Video Screencast Help

symantec command line scan

Created: 09 Jul 2013 | 12 comments

hello fox

i using the SEP 12.1 ver

the doscan.exe makes me a lot of issues ,

i need fast help

whay in the doscan.exe i cannot  scan specific folder\file without using the /scanname option ? i just want to scan with the command line and after it finish i need a log of the scan resaults  i see that i dont have any option to change the direction and the name of the log file what can i do ?



Operating Systems:

Comments 12 CommentsJump to latest comment

raju123's picture

Check the article where you can find all the command which can help to scan the fle and folder

How to run a scan from a command line using Symantec Endpoint Protection using DoScan.exe
Article:TECH104287  |  Created: 2008-01-28  |  Updated: 2012-05-25  |  Article URL

Eample of file and folder scanning

Eg - DoScan.exe /ScanFile "C:\Test.log"  & DoScan.exe /ScanDir "%WinDir%\System32"


Rafeeq's picture

the doscan.exe binary in the "C:\Program Files\Symantec\Symantec Endpoint Protection" folder on a SEP 12.1 system is a mere proxy, and calling this proxy using a call with the SYSTEM account does not work. The proper doscan.exe is located in the .\<currentversion>\bin folder. For example:

"C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Bin\".

For ex: DoScan.exe /ScanFile "C:\Test.log" /ScanFile "%WinDir%\Notepad.exe"

I dont see scan name here.

Check this document for more info.'s picture

:in the link that raju123 send me it write that

- Previous funtionality to create a log file with doscan.exe (switch /LOGFILE=) known from SEP 11 is completely gone. Log files for scans started with doscan.exe are by default created in C:\Programdata\Symantec\Symantec Endpoint Protection\[SEP Version]\Data\Logs\AV\23  

this is very disapointing whay in mcafee or even AVG Free it have the option for cmd scan what ever i want and i can scan it to a txt file

how can i scan what eveer i want from the cmd line from symantec and make it log file?

Rafeeq's picture

You can see the log of the scan results in SEPM, do a cmd line scan then go to SEPM. 

monitor - logs - Log type as SCAN

You will see the log

pete_4u2002's picture

doscan writes to client scan log. you can see client side or the SEPM side's picture

what is sepm? you sean sep manager?

i just want to scan folder\file  and if it will found virus then do nothing .

but i want a log file even if it found virus and even it is not..

remembre that everything must happen at the command line and not at the gui

this is possible at symantec? i know in mcafee and all other cmd scanners is is happend before and now just having problems with the symantec

in mcafee and other AV's i do Scan.exe /parameter name << c:\test\text.txt

ᗺrian's picture

DoScan.exe the only option you have for scanning from the cmd line

DoScan.exe /cmdlinescan [/LOGFILE="<log file path and filename>"]

This is what is currently offered by Symantec, despite what AVG or Mcafee do.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

pete_4u2002's picture

check this KB article

and tell us if this is the thing you looking for. It creates a log file with switches mentioned.

SameerU's picture


Is Safe mode scanning is possible in SEP 12.1 and SEP 12.1 RU1 MP1


pete_4u2002's picture

yes, its possible.

How to scan in safe mode with Symantec Endpoint Protection 12.1 RU1 MP1 and earlier.
padding: 1px;padding-bottom: 3px ;font: 12px Arial; text-align: left;">Article:TECH176971 padding: 1px;font: 12px Arial; text-align: left;"> |  padding: 0px;font: 12px Arial; text-align: left;">Created: 2011-12-14 padding: 1px;font: 12px Arial; text-align: left;"> |  padding: 1px;font: 12px Arial; text-align: left;">Updated: 2013-05-03 padding: 1px;font: 12px Arial; text-align: left;"> |  padding: 1px;font: 12px Arial; text-align: left;">Article URL