>-ul, --server-list</font></B> |
Use update server(s) instead of default update server (not recommended). | Use update server(s) instead of default update server (not recommended). | ||
Separate multi servers by comma. | Separate multi servers by comma. | ||
- | -xs, --use-https | + | <B><font size=2>-xs, --use-https</font></B> |
Use the secure http to download updates. | Use the secure http to download updates. | ||
- | -xs-, --use-http | + | <B><font size=2>-xs-, --use-http</font></B> |
Do not use secure http to download updates. | Do not use secure http to download updates. | ||
- | -to, --time-out | + | <B><font size=2>-to, --time-out</font></B> |
Set the connection time out (in seconds) for downloading updates. | Set the connection time out (in seconds) for downloading updates. | ||
- | -rc, --retries | + | <B><font size=2>-rc, --retries</font></B> |
Set the retry count in case of connection failure for downloading. | Set the retry count in case of connection failure for downloading. | ||
These options are available to root user only. | These options are available to root user only. | ||
- | <B>Schedule Options (for root only)</B> | + | <B><font size=3>Schedule Options (for root only)</font></B> |
- | -sc, --save-schedule | + | <B><font size=2>-sc, --save-schedule</font></B> |
Save the Scheduled Job for scanning. This option requires a parameter | Save the Scheduled Job for scanning. This option requires a parameter | ||
as UNIQUE job name. Job name must be alphanumeric starting with an alphabet and | as UNIQUE job name. Job name must be alphanumeric starting with an alphabet and | ||
1 to 10 characters long. | 1 to 10 characters long. | ||
- | -min, --minute | + | <B><font size=2>-min, --minute</font></B> |
Schedule job minutes of hour [0-59]. | Schedule job minutes of hour [0-59]. | ||
- | -hr, --hour | + | <B><font size=2>-hr, --hour</font></B> |
Schedule job hour of day [0-23]. | Schedule job hour of day [0-23]. | ||
- | -day, --month-day | + | <B><font size=2>-day, --month-day</font></B> |
Schedule job day of month [1-(28/29/30/31)]. | Schedule job day of month [1-(28/29/30/31)]. | ||
- | -wd, --week-day | + | <B><font size=2>-wd, --week-day</font></B> |
Schedule job day of week [0-6] (0 Sun/1 Mon/.../6 Sat). | Schedule job day of week [0-6] (0 Sun/1 Mon/.../6 Sat). | ||
- | -mon, --month | + | <B><font size=2>-mon, --month</font></B> |
Schedule job month of yesk [1-12]. | Schedule job month of yesk [1-12]. | ||
- | -fq, --frequency | + | <B><font size=2>-fq, --frequency</font></B> |
Schedule job frequency. | Schedule job frequency. | ||
0 once | 0 once | ||
Line 301: | Line 298: | ||
3 monthly | 3 monthly | ||
4 weekly | 4 weekly | ||
- | -ds, --del-schedule | + | <B><font size=2>-ds, --del-schedule</font></B> |
Delete save scheduled job. This option requires a parameter | Delete save scheduled job. This option requires a parameter | ||
as existing job name. | as existing job name. | ||
Example: | Example: | ||
# escan -ds <job name> | # escan -ds <job name> | ||
- | -do, --delete-old | + | <B><font size=2>-do, --delete-old</font></B> |
Purge all expired/outdated schdules. | Purge all expired/outdated schdules. | ||
- | -h, --help | + | |
- | Print this message and Exit | + | <B>Note:</B> |
- | Note: | + | |
All schedules accepts scan and action parameters (except memory scan options), | All schedules accepts scan and action parameters (except memory scan options), | ||
that will be saved for new job. By default, schedules are saved with the default | that will be saved for new job. By default, schedules are saved with the default | ||
scan options | scan options | ||
- | Schedule examples: | + | <B>Schedule examples:</B> |
To schedule a scanning to run only ONCE on the current date at paritcular time: | To schedule a scanning to run only ONCE on the current date at paritcular time: | ||
# escan -sc job1 -fq 0 -hr 15 -min 30 /home | # escan -sc job1 -fq 0 -hr 15 -min 30 /home | ||
Line 341: | Line 337: | ||
- | <B>Help Options</B> | + | <B><font size=3>Help Options</font></B> |
- | -h,--help | + | <B><font size=2>-h,--help</font></B> |
+ | Print this help message and Exit |
Revision as of 10:09, 22 March 2010
Languages : · English · Español · Italiano · 中文(繁體) |
General |
Knowledgebase |
Support |
Command-Line Parameters for Manual scanning |
|
SYNOPSIS
escan [OPTIONS]... [OBJECT]...
DESCRIPTION
Scans and cleans directories and files for viruses and other malwares.
OPTIONS
Scan Actions These option are the action to be taken in case of any infected object found by scanner. -ly, --log-only Only Report infection found / detected in the scanned log. No action on infected files. -dl, --disinfect-log Will try to Disinfect, if not possible shall Report infection found / detected in the scanned log. -dd, --disinfect-delete Will try to Disinfect, if not possible shall delete the infected object. -dq, --disinfect-quarantine Will try to Disinfect, if not possible shall quarantine (Default) the infected object. -dr, --disinfect-rename Will try to Disinfect, if not possible shall rename the infected object. -dp, --disinfect-prompt Will try to Disinfect, if not possible shall prompt for the action to be taken on the infected object. Following Actions will be prompted: Do Nothing Delete Quarantine Rename Cancel Scan -di, --delete-infected Will Delete the Infected object. -ri, --rename-infected Will Rename the Infected object. -qi, --quarantine-infected Will Quarantine the Infected object. -pr, --prompt Will Prompt for an Action to be taken on the infected object without trying to disinfect it. -qp, --quarantine-path* Sets the Quarantine Path for the infected object. It sets action as quarantine. While setting Quarantine Path, make sure that user has write permission to directory. Example # escan -qp /var/MicroWorld/var/quarantine/escan -re, --rename-extension* Renames infected file with this extension. Extension must be alphanumeric string starting with alphabet and 1 to 5 characters long. Please do not put dot (’.’) before extension value. Example # escan -re mwt </B>NOTE:</B> Quarantine path and Rename extension Parameters are descarded, if action is set as ’prompt’. In that case default qurantine path ’/var/MicroWorld/var/quarantine/escan’ and default rename extension ’.mwt’ will be used. Also, provide only one of -qp or -re, otherwise both the parameters will be ignored and default values will be used.
Recursion Options</font> -rr, --recursion Will Scan files in the Directories and in the Sub-Directories recursively. By default this option is enabled. -rr-, --no-recursion Will scan only the files in the directory of subject to scan without following any sub-directory in the path. -lk-, --no-symlink While scanning the object(s), any symbolic link in the path will be will not be followed and will be ignored. By default, all symbolic link scanning is disabled. -lk, --all-symlink While scanning the object(s), any symbolic link in the path will be resolved and will be scanned. -cr-, --no-cross-fs While resolving the symbolic link in scan path or object, if any object is found on other device (physical device or logical file system), the object will be ignored and path will not be followed. By default, any cross file system scanning is diabled. -cr, --cross-fs While resolving the symbolic link in scan path or object, if object(s) is/are foundon other device, the path will be followed for scanning.
Scan Options -m0, --mem-scan-only In current scan session, scan memory for any virus(es). -m, --mem-scan For every scan, memory will be scanner before performing any other scanning. By defualt, memory is set to scan at every scan session startup. -m-, --no-mem-scan Disbale all memory scan at scan session startup. -au, --auto-update At every scan session startup, update virus definition database, before scanning. -pk, --pack Scan packed files on scan path. -pk-, --no-pack Do not scan any packed files on scan path. -ac, --archives Scan archived files on scan path. -ac-, --no-archives Do not scan archived files on scan path. -db, --mails Scan plain mails & mail database files on scan path. -db-, --no-mail Do not scan plain mails & mail database files on scan path. -hu, --heuristic Perform heuristic checks for any suspected pattern of unknown virus(es) in object(s). -hu-, --no-heuristic Do perform heuristic checks for suspected pattern of unknown virus(es). -sx, --scan-ext Scan file(s) having defined extension(s). Seperate multiple extensions by ’,’. Example: To scan files having extensions exe # escan -sx exe /home To scan files having extensions exe or com # escan -sx exe,com /home -xx, --exclude-ext Exclude file(s) having defined extension(s) on scan path. Seperate multiple extensions by ’,’. Example: To exclude files having extension exe type # escan -xx exe /home To exclude files having extension exe, com type # escan -xx exe, com /home NOTE: By default, all files with extension ’.mwt’ will be exclude, if not explicitly declared in scan extension list. -xd, --exclude-dirs Exclude directory(ies) on scan path. Seperate multiple directories by ’,’. Example: To exclude the /var directory from scanning # escan -xd /var / To exclude the /var and /opt directory from scanning # escan -xd /var,/opt / -dh, --max-depth While performing recursive scanning, it allows scanner to follow the defined number of depth only. This option is ignored, if recursive scanning is disabled. Example: To scan upto 2 level of depth while scanning /home # escan -dh 2 /home -ms, --max-size As larger files takes more time to scan, exclude the larger file(s) by providing this option. suffix the size parameter with ’b’ for byte / ’k’ for kilo-bytes / ’m’ for mega-bytes. If no suffix is provides, scanner assumes the size parameter in KB. Example: To exclude files larger than 5 MB # escan -mx 5m /home
General Options -v, --version Display the MicroWorld eScan version inforamtion(s). y0, --display-none Do not display any output on the terminal while scan is in progress. -ym, --display-minimum Display Minimum output on terminal. Only initialization alert, scan configuration and scan result statistics will be printed. -yi, --display-infected In addition to above information, all infection and action details will be printed to terminal. -y, --display-all Display eveything on terminal. -l, --log-path Will set the scan log file path. eScan creates escan directory in log directory to differentiate escan log from other logs. -l0, --no-log Do not log any thing. No log file will be created. -lm, --log-minimum Log Minimum infomation. Only initialization alert, scan configuration and scan result statistics will be printed. -li, --log-infections In addition to above information, all infection and action details will be printed in log file. -la, --log-all Log everything. -ss, --save-settings Save the provided scan setting as default settings before scanning. -so, --save-only Save the provided scan setting as default settings and exit without scanning. -G, --restore-global This option is available to non-root user’s only. All user (except root) has their own default settings configuration saved. This option reset the user’s default settings with the Global settings (root’s settings). -ui, --av-info Display the AV engine version, last virus signature update date and virus signature count and exit.
Update Options (for root only) These options are available to root user only. -u, --update Start downloading the latest virus definitions. -x, --use-proxy Use Proxy for downloading the updates from internet. -x-, --no-proxy Do not use the Proxy for downloading the updates from internet. -xi, --proxy-ip IP Address of the Proxy Server. -xt, --proxy-port Port of the Proxy Server Example: To download the Virus defination using the proxy setting # escan -u -xi 192.168.0.25 -xt 8080 -xa, --use-proxy-auth Use the Proxy authentication for downloading the virus definition. -xa-, --no-proxy-auth Do not use Proxy authentication for downloading the virus definition. -xu, --proxy-user Proxy authentication user name. -pw, --proxy-passwd Proxy authentication password. -ul, --server-list Use update server(s) instead of default update server (not recommended). Separate multi servers by comma. -xs, --use-https Use the secure http to download updates. -xs-, --use-http Do not use secure http to download updates. -to, --time-out Set the connection time out (in seconds) for downloading updates. -rc, --retries Set the retry count in case of connection failure for downloading. These options are available to root user only.
Schedule Options (for root only) -sc, --save-schedule Save the Scheduled Job for scanning. This option requires a parameter as UNIQUE job name. Job name must be alphanumeric starting with an alphabet and 1 to 10 characters long. -min, --minute Schedule job minutes of hour [0-59]. -hr, --hour Schedule job hour of day [0-23]. -day, --month-day Schedule job day of month [1-(28/29/30/31)]. -wd, --week-day Schedule job day of week [0-6] (0 Sun/1 Mon/.../6 Sat). -mon, --month Schedule job month of yesk [1-12]. -fq, --frequency Schedule job frequency. 0 once 1 hourly 2 daily 3 monthly 4 weekly -ds, --del-schedule Delete save scheduled job. This option requires a parameter as existing job name. Example: # escan -ds <job name> -do, --delete-old Purge all expired/outdated schdules. Note: All schedules accepts scan and action parameters (except memory scan options), that will be saved for new job. By default, schedules are saved with the default scan options Schedule examples: To schedule a scanning to run only ONCE on the current date at paritcular time: # escan -sc job1 -fq 0 -hr 15 -min 30 /home Above command saves schedule with name job1, that will start scan at 15:30 on current day. To schedule a scanning to run only ONCE on specified date at particular time: # escan -sc job2 -fq 0 -day 1 -mon 10 -hr 15 -min 30 /home Above command saves schedule with name job2, that will start scan at 15:30 on 1st of octobor. To schedule a scanning to run at every HOUR: # escan -sc job3 -fq 1 -min 59 /home Above command saves schedule with name job3, that will start scan at 59th minute of every hour. To schedule a scanning to run Daily at a particular: # escan -sc job4 -fq 2 -hr 15 -min 40 /home Above command saves schedule with name job4, that will start scan at 2:15 every day. To schedule a scanning to run every MONTH: # escan -sc job5 -fq 3 -day 1 -hr 15 -min 30 /home Above command saves schedule with name job5, that will start scan at 15:30 on 1st of every month. To schedule a scanning to run every WEEK: # escan -sc job6 -fq 4 -wd 3 -hr 15 -min 30 /home Above command saves schedule with name job5, that will start scan at 15:30 on every Wednesday.
Help Options -h,--help Print this help message and Exit