vkill'blog

C:\>avscan.exe -h
Usage: avscan [OPTION]
/CFG="file"                  #文件格式参见规范
/GUIMODE=[1|2|3]      #1正常 2简单 3 隐藏，这个参数可以不写，写了之后CFG配置的GuiMode无效


*****/CFG=file文件格式规范
[CFG]
#GuiMode(界面模块)设置：1正常 2简单 3 隐藏
GuiMode=2
#ExitMode(退出模块)设置：1手动 2自动 (注:当GuiMode=2时ExitMode设置不生效)
ExitMode=2
[SEARCH]
#Parameter设置，Parameter和Path都扫描的
#0x00000000 空
#0x00007000 (Local Drivers | alldrver)
#0x00001000 (Local Hard Drivers | alldiscs)
#0x00006000 (Removable Drivers | rmdiscs)
#
Parameter=0x00000000
#path不能用别的变量，除：[%SYSDIR% ; %DOCSETTINGS%]==[系统目录 ; 我的文档目录]
#多个path从0开始依次
Path0=e:\
[CONTROLCENTER]
#这个不做设置
ProfileType=1
ProfileName=test
ProfileDescription=test
[SCANNER]

示例:
avscan.exe /CFG="C:\Program Files\AntiVir PersonalEdition Classic\alldiscs.avp"
C:\>

@echo off
::
::  Usage: AntiVir_scan.cmd file
::
::avscan.exe命令行查杀使用参见 http://blog.vkill.net/read.php?55
set str=C:\Program Files\AntiVir PersonalEdition Classic
set path=%path%;%str%
set n=%RANDOM%
>"%temp%\%n%.avp" (
echo [CFG]
echo GuiMode=2
echo ExitMode=2
echo [SEARCH]
echo Parameter=0x00300432
echo Path0=%~1
                  )
start avscan.exe /CFG="%temp%\%n%.avp"

@echo off
::avscan.exe命令行查杀使用参见 http://blog.vkill.net/read.php?55
set str=C:\Program Files\AntiVir PersonalEdition Classic
set path=%path%;%str%
set n=%RANDOM%
>"%temp%\%n%.avp" (
echo [CFG]
echo GuiMode=2
echo ExitMode=2
echo SystemScan=1
echo [SEARCH]
echo Parameter=0x00001000
                  )
start /WAIT avscan.exe /CFG="%temp%\%n%.avp"
shutdown -s -t 30
exit/b