On-demand scanning command-line options

VirusScan Enterprise uses the on-demand scanner SCAN32.EXE to detect threats. You can use the same executable command, SCAN32, from the command line, or as part of a batch file, to run scans.

The SCAN32 syntax does not require any specific order on its elements, except that you cannot separate a property and its value. This syntax consists of:
  • File name — The name of the executable file: SCAN32.EXE.
  • Options — The option is preceded by a forward slash (/) character and is not case-sensitive.

The command format is:

SCAN32 PROPERTY=VALUE [,VALUE] [/option].

Following is a scan32.exe command example:

scan32.exe PRIORITY /normal

In this example:
  • “PRIORITY” is a command value.
  • “/normal” is a value option.

On-demand scanning values and options


Command-line value Definition with options

ALL

Scans all files in the target folder.

ALLOLE

Scans default files plus all Microsoft Office documents.

ALWAYSEXIT

Forces exit from on-demand scan, even if scan completed with error/failure.

APPLYNVP

Scans for the potentially unwanted programs that are defined in the Unwanted Programs Policy.

ARCHIVE

Scans archive files such as .ZIP, .CAP. LZH, and .UUE files.

AUTOEXIT

Exits the on-demand scanner upon completion of a non-interactive scan.

CLEAN

Cleans the detected target file when a potentially unwanted program is found.

CLEANA

Cleans the detected file when an unwanted program is found.

CONTINUE

Continues scanning after a potentially unwanted program is detected.

CONTINUE2

Continues scanning after a potentially unwanted program is detected and the primary action has failed.

CONTINUEA

Continues scanning after an unwanted program is detected.

CONTINUEA2

Continues scanning after an unwanted program is detected and the primary action has failed.

DEFEXT

Adds file extensions that you specify as parameters to the list of selected file types that are included in scanning.

DELETE

Deletes the detected file when a potentially unwanted program is found.

DELETE2

Deletes the detected file when a potentially unwanted program is found and the primary action has failed.

DELETEA

Deletes the file when an unwanted program is detected.

DELETEA2

Deletes the file when a potentially unwanted program is detected and the primary action has failed.

EDIT

Displays the scan properties dialog box.

EXT

Replaces the extensions on the list of selected file types that are included in scanning with the file extensions that you add, as parameters following this argument.

LOG

Logs detection reports to a previously specified log file.

LOGFORMAT <value>

Uses the specified format for the log file. Valid values are ANSI, UTF8, or UTF16.

LOGSETTINGS

Logs the configuration settings of a scan.

LOGSUMMARY

Logs a summary of scan results.

LOGUSER

Logs identifying information about the user who executes a scan.

MHEUR

Enables Artemis detection of macro threats.

MIME

Detects potentially unwanted programs in mime (Multipurpose Internet Mail Extensions) encoded files.

NOESTIMATE

Does not calculate scan size before beginning scanning of files. Progress bar does not display.

PHEUR

Enables Artemis detection of non-macro threats.

PRIORITY

Sets the priority of the scan relative to other CPU processes. Requires one of the following options:
  • LOW
  • BELOWNORMAL — The ePolicy Orchestrator default.
  • NORMAL — The VirusScan Console default.
Note: You can enter a numerical parameter of 1 to 100, where 10 equals LOW, 50 equals BELOWNORMAL, and 100 equals NORMAL.

PROMPT

Prompts the user for action when a potentially unwanted program is detected.

PROMPT2

Prompts the user for action when a potentially unwanted program is detected and the primary action has failed.

PROMPTA

Prompts the user for action when an unwanted program is detected.

PROMPTA2

Prompts the user for action when an unwanted program is detected and the primary action has failed.

RPTSIZE

Sets the size of the alert log, in Megabytes.

START

Runs the scan. Does not display the properties dialog box.

TASK

Launches the on-demand scanner task specified in the VirusScan Console. Requires additional parameter specifying the specified task ID as recorded in the registry at: hkey_local_machine_\software\McAfee\Desktop\Protection\Tasks.

UINONE

Launches the scanner without making the user interface dialog visible.

On-demand scanning command-line options