How Mcafee detects /deletes and block malicious software

[Praveen459113]

HI Team,

Could you please let us know how anti-virus configurations  examine  to verify that anti-virus programs;
- Detect all known types of malicious software,
- Remove all known types of malicious software, and
- Protect against all known types of malicious software.

do we have settings in ePO policy?

[Dayananda]

Hello,

Depending on the On-Access-scan Action setting either the malicious file will be cleaned or deleted.
Refer below screenshot for VSE and ENS OAS-Action setting.

Depending on Access protection rule the file will be allowed to access/execute as listed below for VSE and ENS.
Refer below screenshot for VSE and ENS Access protection screenshot

Let us know if you have any queries.

[Praveen459113]

Hi There,

Thank you for your response. How McAfee determines the file is malicious and action according to the policy

[Dayananda]

Hello,

Depending on the file hash values and its symbols a file will be detected with the help of DAT/Amcore by VSE/ENSTP.

For daily DAT-V2 for VSE and Amcore-V3-for ENS you can refer the below link.

https://www.mcafee.com/enterprise/en-us/downloads/security-updates.html?region=us

Let us know if you have any queries.