Content-type: text/html Manpage of f-prot

f-prot

Section: User Commands (1)
Updated: 20 Mar 2003
Index Return to Main Contents

NAME

f-prot - F-Prot Antivirus for UNIX, Command-Line Scanner

SYNTAX

f-prot [options] [file or directory]

DESCRIPTION

f-prot f-prot is a tool for scanning individual files or directory trees for viruses. The options selected determine which methods are used for scanning as well as toggling on or of features such as disinfection.

REPORTING OPTIONS

-append: Append to existing report file.
-help: Displays short summary of available options for F-Prot Antivirus.
-list: Show a list of all files which have been checked.
-nobreak: Do not abort scan if ESC is pressed.
-old: Do not give a warning message when using outdated DEF files.
-page: Only show one screen output at a time.
-report=<report_name>: Save output to the <report_name> file.
-silent: Do not generate any screen output. This can be useful in the case of running f-prot in a cron job and using the -report option.
-verno: Show version information.
-virlist: List viruses known to F-Prot Antivirus with the current virus signature files.
-virno: Give statistical information about viruses known to F-Prot Antivirus with the current virus signature files.
-wrap: Wrap text outpput so it fits in 78 columns. This also applies to the file used with the -report option.

SCANNING OPTIONS

-ai: Enable neural-network virus detection. The -ai option should not be used with the -noheur option.
-archive: Scan inside supported archives. Supported archives are .zip, .cab, .tar, .gz, or removal of infected files within archives. Unix mailboxes are considered to be archives and therefore F-Prot Antivirus is not able to remove infected attachments.
-auto: Automatically remove detected viruses. As noted above, this will not work on archieved files.
-collect: Scan a virus collection. This option is intended for advanced users. When this option is used it will, e.g. scan for bootsector viruses within files, even though the virus resides within a file instead of a bootsector.
-delete: Delete infected files. User confirmation is required. However, the -auto option can be used to automatically confirm the action. F-Prot Antivirus does not support removal of infected objects located in archives. Also, the -delete option has no effect on office documents, since that could cause the loss of work.
-disinf: Disinfect whenever possible. User confirmation is required. However, the -auto option can be used to automatically confirm the action. F-Prot Antivirus does not support disinfection of infected objects located in archives.
-dumb: Scan all files, regardless of extensions or content.
-ext: Scan only files with default extensions.
-follow: Follow symbolic links. This should be used with care, as the program does not detect "circular" directories, and may get stuck in an endless loop.
-noheur: Disable heuristic scanning. The -noheur option should not be used with the -ai option.
-nosub: Do not scan subdirectories.
-onlyheur: Only use heuristics, do not scan for known virus signatures. By using this option F-Prot Antivirus will only detect a fraction of infected files.
-packed: Unpack compressed executables.
-rename: Rename extensions of infected files to prevent them from being executed, e.g. renaming file.com to file.vom and file.exe to file.vxe. This will not prevent files from being executed on Unix since on the one hand .exe files and .com files from Windows are not executable on a Unix platform by default, and on the other hand file extensions are not used on Unix systems with regards to executability.
-type: Select files by type. (default)

MACRO SCANNING OPTIONS

-nomacro: Do not scan for macro viruses.
-onlymacro: Only scan for macro viruses.
-removeall: Remove all macros from all documents. When this option is used with -disinf or -delete all identified macros will be removed.
-removenew: Remove new variants of macro viruses by removing all macros from infected documents.
-saferemove: Remove all macros from documents, if a known virus is found.

PROGRAM EXIT CODES

0: Normal exit. Nothing found, nothing done.
1: Unrecoverable error (for example, missing SIGN.DEF).
2: Selftest failed (program has been modified).
3: At least one virus-infected object was found.
4: Reserved, not currently in use.
5: Abnormal termination (scanning did not finish).
6: At least one virus was removed.
7: Error, out of memory (should never happen, but well...)
8: Something suspicious was found, but no recognized virus.

LICENSING

For information about Licensing, see the LICENSE file that comes with F-Prot Antivirus.

CONTACT INFORMATION

Please direct any feedback to:

http://www.f-prot.com/support/contact_support.html

Updates will be advertised on: http://www.f-prot.com/

BUGS

We have received a request for the ability to scan stdin. This is actually rather difficult, as the engine design requires that the size of any scannable object is known before starting a scan.

This document was created by man2html, using the manual pages.
Time: 23:18:40 GMT, August 31, 2003