Usage is: antivir [options] [path[\*.ext]] [*.ext] where options are: --help .......... display this help text (abbreviation: -h or -?) --scan-mode= applies "extlist", "smart" or "all" scan methods: extlist scans files according to their filename extension, smart detects which files to scan from their name/content, all scans all files regardless of their name or content --allfiles ...... synonymous for --scan-mode=all --version ....... show version information --info .......... show list of recognized forms --update ........ update antivir --check ......... used with --update to check for updates --temp= .... specify the directory for temporary files --pid-dir= . specify the directory for PID files --home-dir= location of executable, VDF and key files -C ... name of configuration file -s .............. scan subdirectories --scan-in-archive files in archives will be extracted and scanned -z .............. synonymous for --scan-in-archive (scan in archives, too) --archive-max-size=N, --archive-max-recursion=N, --archive-max-ratio=N anti DoS feature: do not scan archive content which would exceed the given file size, nesting level or compression factor limits on extraction (0 means unlimited) --archive-max-count=N anti DoS feature: do not scan archive content which has more than N files in a recursion level --scan-in-mbox .. scan mailbox folders, too (might be time consuming!) --heur-macro .... enable macro heuristics --heur-nomacro .. disable macro heuristics --heur-level=N .. setup heuristics level: 0=off, 1-3=low-high -nolnk .......... do not follow symbolic links -onefs .......... do not cross file systems while following links -noboot ......... do not check any boot records -nombr .......... do not check any master boot records -nobreak ........ disable Ctl-C and Ctrl-Break -nodef ......... do only check the given file types (eg. *.DOC) -cf ... activate CRC check and name the database -cv ............. calculate CRC over the whole file length (default 16k) -cn ............. insert new files into the database -cu ............. recalculate CRC values and update the database -v .............. scan files completely (slower with possible false alerts) -nopack ......... do not scan inside packed files -e [-del | -ren] repair concerning files if possible [-del] non-repairable files will be deleted [-ren] non-repairable files will be renamed -ren ............ rename concerning files (*.COM->*.XXX,...) -del ............ delete concerning files --moveto= .. quarantine concerning files -dmdel .......... delete documents containing suspicious macros -dmdas .......... delete all macros if one appears to be suspicious -dmse ........... set exit code to 101 if any macro was found -r1 ............. just log infections and warnings -r2 ............. log all scanned paths in addition -r3 ............. log all scanned files -r4 ............. select verbose log mode -rs ............. select single-line alert messages -rf ... name of log file %d = day, %m = month, %y = year (two digits each) -ra ............. append new log data to existing file -ro ............. overwrite existing log file -q .............. quiet mode -lang[:|=]DE .... use German texts -lang[:|=]EN .... use English texts -once ........... run only once a day -if .. antivir uses the given ini file --with- ... detect other (non-virus but unwanted) software, too; type may be e.g. "dial", "joke", "game", etc, there is a --with-alltypes shortcut --without- like --with-, but disables this type --alltypes ...... synonymous for --with-alltypes (obsolete) --alert-urls= print URL for more detailed information on alerts --warnings-as-alerts exit with a return code as if a concerning file had been found when warnings have been issued --exclude= exclude files or directories from scan --log-email= send out scan report by email, too @ ...... read parameters from the file with each option in a separate line list of return codes: 0: Normal program termination, nothing found, no error 1: Found concerning file or boot sector 2: An alert was found in memory 3: Suspicious file found 100: antivir only has displayed this help text 101: A macro was found in a document file 102: The option -once was given and antivir already ran today 200: Program aborted, not enough memory available 201: The given response file could not be found 202: Within a response file another @ directive was found 203: Invalid option 204: Invalid (non-existent) directory given at command line 205: The log file could not be created 210: antivir could not find a necessary dll file 211: Programm aborted, because the self check failed 212: The file antivir.vdf could not be read 213: An error occured during initialization 214: License key not found