Managing Isolated Files

Isolating and Killing Files

1. Log in to the management console.
2. In the upper left corner of the page, select a region, click , and choose Security > Host Security Service.
3. In the navigation pane, choose Intrusions > Events.

   Figure 1 Events page

   
   

4. Select an event of the Malicious program (cloud scan) or Abnormal process behavior type, and click Handle. In the dialog box that is displayed, click Isolate and Kill.

   Figure 2 Isolating and killing malicious programs

   
   

5. Click OK. Files that have been isolated are displayed on a slide-out panel on the Events page and cannot harm your servers. You can click Isolated Files on the upper right corner to check them.

Checking Isolated Files

1. On the Events page, click Isolated Files on the upper right corner.
2. Check the servers, names, paths, and modification time of the isolated files, as shown in Figure 3.

   Figure 3 Checking isolated files

   
   

Recovering Isolated Files

1. Click Restore in the Operation column of an isolated file.
2. Click OK.
   Note

   Recovered files will no longer be isolated. Exercise caution when performing this operation.