home *** CD-ROM | disk | FTP | other *** search
- CSAVNTC.EXE FOR WINDOWS NT(C)
- USERÆS GUIDE
-
- CSAVNTC.EXE is an operating system-specific command line scanner
- that is included with Command AntiVirus for Windows NT. It
- provides the same up-to-the-minute and state-of-the-art protection
- as our GUI and on-access scanners.
-
- Our HoloCheck(tm) scanning technology provides the most up-to-date
- virus prevention. The most important benefits of this technology are:
-
- * Simplified updates. You can now update the SIGN.DEF and
- Macro.def files (which contain the most current virus signatures)
- without reinstalling all of the components. This method adds
- speed and efficiency to the new version of Command AntiVirus.
- * Superior polymorphic virus detection. CSAV now offers
- unparalleled protection and elimination of polymorphic viruses
- including the dreaded Morphine, Anxiety and Spanska.
- * Scanning of embedded (OLE) documents. Not only do we scan
- documents, but if an infected document is embedded in an Excel
- spreadsheet or PowerPoint document, Command AntiVirus will catch
- it and save you from becoming infected.
- * Support for nested zip files. New virus signatures have been added
- in this release.
-
-
- REQUIREMENTS
- CSAVNTC.EXE is run from the NT command console. It requires Windows NT 3.51
- or higher. It is a 32-bit NT-specific program that will not run on
- any other platform.
-
- NOTES
- All physical drives are scanned and boot sectors are reported per
- partition (not per drive).
-
- COMMAND LINE MODE
- Syntax for command-line mode: CSAVNTC.EXE [options] {path}+
- Path is one of the following:
- drive:\path, path, drive: path
-
- In the above syntax, {path}+ means one or more paths.
-
- CSAVNTC.EXE /VIRLIST
- If you do not provide an option, CSAVNTC.EXE displays a help screen
- and the program exits.
-
- Examples:
- csavntc c:\
- csavntc /list c:\mydir
- csavntc /packed .
- csavntc /paranoid q:\footest /type
- csavntc /virlist
- csavntc /list c:\*.*
- csavntc /list /report=myrep.txt c:\mydir
-
- If entered as follows it will not work:
- csavntc /virlist c:
-
- The following files are scanned by default unless /TYPE is selected:
- EXE, COM, SYS, VXD, DLL, DRV, 386, XL?, DO?, OV?, CPL, FON, TSK,
- ACM, ACV, TLB, TSP, OCX, VBX, SCR, and RTF.
-
- COMMAND-LINE SWITCHES
- Switch Description
- /ALL Scans all files regardless of their extension.
- This is not recommended.
- /APPEND Adds to the existing report file. This switch allows
- you to have an extended report of what was scanned.
- If you use the /LIST command, this report could become
- very large so you will need to clear it frequently.
- /APPEND must be used with the /REPORT switch.
- /ARCHIVE Scans inside .ZIP and .ARJ files.
- /COLLECT Scan a virus collection.
- /DELETE Delete infected files.
- /DISINF Disinfect whenever possible - deletes first-generation
- samples and files destroyed by overwriting viruses. It
- will never delete a file that can be disinfected.
- /DUMB Do a "dumb" scan of all files.
- /HARD Scans all local hard drive(s).
- /HELP Displays a list of available switches with a brief
- description. The /? switch can also be used.
- /LIST Produces a report of all objects being scanned not just
- those that are infected.
- /NOBOOT Does not scan boot sectors.
- /NOBREAK Does not abort scan if the CTRL + Break keys are pressed.
- /NOFILE Does not scan files. This is used to scan only boot
- sectors.
- /NOHEUR Disables heuristic scanning.
- /NOSUB Does not scan subdirectories.
- /PARANOID Increases the chances of picking up new viruses, but
- will significantly increase the risk of false positives.
- only recommended for use by experienced, technical-
- minded users. Please keep in mind that we are not
- interested in receiving samples of possible false
- alarms that are only produced when this switch is used.
- /RENAME Rename infected COM/EXE files to VOM/VXE.
- /REPORT=<file> Report all infected objects in file that is in brackets,
- <filename>. Use with the /LIST command to have a full
- list of files scanned.
- /SILENT Do not generate any screen output.
- /TODAY Perform scan only once a day.
- /TYPE Scans files that are recognized as executable. For
- example, .COM, .EXE or files that have a valid
- executable header.
- /PACKED It will internally unpack all recognized objects.
- Currently, ZIP/ARJ/Ice files are supported. This
- unpacking process does slow the scan somewhat.
- /VIRLIST This must be used as the only option. If specified,
- the virus list will be printed on the screen. Use
- redirection to save that as a file. For example,
- CSAV /VIRLIST > VIRLIST.LIS
- /VIRNO Displays the number of recognized viruses.
-
- Special macro virus disinfection options:
- /REMOVEALL Remove all macros from all documents.
- /REMOVENEW Remove new variants of macro viruses by removing all
- macros from infected documents.
- /SAFEREMOVE Remove all macros from documents, if a known
- virus is found.
-
- EXIT CODES
- The program uses the following exit codes, which can be checked with
- the ERRORLEVEL command from a BAT file.
-
- 0 - Normal exit, even if the engine finds a virus.
- 1 - SIGN.DEF or MACRO.DEF is missing or is the wrong version number.
- Other numbers - Internal error.
-
- RESTRICTIONS ON THE DISTRIBUTION OF COMMAND ANTIVIRUS
- Command AntiVirus products are copyrighted and sold under license and
- distribution agreements. The license can be viewed on our web site
- at www.commandcom.com.
-
- Our products cannot be redistributed or repackaged in any way.
- Further, our products are not shareware.
-
- Copyright 1998 by Command Software Systems, Inc.
- All rights reserved.
-
- CSAVNTC.EXE USERÆS GUIDE
-
- Command Software Systems, Inc.
-
-
-
-
-
-