Frequently Asked Question

Malware and antivirus software

ESET Command Line Scanner Parameters (ecls.exe) (4.0)

The ESET Security On-demand scanner can be initiated from both the graphical user interface and command line. Command line scanning is useful if your computer is currently operational only in Safe Mode or if you are a network administrator and wish to initiate scanning from an external application.

The scanner (filename: ecls.exe) is located in the C:\ProgramFiles\ESET\ESET Smart Security or C:\ProgramFiles\ESET\ESET NOD32 Antivirus directory. To use it, open a Command Prompt, reference the full directory path to the scanner followed by the list of object(s) to scan. Additional parameters (see Scanner options) can be appended to the command line to further modify your scan.

The example below commands your ESET Smart Security product to run a scan with automatic scan settings, show the status bar of the scan while running and create a scan log file:

"c:\Program Files\ESET\ESET Smart Security\ecls.exe" /base-dir="c:\Program Files\ESET\ESET Smart Security" /auto /log-file=c:\ecls.txt /aind

Basic options Description
/base-dir=directory path to load modules from
/quar-dir=directory path to use for quarantining files
/exclude=MASK exclude files matching MASK from scanning
/subdir scan subdirectories (default)
/no-subdir do not scan subdirectories
/max-subdir-level=number maximum number of subdirectories to scan recursively (by default, 0, which is unlimited)
/symlink follow symbolic links (default)
/no-symlink skip symbolic links
/ads scan Alternate Data Streams (ADS) (default)
/no-ads do not scan ADS
/log-file=file log output to file
/log-rewrite overwrite output file (default - append)
/log-console log output to console (default)
/no-log-console do not log output to console
/log-all also log clean files
/no-log-all do not log clean files (default)
/aind show activity indicator
/auto scan and automatically clean all local disks
Scanner options Description
/files scan files (default)
/no-files do not scan files
/memory scan memory
/boots scan boot sectors (default)
/no-boots do not scan boot sectors
/arch scan archives (default)
/no-arch do not scan archives
/max-obj-size=number only scan files smaller than SIZE megabytes (default 0 = unlimited)
/max-archive-level=number maximum number of archives to scan recursively (by default, 0, which is unlimited)
/scan-timeout=number maximum amount of time in seconds to scan an archive file
/max-arch-size=number maximum number of bytes to scan inside an archive file(by default, 0, which is unlimited)
/max-sfx-size=number only scan the files in a self-extracting archive if they are smaller than SIZE megabytes (default 0 = unlimited)
/mail scan email files
/no-mail do not scan email files
/mailbox scan mailboxes (default)
/no-mailbox do not scan mailboxes
/sfx scan self-extracting archive files
/no-sfx do not scan self-extracting archive files
/rtp scan runtime packed files
/no-rtp do not scan runtime packed files
/adware scan for Adware/Spyware/Riskware
/no-adware do not scan for Adware/Spyware/Riskware
/unsafe scan for potentially unsafe applications
/no-unsafe do not scan for potentially unsafe applications
/unwanted scan for potentially unwanted applications
/no-unwanted do not scan for potentially unwanted applications
/pattern use signatures
/no-pattern do not use signatures
/heur enable heuristics
/no-heur disable heuristics
/adv-heur enable Advanced heuristics
/no-adv-heur disable Advanced heuristics
/ext=extension scan only files ending in extension (use a colon character (':') to separate extensions)
/ext-exclude=extension do not scan any files ending in extension (use a colon character (':') to separate extensions)
/clean-mode=MODE use cleaning MODE for infected objects. Available options: none, standard (default), strict, rigorous, delete
/quarantine copy infected files to Quarantine (supplements action)
/no-quarantine do not copy infected files to Quarantine
General options Description
/help show help and quit
/version show version information and quit
/preserve-time preserve last access timestamp
Exit codes* Description
0 no threat found
1 threat found and cleaned
10 some files could not be scanned (may be threats)
50 threat found
100 error

*If you receive an error message with an exit code greater than 100, the file was not scanned and thus could be infected.

Why ESET?

ESET has over 25 years' experience of helping people to Enjoy Safer Technology. Our software is light on hardware, but hard on malware.

Our Technology

ESET’s award-winning NOD32® Antivirus technology is at the cutting edge of digital security. It’s updated daily to keep you secure.

Free Support

Enjoy your free, industry-leading customer support locally. For technical, sales and marketing enquires dial +65 6296 4268.