Return Codes

The values of the return code and corresponding events are as follows:

Return code value

Event

0

OK, no virus found.

1

Known virus detected.

2

Modification of known virus detected.

4

Suspicious object found.

8

Known virus detected in file archive, mail archive, or container.

16

Modification of known virus detected in file archive, mail archive, or container.

32

Suspicious file found in file archive, mail archive, or container.

64

At least one infected object successfully cured.

128

At least one infected or suspicious file deleted/renamed/moved.

The actual value returned by the program is equal to the sum of codes for the events that occurred during scanning. Obviously, the sum can be easily decomposed into separate event codes.

For example, return code 9 = 1 + 8 means that known viruses were detected, including viruses in archives, mail archives or containers; curing and others actions were not executed; no other “virus” events occurred during scanning.