Usage Examples |
This section contains examples of using the Dr.Web Ctl (drweb-ctl) utility: •Object Scanning: ▫Scanning of Files Selected by Criteria ▫Scanning of Additional Objects •An Example of Operation in the Autonomous Copy Mode 1. Object Scanning 1.Perform scanning of the /home directory with default parameters:
2.Scan paths listed in the daily_scan file (one path per line):
3.Perform scanning of the boot record on the sda drive:
4.Perform scanning of the running processes:
1.2. Scanning of Files Selected by Criteria Examples for file selection for scanning are listed below and use the result of the find utility operation. The obtained list of files is sent to the drweb-ctl scan command with the --stdin or --stdin0 parameter. 1.Scan listed files returned by the utility find and separated with the NUL ('\0') character:
2.Scan all files in all directories, starting from the root directory, on one partition of the file system:
3.Scan all files in all directories, starting from the root directory, with the exception of the /var/log/messages and /var/log/syslog files:
4.Scan all files of the root user in all directories, starting from the root directory:
5.Scan files of the root and admin users in all directories, starting from the root directory:
6.Scan files of users with UID in the range 1000–1005 in all directories, starting from the root directory:
7.Scan files in all directories, starting from the root directory, with a nesting level not more than five:
8.Scan files in a root directory ignoring files in subdirectories:
9.Scan files in all directories, starting from the root directory, with following all symbolic links:
10.Scan files in all directories, starting from the root directory, without following symbolic links:
11.Scan files created not later than May 1, 2017 in all directories, starting with the root directory:
1.3. Scanning of Additional Objects 1.Scanning of objects located in the directory /tmp on the remote host 192.168.0.1 by connecting to it via SSH as a user user with the password passw:
2.Scanning of a mail message saved in the file email.eml, using the default set of rules:
1.Display information on a current Dr.Web for UNIX Mail Servers package, including information about running components:
2.Output all parameters from the [Root] section of the active configuration:
3.Set 'No' as the value of the Start parameter in the [LinuxSpider] section of the active configuration (this will disable the SpIDer Guard file system monitor):
Note that superuser privileges are required to perform this action. To elevate the privileges, you can use the sudo command, as shown in the following example:
4.Force update of anti-virus components of Dr.Web for UNIX Mail Servers:
5.Restart the component configuration of Dr.Web for UNIX Mail Servers:
Note that superuser privileges are required to perform this action. To elevate the privileges, you can use the sudo command, as shown in the following example:
6.Connect Dr.Web for UNIX Mail Servers to the centralized protection server operating on host 192.168.0.1 if the server certificate is located in the file /home/user/cscert.pem:
7.Connect Dr.Web for UNIX Mail Servers to the centralized protection server using the settings.cfg configuration file:
8.Disconnecting Dr.Web for UNIX Mail Servers from the centralized protection server:
Note that superuser privileges are required to perform this action. To elevate the privileges, you can use the sudo command, as shown in the following example:
9.View the last log records made by the drweb-update and drweb-configd components in the Dr.Web for UNIX Mail Servers log:
1.Display information on detected threats:
2.Move all files containing threats which were not neutralized to quarantine:
3.Display list of files moved to quarantine:
4.Restore all files from quarantine:
5.Generate a password for a protected archive in the mail message with the identifier 12345, under condition that, for this email message, HMAC method of password generation has been used, and up-to-date secret word is indicated in the settings of Dr.Web MailD:
4. An Example of Operation in the Autonomous Copy Mode 1.Scan files and process quarantine in the autonomous copy mode:
The first command will scan files in the /home/user directory in the autonomous copy mode. Files containing known viruses will be moved to quarantine. The second command will process quarantine content (in the autonomous copy mode as well) and remove all the objects. |