Skip to main content

Scanning for malware

The main objective of Bitdefender Endpoint Security Tools is to keep your computer free of malware. It does that primarily by scanning in real time accessed files, e-mail messages, and any new files downloaded or copied to your computer. Besides real-time protection, it also allows running scans to detect and remove malware from your computer.

Scan options

You can use one of these scan options when using the bduitool command:

  • Display the scan profile settings for the full, quick or a custom scan:

    get scanprof [full|quick|custom]
  • Run a full, quick or custom scan or a previous scan task determined by the task ID.

    scan -s full|quick|task <taskID>|(custom <path1> <path2>...)

    For custom scan, you have to specify a list of paths to be scanned (folders and/or files) where you can also use wildcards.


    • Run the task with the specified task ID:

      scan -s task <taskID>
    • Run a custom scan on the specified file and folders:

      scan -s custom /home/user1/folder1 /home/user1/file.txt

    If using wildcards for custom scans, you have the following options:

    • Expand a single directory level:

      scan -s custom /dir/*/dir
    • Expand the full directory tree:

      scan -s custom "/dir/*/dir"
    • Substitute a single character using the question mark (?):

      scan -s custom "/dir/*/dir?" 
  • Pause all running scan tasks:

    scan -p
  • Resume all paused scan tasks:

    scan -r
  • Stop all running or paused scan tasks:

    scan -q


    The pause, resume, or stop commands apply only to scans started from Bitdefender User Interface Tool.

  • Display details of all running scan tasks, including a task identifier.

    get scantasks

    The tasks that are in progress are listed first.

  • Display information about the last finished scan task.

    get scanlog [taskID]

    The command can also display details about the last run of a specific task, if the task ID is mentioned.

  • Display the status of the scan task with the specified task ID:

    get scanstatus [<taskID>]


To display detailed information regarding quarantined files, run the bduitool command using one of these options:

  • Display a list of quarantined items.

    get quar [-s <integer_value>]


    - s <integer_value> is a parameter that displays the specified number of most recent quarantined items.


  • Display all quarantine items:

    get quar
  • Display the first 10 items from quarantine:

    get quar -s 10 


Bitdefender Endpoint Security Tools keeps a detailed log of events concerning its activity on your computer.

To display these logs, run the bduitool command with one of these options:

  • Display the list of events that the Antimalware module has detected.

    get events [-s <integer value>]


    • -s <integer value> : Display the specified number of most recent antimalware events.

    • -s undertype <type> : This parameter sets if the kernel module updates are performed through signature update (default) or product update.

      Possible values: signatures or product.