Help Center/ Host Security Service (New)/ User Guide/ Prevention/ Virus Scan/ Scanning for Viruses
Updated on 2024-01-16 GMT+08:00
View PDF

Scanning for Viruses

Once a static virus file is started, it may become a malicious process and become a security risk of servers. Therefore, scanning static virus files is important in server security protection. HSS virus scan function can scan virus files on servers and provides the following virus scan methods:

  • Quick Scan: Quick virus scanning tasks can save time and costs. This function scans and removes preset key system files and directories.
  • Full-disk Scan: A time-consuming full-disk virus scanning can be implemented on servers.
  • Custom Scan: You can customize virus scanning tasks as required.

Prerequisites

  • The HSS professional, enterprise, premium, WTP, or container edition has been enabled for your servers. For more information, see Purchasing an HSS Quota and Upgrading Your Edition.
    • Professional edition: supports quick scanning.
    • Enterprise edition and other editions: support quick scanning, full-disk scanning, and customized scanning.
  • The server agent version falls within the following scope. For more information, see Upgrading the Agent.
    • Linux: 3.2.9 or later
    • Windows: 4.0.20 or later
  • The antivirus scan policy has been enabled on the server. For details, see Viewing a Policy Group.

Constraints

A virus scan uses a lot of memory, CPU, and I/O resources. Perform this operation during off-peak hours. For details about the resource usage, see How Many CPU and Memory Resources Are Occupied by the Agent When It Performs Scans?

Quick Scan

  1. Log in to the management console.
  2. In the upper left corner of the page, select a region, click , and choose Security & Compliance > HSS.
  3. Choose Prevention > Virus Scan. The Virus Scan page is displayed.
  4. Click Quickly Scan.
  5. In the Quick Scan slide panel, enter the task name and select a server.

    The server cannot be selected when it is in the scanning state.

  6. Click Scan and start the scanning task.

Full-disk Scan

  1. Log in to the management console.
  2. In the upper left corner of the page, select a region, click , and choose Security & Compliance > HSS.
  3. Choose Prevention > Virus Scan. The Virus Scan page is displayed.
  4. Click Full-disk Scan.
  5. In the Full-disk Scan slide panel, enter the task name and select a server.

    • The server cannot be selected when it is in the scanning state.
    • The Full-disk Scan function scans all disks but not network directories.

  6. Click Scan and start the scanning task.

Custom Scan

  1. Log in to the management console.
  2. In the upper left corner of the page, select a region, click , and choose Security & Compliance > HSS.
  3. Choose Prevention > Virus Scan. The Virus Scan page is displayed.
  4. Click Custom Scan.
  5. In the Custom Scan slide panel, set antivirus policy parameters. For details about the parameters, see Custom antivirus policy parameters.

    Table 1 Custom antivirus policy parameters

    Parameter

    Description

    Task Name

    Name of a custom antivirus task.

    File Type

    Type of the file to be scanned. Currently, the following types of files can be scanned:

    • Executable: executable files and dynamic link libraries (DLLs), such as .exe, .dll, and .so files.
    • Compressed: such as .zip, .rar, and .tar
    • Script: such as .bat, .py, and .ps1
    • Document: such as TXT, DOC, and PDF
    • Image: such as BMP, JPG, and GIF
    • Audio & Video: such as MP3, MP4, and FLV files

    Directory Settings

    Directory where virus-infected files need to be scanned. If this parameter is not set, full scan is performed by default. Full scan does not cover network directories.

    Exclude Specified Directories

    Directories that do not require virus scan.

    Select Server

    Servers to be scanned. Servers in the scanning state cannot be selected.

  6. Click Scan and start the scanning task.

Follow-up Procedure

  • View the execution status of a scan job
    On the Virus Scan page, click the Scan tasks to view the execution status of virus scan tasks. To stop an ongoing scan task, click Cancel in the Operation column of the target scan task.
    Figure 1 Viewing scan tasks
  • View and handle viruses

    After a virus scan task is complete, you can manually handle the detected virus files based on service requirements. For details, see Viewing and Handling Viruses.

Parent topic: Virus Scan