Use the terminal antivirus feature

Parameter

Description

Example

Task Name

The name of the task.

Antiviruspolicy_test

Description

The description of the task.

This task is used to perform antivirus scans on all enterprise terminals.

Priority

The priority of the task.

Valid values: 1 to 10. A smaller value specifies a higher priority.

1

Policy Status

The task takes effect only if the task is enabled.

Enabled

Check Item

Reverse shell, DDoS trojan, trojan downloader, engine test program, attacker tool, high-risk program, tainted basic software, malicious script, malicious program, mining program, proxy, ransomware, riskware, rootkit, password stealer, scanner, suspicious program, infectious virus, webshell, and worm.

Select All

Scan Mode

• Quick Scan

  Scans critical system paths, such as services, drivers, startup items, running processes, download directories, desktop directories, and document directories.

• Custom Scan

  Scans specific paths based on your business requirements.

• Full Disk Scan

  Scans all files.

Quick Scan

Frequency

The frequency at which the scan task is run.

Every 3 Days, 00:00-24:00

Performance Preference

• Experience First

  In this mode, resource consumption is minimized to maintain an optimal user experience. In specific cases, scan tasks may be suspended or canceled.

• Balanced Mode

  In this mode, resources are evenly allocated between system performance and security scanning to ensure that scan tasks are complete without affecting the user experience.

• Security First

  In this mode, scan tasks are preferentially run to ensure security but more resources are consumed.

Experience First

Handling Method

Based on the file classification mechanism of the malicious file detection service of Alibaba Cloud, the system automatically assigns a risk level to each scanned file. You can configure the handling method of a file based on its risk level. The following list describes the risk levels and available handling methods.

• High-risk

  You can select Notify User or Notify User and Quarantine Malicious Files.

• Medium-risk

  You can select Notify User or Notify User and Quarantine Malicious Files.

• Low-risk

  You can select Do Not Handle, Notify User, or Notify User and Quarantine Malicious Files.

• High-risk

  Notify User and Quarantine Malicious Files

• Medium-risk

  Notify User and Quarantine Malicious Files

• Low-risk

  Notify User

Applicable User

The users to whom the task applies. You can select All Users or Some Users. If you select Some Users, you must select the user groups that you want to manage.

All Users

Exception User

The users that are added to a whitelist. The task does not apply to the users in the whitelist.

-

Parameter

Description

Example

Task Name

The name of the task.

Antiviruspolicy_test

Check Item

Reverse shell, DDoS trojan, trojan downloader, engine test program, attacker tool, high-risk program, tainted basic software, malicious script, malicious program, mining program, proxy, ransomware, riskware, rootkit, password stealer, scanner, suspicious program, infectious virus, webshell, and worm.

Select All

Scan Mode

• Quick Scan

  Scans critical system paths, such as services, drivers, startup items, running processes, download directories, desktop directories, and document directories.

• Custom Scan

  Scans specific paths based on your business requirements.

• Full Disk Scan

  Scans all files.

Quick Scan

Performance Preference

• Experience First

  In this mode, resource consumption is minimized to maintain an optimal user experience. In specific cases, scan tasks may be suspended or canceled.

• Balanced Mode

  In this mode, resources are evenly allocated between system performance and security scanning to ensure that scan tasks are complete without affecting the user experience.

• Security First

  In this mode, scan tasks are preferentially run to ensure security but more resources are consumed.

Experience First

Handling Method

• High-risk

  You can select Notify User or Notify User and Quarantine Malicious Files.

• Medium-risk

  You can select Notify User or Notify User and Quarantine Malicious Files.

• Low-risk

  You can select Do Not Handle, Notify User, or Notify User and Quarantine Malicious Files.

• High-risk

  Notify User and Quarantine Malicious Files

• Medium-risk

  Notify User and Quarantine Malicious Files

• Low-risk

  Notify User

Applicable User

The users to whom the task applies. You can select Some Users or All Users. If you select Some Users, you must select the user groups that you want to manage.User Group

All Users

Exception User

The users that are added to a whitelist. The task does not apply to the users in the whitelist.

-