Viewing and Handling Viruses

Prerequisites

Viewing and Handling Viruses

1. Log in to the management console.
2. Click in the upper left corner of the page, select a region, and choose Security > Host Security Service. The HSS page is displayed.
3. Choose Server Protection > Virus Scan.
4. View the scanned virus files.
5. In the Operation column of a virus file, click Handle.

   You can also select multiple virus files and click Batch Handle above the list to handle them in batches.

6. In the Handle Infected Files dialog box, select a virus-infected file handling method. For details about the processing modes, see Virus-infected file handling methods.

   Table 1 Virus-infected file handling methods

   Parameter	Description
   Mark as handled	You can manually handle the virus-infected file on the server.
   Ignore	Ignore the virus-infected file alarm. If the virus-infected file alarm event occurs again, HSS generates an alarm.
   Add to alarm whitelist	If you confirm that the virus file is falsely reported, you can add it to the alarm whitelist. After a file is added to whitelist, HSS will not generate alarms for the file.
   Isolating files manually	After a file is isolated, the read/write operation cannot be performed on the virus-infected file.

7. Click OK.

   After the alarm is handled, the status of the virus file alarm event changes to Handled.

Exporting Virus-infected File Alarms

1. Log in to the management console.
2. Click in the upper left corner of the page, select a region, and choose Security > Host Security Service. The HSS page is displayed.
3. Choose Server Protection > Virus Scan.
4. Above the virus-infected file alarm event list, click Export to export all virus-infected file alarm events to the local PC.
5. View the export status in the upper part of the virus scan page. After the export is successful, obtain the exported information from the default file download address on the local host.
   Notice

   Do not close the browser page during the export. Otherwise, the export task will be interrupted.