av extract hash enable

Function

The av extract hash enable command enables the function of extracting the complete hash value from the PE file.

The undo av extract hash enable command disables the function of extracting the complete hash value from the PE file.

Format

av extract hash enable

undo av extract hash enable

Parameters

None

Views

System view

Default Level

2: Configuration level

Usage Guidelines

By default, the function of extracting the complete hash value from the PE file is disabled.

If the FW detects a virus, and the response action is alert or declare, the antivirus log displays the hash value of the file. For PE files, the hash value in the log is incomplete by default. To view the complete hash value, run the av extract hash enable command. After you enable the function of extracting the complete hash value from the PE file, the device performance will be compromised to a certain degree. Choose whether to enable this function as required.

In antivirus quick scanning mode, if the complete hash value needs to be extracted from the PE file, you need to configure the av extract hash enable command. In full-text scanning mode, the complete hash value is extracted from the PE file by default. Therefore, you do not need to configure this command.

Example

# Enable the function of extracting the complete hash value from the PE file.

<sysname> system-view
[sysname] av extract hash enable