Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  3. NetBackup™ Web UI Administrator's Guide
  5. Section X. Detection and reporting
  7. Malware scanning
  9. Managing scan tasks for malware and YARA scanning
  11. Recover from malware-affected images (clients protected by policies)
NetBackup™ Web UI Administrator's Guide

Recover from malware-affected images (clients protected by policies)

To restore from malware-affected images, you must have the Administrator role or equivalent RBAC permissions. To recover a VMware asset that is affected by malware, see the following topic.

See Recover from malware-affected images (clients protected by protection plan).

Note:

Recovery options are not supported for YARA scanning.

To recover from malware-affected images (clients protected by policies)

  1. On the left, select Recovery.
  2. On the Regular recovery card, select the link Start recovery.
  3. Select the following properties:

    Source client

    The client that performed the backup.

    Destination client

    The client to which you want to restore the backup.

    Policy type

    The type of policy that is associated with the backup you want to restore.

    Restore type

    The type of restore that you want to perform. The restore types that are available depend on the policy type that you choose.

  4. Click Next.
  5. Select the Start date and End date.

    Or, click Use backup history to view and select specific images. Click Select to add the selected images for recovery.

    Note:

    The table displays all the backup image details for the selected time frame. You can filter and sort the images based on the malware scan results, infection status, schedule type, policy type, or policy name.

  6. To include any malware-infected images in the recovery, select Allow the selection of images that are malware-affected.

    Note:

    The option Allow the selection of images that are malware-affected is disabled if you select the option Scan for malware before recovery.

  7. On the left, expand the Source client directory. Select any directories that you want to restore. Or in the right pane, select any files or directories. Click Next.
  8. Select the recovery target.
  9. To restore any files that are malware-infected, click Allow recovery of files infected by malware. Otherwise, NetBackup only restores the files that are scanned and free from malware.

    Note:

    By default, the Allow recovery of files infected by malware option is selected and cannot be changed when:

    Malware scan is aborted on detection of malware for the selected image.

    During malware scan when the Abort malware scan on detecting an infection option is selected.

  10. Select any other recovery options that you want. Then click Next.
  11. Review the recovery settings and then click Start recovery.

Feedback

Was this page helpful?
Previous

Actions for malware scanned images

Next

Recover from malware-affected images (clients protected by protection plan)

Feedback

Was this page helpful?