Abstract: The dispatching data network system of thermal power plant includes security I zone and security II zone, carrying relay protection information, remote RTU terminal, spot trading and other businesses. At present, although network security devices such as vertical encryption devices and firewalls have been deployed in the scheduling data network and a grid network security protection system has been established, the necessary technical means are still lacking in the comprehensive protection of malicious codes. Therefore, the deployment of malicious code management system in scheduling data network has become an inevitable trend. Taking a thermal power plant as an example, this paper introduces the function of the malicious code management system in the dispatching data network, and expounds the deployment, implementation scheme and debugging process of the malicious code management system.