                           Command line mode

                        The command-line options

F-PROT.EXE is usually run without any parameters and will then enter
interactive mode.  It is also possible to run it in command-line mode,
either by specifying a drive, file or directory to scan, or by using the
/COMMAND option.

Syntax for command-line mode:  F-PROT [drive, file or directory] [options]

The available command-line options are

/640
On certain old machines, scanning non-existing memory between 640K and 1M
may cause a system crash.  This switch instructs F-PROT to scan only 640K.

/ALL
Specifies that all files should be searched, not just normal "executable"
files.  This switch should never be used with /ANALYSE, but only if a
virus has already been found, and you are just making sure it is not
hiding in some obscure overlay file.

/ANALYSE
Performs a heuristic analysis after the "Secure" scan.  This approach may
cause false positives, and should be used with care.  See the file
ANALYSE.TXT for further information.

/APPEND
Used with /REPORT. Append the report to an existing file.

/AUTO
May be specified with /DELETE or /DISINF so F-PROT will not request
permission before deleting or disinfecting.  The default if only /DELETE
or /DISINF are given is to ask if the file should be disinfected (or
deleted).

/BOOT (default) /NOBOOT
Scan/Don't scan boot sectors.

/COMMAND
Force command-line mode.

/DELETE
Delete all infected files, instead of just listing them.

/DISINF
Disinfect whenever possible - deletes first-generation samples and files
destroyed by overwriting viruses.  It will never delete a file which can
be disinfected.

/DOC
Scan Word documents.

/EXT=
Specify which filename extensions to scan by default, maximum of 10,
separated by "."  Example: /EXT=COM.EXE.SYS.DLL.OV?

/FILE (default) /NOFILE
Scan/Don't scan files.  If /NOFILE is used, it implies /NOPACKED and
/NOUSER as well.

/GURU
Provides additional information while scanning.

/HARD
Scans the MBR and all accessible partitions on any hard disks that are
found.

/HELP or /?
Display a list of available options.

/INTER
Force interactive mode.

/LIST
Produce a report of all files checked, not just those which are infected.

/MONO
Use monochrome on color displays.

/MULTI
Scan multiple diskettes.

/NET
Scans any network "drives" found.

/NOBREAK
Disables ESC and ^C during scanning

/NODOC
Do not scan Word documents.

/NOMEM
Skip the memory scan.

/NOSUB
Do not scan subdirectories.

/NOWRAP
Do not wrap text in the report.

/OLD
Do not display the "This version of the program is rather old" message.

/ONLY 
When used with /ANALYSE, it will make F-PROT perform ONLY a heuristic
scan.

/PACKED (default) /NOPACKED
Search/Don't search inside packed executables (DIET, PKLITE, LZEXE).  This
does not mean that F-PROT will scan inside archives (ZIP or ARJ).

/PAGE
Pause after each page.

/PARANOID
Makes the scanner totally paranoid.  Increases the chances of picking
up new viruses, but will significantly increase the risk of false
positives.  Only recommended for use by experienced, technical-minded
users, and please keep in mind that we are not interested in receiving
samples of possible false alarms that are only produced when this switch
is used.

/RENAME
Rename infected files to *.VOM, *.VXE or *.VVV.

/REPORT=file
Sends the output to a file, in addition to displaying it on the screen.

/SILENT
Generates no screen output at all - useful if you want to run the program
from a batch file, and only check the return code.

/USER /NOUSER (default)
Search/Don't search for user-defined search strings.  This option should
only be used if absolutely necessary, as it may result in a considerable
speed decrease.

                          Return status

The program uses the following exit codes, which can be checked with the
ERRORLEVEL command from a BAT file.

    0 - Normal exit - nothing found
    1 - Abnormal termination - unrecoverable error.  This can mean any of
	the following:
	    DOS version 1.x was used (F-PROT requires DOS 2.0 or higher)
	    The report file (specified with /REPORT=) could not be created.
	    ENGLISH.TX0 or SIGN.DEF corrupted or not present
	    Program was run from a diskette, and the diskette then changed.
    2 - Selftest failed - program has been modified.
    3 - A Boot/File virus infection found.
    4 - Virus search string found in memory.
    5 - Program terminated with ^C or ESC.
    6 - At least one virus was removed.  This code is only meaningful if
        the program is used to scan just a single file.
    7 - Insufficient memory to run the program.
    8 - At least one suspicious file was found, but no infections.

