WARNING: Starting with version 2.3, Scan feature requires a RogueKiller Technician license.
Available scan modes
- -scan (scan_params): Start standard scan, scan_params (optional) passes arguments to the core (see below)
- -quickscan: Start quick scan
- -customscan: Start custom scan (needs additional arguments, see below)
Available scan parameters
Important note: scan parameters need to be enclosed into one big quotes delimiters. If you need to use quotes inside of it, use triple quotes (see example below).
- -reportpath {report_path}: Specify a file path where the report will be also copied
- -reportformat {json|txt}: Specify a file format for the report copy
- -portable-license {path_to_portable_config_file}: Specify a portable config file generated by the Technician
Optional parameters
- -no_interact: No user interaction, implicit EULA accept and starts removal after scan (only alleged malware)
- -deleteall: Forces removal of all found entries
- -ignoreall: Ignores removal after a scan
- -debuglog {path}: Log scan activity to a file
- -force_portable_license {license_email} {license_key}: Technician only, uses the given license in memory only (portable mode)
- -portable_signatures {path}: Uses the given signatures package instead of checking online
Custom scan
- -scanoptions: Modules to use for scan, any combination with “processes, services, tasks, registry, filesystem, wmi, hosts, web”
- -scanpaths: Custom paths to scan (folders), up to 10 paths
Examples: RogueKillerCMD.exe -scan -debuglog "C:\my_scan.log" RogueKillerCMD.exe -quickscan -no_interact -deleteall RogueKillerCMD.exe -quickscan -no_interact -ignoreall RogueKillerCMD.exe -scan "-reportpath C:\my_scan_report.txt -reportformat txt" RogueKillerCMD.exe -scan "-portable-license C:\my_config.ini" RogueKillerCMD.exe -scan "-reportpath """C:\my folder with spaces\my_scan_report.json""" -reportformat json" RogueKillerCMD.exe -scan -portable_license licenseid@email.com AAAAAAAA-AAAA-AAAA-AAAA-AAAAAAAAAAAA RogueKillerCMD.exe -scan -portable_signatures "Z:\roguekiller_signatures.zip" RogueKillerCMD.exe -custom_scan -scanoptions processes filesystem task web -scanpaths "C:/my_folder_to_scan" "C:/folder/my_other_folder_to_scan"
During the scan multiple user interactions can be requested to accept EULA, validate update or choose a removal mode. This can be avoided by using the -no_interact flag. Default values are to accept EULA, accept update and use standard (no PUP/PUM) removal mode.