Any command-line parameters for Dr.Web?

Discussion in 'other anti-virus software' started by Minimax2000, Nov 26, 2006.

Thread Status:
Not open for further replies.
  1. Minimax2000

    Minimax2000 Registered Member

    Joined:
    Jun 11, 2006
    Posts:
    204
    Location:
    Switzerland
    Dear Dr. Web users

    I am trying to figure out how to let Dr. Web scan a file from the console.
    What command-line parameters do I have to set? I have already posted in the Dr. Web forum but haven't got any response yet.

    Thanks.

    Frank
     
  2. Minimax2000

    Minimax2000 Registered Member

    Joined:
    Jun 11, 2006
    Posts:
    204
    Location:
    Switzerland
    This I have found out in the meantime. Think I have to play with it a bit.:)


    Command line for starting Dr.Web Scanner:
    DrWeb386 [disk:][path] [options], where:
    disk: - drive to scan,
    * - all logical drives,
    path - path to scan.
    Options:
    /@[+]<file> - scan objects listed in file,
    '+' - do not delete list file after processing,
    /ADW[I|D|M|R] - action on adware programs,
    I - ignore, D - delete, M - move, R - rename,
    /AL - scan all files on a given drive,
    /AR[D|M|R][N] - check archives (ARJ, GZIP, RAR, TAR, ZIP,..),
    D - delete, M - move, R - rename archives, containing infected objects;
    N - supress archiver's info,
    /CN[D|M|R][N] - check containers (HTML, RTF, PowerPoint,..),
    D - delete, M - move, R - rename containers with infected objects;
    N - supress containers's info,
    /CU[D|M|R] - cure infected objects, and delete incurable files, or
    D - delete, M - move, R - rename infected files;
    /DA - start once a day,
    /DLS[I|D|M|R] - action on dialer programs,
    I - ignore, D - delete, M - move, R - rename,
    /EX - scan by extension,
    /FM - scan by format,
    /GO - go without showing prompts,
    /HA - enable heuristic analyzer,
    /HCK[I|D|M|R] - action on hacktool programs,
    I - ignore, D - delete, M - move, R - rename,
    /IC[D|M|R] - action on incurable files,
    D - delete, M - move, R - rename,
    /INI:<file> - use alternative INI-file,
    /JOK[I|D|M|R] - action on joke programs,
    I - ignore, D - delete, M - move, R - rename,
    /LNG[:<file>] - use alternative language file or built-in (English),
    /ML[D|M|R][N] - check mail files,
    D - delete, M - move, R - rename infected mail files, containing
    infected objects; N - supress mail's info,
    /MW[I|D|M|R] - global action on malware programs (adware, dialers,
    jokes, riskware, hacktools),
    I - ignore, D - delete, M - move, R - rename,
    /NI - ignore settings in INI-file,
    /NM - skip memory test,
    /NS - run non-stop (ESC does not abort scan),
    /OK - show 'Ok' for clean files,
    /PR - enable prompts,
    /RP[+][file] - enable report file,
    '+' - append results to report file,
    /RSK[I|D|M|R] - action on riskware programs,
    I - ignore, D - delete, M - move, R - rename,
    /SD - scan subdirectories,
    /SO - enable sound effects,
    /SP[D|M|R] - action on suspicious files,
    D - delete, M - move, R - rename,
    /SS - save settings,
    /TB - test boot sectors and MBR,
    /TM - test memory,
    /TS - test startup areas,
    /UP[N] - scan files packed by LZEXE, DIET, PKLITE, EXEPACK..,
    N - supress packer's name,
    /WA - wait after scanning if viruses found,
    /? - display help.

    These options disable action if postfixed with the '-' symbol:
    /ADW /AR /CU /DLS /FN /HCK /JOK /HA /IC /ML /MW /OK /PF /PR /RSK /SD /SO
    /SP /TB /TM /TS /UP /WA
    Default options (without INI-file):
    /AR /FM /HA /ML /PR /SD /TB /TM /TS /UP
     
  3. Blackcat

    Blackcat Registered Member

    Joined:
    Nov 22, 2002
    Posts:
    4,010
    Location:
    Christchurch, UK
    Take a look at shorty1's posts here.
     
  4. Minimax2000

    Minimax2000 Registered Member

    Joined:
    Jun 11, 2006
    Posts:
    204
    Location:
    Switzerland
  5. shorty1

    shorty1 Registered Member

    Joined:
    Oct 20, 2004
    Posts:
    97
    Location:
    Vermont
    I could be wrong but... I don't think the command line parameters are necessary, in fact, they don't appear to be doing anything, according to your screenshot. When the scanner is called it will run and scan per the settings in drweb32.ini file (which are set through the gui.) If you want it to scan using different settings than the .ini file then you will have to make other adjustments. You might be able to precede the /NI switch along with your other switches or another possibility is to use the switch /INI:<file> to achieve what you are trying to do. But, really, I think the best and easiest thing to do is to just call for the scan and let it scan per the settings in the .ini file -- as it is doing now if I'm reading your screenshot correctly.
    I recall playing with this many moons ago -- with limited success I might add -- and that is the conclusion that I came to anyways.
     
  6. Minimax2000

    Minimax2000 Registered Member

    Joined:
    Jun 11, 2006
    Posts:
    204
    Location:
    Switzerland
    Hello shorty1

    Thanks for your input. The second screenshot shows the actual parameters used to call Dr.Web. If I don't set them the av scanner resorts to ini settings so that dr.web performs additional tasks such as scanning the boot sectors, startup entries etc, which is not desirable here.

    The actual parameters can be retrieved by looking at the command-line column of SSM by the way.

    Regards

    Frank
     
Loading...
Thread Status:
Not open for further replies.