Help Center/ Host Security Service/ User Guide/ Server Protection/ Virus Scan/ Viewing and Handling Viruses
Updated on 2024-11-15 GMT+08:00
View PDF
Share

Viewing and Handling Viruses

After the virus scanning is complete, the system handles the infected files based on the handling policy selected. The handling policies are as follows:

  • Automatic Handling: Virus files that have been further confirmed are automatically isolated. Suspicious files are labeled with suspicious and need to be handled after manual confirmation.
  • Manual Handling: Alarms are generated only for detected infected files. You need to manually confirm the files before handling them.

The section describes how to view and manually handle infected files.

Prerequisites

A virus scanning task has been executed. For details, see Scanning for Viruses.

Viewing and Handling Viruses

  1. Log in to the management console.
  2. In the upper left corner of the page, select a region, click , and choose Security & Compliance > HSS.
  3. Choose Server Protection > Virus Scan.
  4. View the scanned virus files.
  5. In the Operation column of a virus file, click Handle.

    You can also select multiple virus files and click Batch Handle above the list to handle them in batches.

  6. In the Handle Infected Files dialog box, select a virus-infected file handling method. For details about the processing modes, see Virus-infected file handling methods.

    Table 1 Virus-infected file handling methods

    Parameter

    Description

    Mark as handled

    Select this if you have manually handled the virus-infected file on the server.

    Ignore

    Ignore the virus-infected file alarm. If the virus-infected file alarm event occurs again, HSS generates an alarm.

    Add to alarm whitelist

    If you confirm that the virus file is falsely reported, you can add it to the alarm whitelist. After a file is added to whitelist, HSS will not generate alarms for the file.

    Isolating files manually

    After a file is isolated, the read/write operation cannot be performed on the virus-infected file.

    Isolated files are added to the Isolated Files and cannot harm your server. You can restore or delete isolated files as required. For details, see Isolated Files.

  7. Click OK.

    After the alarm is handled, the status of the virus file alarm event changes to Handled. You can view the handling records on the historical handling records page. For details, see Handling History.

Exporting Virus-infected File Alarms

  1. Log in to the management console.
  2. In the upper left corner of the page, select a region, click , and choose Security & Compliance > HSS.
  3. Choose Server Protection > Virus Scan.
  4. Above the virus-infected file alarm event list, click Export to export all virus-infected file alarm events to the local PC.
  5. View the export status in the upper part of the virus scan page. After the export is successful, obtain the exported information from the default file download address on the local host.

    Do not close the browser page during the export. Otherwise, the export task will be interrupted.

Parent Topic: Virus Scan