Endpoint Protection

 View Only

The new features of the DoScan.exe on SEP RU6MP1 

Aug 18, 2010 01:45 AM

As the SEP RU6MP1 released, there are some new features of the DoScan.exe. There are more options for the DoScan.exe on RU6MP1. The screenshot below shows the options on SEP RU5:


And, the newest help and options of DoScan.exe on RU6MP1 shows as below:


Here are the mainly 5 options and their usage:


1) DoScan.exe /ScanName "Weekly Scheduled Scan"
   - Only one scan is allowed to pass in as of now. The name of a local scan or admin scan can be passed in as a parameter.
   - Scan options are the same as from the named scan in the command line.
 
2) DoScan.exe /List
   - Lists all the admin and local scans present in the system.
   - Attaches to the same console if launched from a console or creates a new console to display the output if launched from a Windows GUI.
Notes:
Before run the command 'DoScan.exe /ScanName "Weekly Scheduled Scan', you need to run the 'DoScan.exe /List' to find out what scan name can be used. Below is the example of the 'DoScan.exe /List':


 
3) DoScan.exe /ScanDrive "A-C,E,V-S,Z"
   - You can leave spaces in between drive letters but the entire string should be within quotes. This example will scan drives A, B, C, E, S, T, U, V, Z. 
   - Scan options will be taken from the default quick scan options.
 
4) DoScan.exe /ScanDir "%WinDir%\System32" /ScanDir "%Temp%" /ScanDir "C:\Test"
   - Multiple directories can be passed in with multiple /ScanDir switches.
   - Relative paths or Environment strings are permitted in the path. Internally these will be converted to fully qualified names.
   - Scan options will be taken from the default quick scan options.
 
5) DoScan.exe /ScanFile "C:\Test.log" /ScanFile "%WinDir%\Notepad.exe"
   - Same as the /ScanDir switch. Multiple filenames can be passed with multiple /ScanFile switches.
   - Relative paths or Environment strings are permitted in the path. Internally these will be converted to fully qualified names.
   - Scan options will be taken from the default quick scan options.

Statistics
0 Favorited
0 Views
0 Files
0 Shares
0 Downloads

Tags and Keywords

Comments

Oct 10, 2010 03:07 AM

ok, thanks for sharing such a good tip, does this can be used or utilized as the startup / shutdown script for domain computers ?

Sep 09, 2010 06:00 AM

When I have upgraded from MRU 5 I can't use anymore DoScan from line command. I had a batch script which wait for /SCANALLDRIVE before proceding with next command (shutdown). My command was "C:\Program Files\Symantec\Symantec Endpoint Protection\DoScan.exe" /cmdlinescan /SCANALLDRIVES /LOGFILE="C:\Users\%USERNAME%\Sym_Log.log"

Now LOGFILE is not an option (ok).
In MRU 5 DoScan.exe remained active until the end of scan but now anymore, and PC go to shutdown before scan ends.
I'm wrong or there is another command to reach my goal? I want script wait for DoScan.exe terminating, because it's a part of a weekend maintenance script for my clients.

Aug 27, 2010 06:39 AM


Aug 26, 2010 09:38 PM

Im Sorry but i just would like to ask what exactly is DoScan.exe?  What does it do as part of SEP?

Aug 26, 2010 04:56 PM


While it appears that specifying a log file has been pulled from this version of DoScan...it should be noted that a "Log File" is created in the default location referenced by the RU5 DoScan Help screenshot above.

A single Log File is created for each "Day" DoScan is run. For example, I've run DoScan about 8 times today and there is a single Log File in the location referenced above. The file is named "08262010.log" and it contains the information for all the DoScan's I've run today.

-Mike


Aug 22, 2010 08:54 PM


Thanks for your inputs, and great information.

Aug 21, 2010 12:40 AM

Thank you for sharing the information...

Aug 20, 2010 06:23 PM

Moved my question over to the forums.  Having trouble making DoScan scan just one file.

Related Entries and Links

No Related Resource entered.