Which of the following should be the administrators FIRST response?

A malware incident has just been detected within a company. Which of the following should be the administrators FIRST response?

A.
Removal

B.
Containment

C.
Recovery

D.
Monitor