McAfee sdat extract and scan for anti virus in safe mode. You can use McAfee Sdat to scan your computer for virus. Here are step to perform sdat scan:
1. Download the latest sdat from McAfee site
2. Extract sdat to forder say C:\Scan using this commandsdatXXX.exe /E
Where XXX is number of Sdat file. This is extract file like Scan.exe, McTool.exe, clean.dat etc
3. Run this command :Scan.exe /ADL /CLEAN /DEL /HTML C:\Scan\Report.html.Above command will scan all local drives (ADL), try to clean infected files (CLEAN), delete file if clean fail (DEL) and make html report (HTML).For more Scan.exe option try /? help. Below is the output of
C:\sdat>Scan.exe /?
McAfee VirusScan for Win32 v5.20.0Copyright (c) 1992-2007 McAfee, Inc. All rights reserved.(408) 988-3832 LICENSED COPY - Jun 5 2007
Scan engine v5.2.00 for Win32.Virus data file v5267 created Apr 04 2008Scanning for 386611 viruses, trojans and variants.
Usage: Scan [object1] [object2...] [option1] [option2...]
/? Display this help screen.
/AD Scan all drives (not removable media).
/ADL Scan all local drives (not removable media).
/ADN Scan all network drives.
/AFC= Set the Size of the Internal Cache Used When Decompressing Archive Files.
/ALL Scan all files regardless of filename extension.
C:\sdat>Scan.exe /?
McAfee VirusScan for Win32 v5.20.0Copyright (c) 1992-2007 McAfee, Inc. All rights reserved.(408) 988-3832 LICENSED COPY - Jun 5 2007
Scan engine v5.2.00 for Win32.Virus data file v5267 created Apr 04 2008Scanning for 386611 viruses, trojans and variants.
Usage: Scan [object1] [object2...] [option1] [option2...]
/? Display this help screen.
/AD Scan all drives (not removable media).
/ADL Scan all local drives (not removable media).
/ADN Scan all network drives.
/AFC= Set the Size of the Internal Cache Used When Decompressing Archive Files.
/ALL Scan all files regardless of filename extension.
/ALLOLE Treat all files as compound/OLE regardless of extension.
/ANALYZE Turn on heuristic analysis for programs and macros.
/APPEND Append to report file rather than overwriting.
/BOOT Scan boot sector and master boot record only.
/CHECKLIST Scan list of files contained in .
/CLEAN Clean viruses from infected files and system areas.
/CONTACTFILE Display contents of when a virus is found.
/DAM Remove all macros from infected MS Office files.
/DEL Delete infected files./DOHSM Scan migrated files (hierarchical storage management).
/EXCLUDE Do not scan files listed in .
/EXTLIST List file extensions scanned by default.
/EXTRA Scan using an extra DAT file.
/FAM Find all macros - not just infected macros.
Used with /DAM will remove all macros.
/FREQUENCY Do not scan after the previous scan.
/HELP Display this help screen.
/HTML Create an HTML report file.
/LOAD Load options from .
/MAILBOX Scan inside plain text mailboxes.
/MANALYZE Turn on macro heuristics.
/MANY Scan many floppy diskettes.
/MIME Scan inside MIME, UUE, XXE and BinHex files.
/MOVE Move infected files into directory , preservingpath.
/NOBACKUP Do not prompt for a backup diskette during a sectorrepair.
/NOBOOT Do not scan boot sectors.
/NOBREAK Disable Ctrl-C / Ctrl-Break during scanning.
/NOCOMP Do not scan self extracting executables by default.
/NOD Don't switch into /ALL mode when repairing.
/NODDA No direct disk access.
/NODOC Do not scan MS Office files.
/NOEXPIRE Disable data files expiration date notice.
/NOMEM Do not scan memory for viruses.
/NODECRYPT Don't scan password-protected MS Office documents.
/NOJOKES Do not alert on joke files.
/NORENAME Do not rename infected files that cannot be cleaned.
/PANALYZE Turn on program heuristics./PAUSE Pause at end of each screen page.
/PLAD Preserve Last Access Dates on Novell NetWare drives.
/PROGRAM Scan for potentially unwanted applications.
/REPORT Report names of viruses found into .
/RPTALL Include all scanned files in the /REPORT file.
/RPTCOR Include corrupted files in /REPORT file./
RPTERR Include errors in /REPORT file.
/SILENT Disable all screen output.
/STREAMS Scan inside NTFS streams (NT only).
/SUB Scan subdirectories.
/TIMEOUT Set the maximum time to spend scanning any one file.
/UNZIP Scan inside archive files.
/VIRLIST Display virus list.
/WINMEM Scan all Running Windows Processes.
/WINMEM= Scan the Running Windows Process With Process ID .
No comments:
Post a Comment