Hi,

On 12/21/21 9:07 AM, [email protected] wrote:
I have a Windows Server 2012 server that runs bareos-fd to back up some folders from it.

On the same machine I have the Crowdstrike Agent (malware/antivirus) that marks bareos as malware because it tries to remove a VSS copy.

Fileset:

FileSet {
   Name = "xxx"
   Enable VSS = yes
   Include {
     Options {
       Signature = MD5
       Drive Type = fixed
       IgnoreCase = yes
       WildFile = "[A-Z]:/pagefile.sys"
       WildDir = "[A-Z]:/RECYCLER"
       WildDir = "[A-Z]:/$RECYCLE.BIN"
       WildDir = "[A-Z]:/System Volume Information"
       Exclude = yes
     }
     File = D:/xxx
     File = D:/xxx
     File = D:/xxx
     File = D:/xxx
     File = D:/conta
     File = D:/HR
     File = D:/MSAVE
   }
}


*A process attempted to delete a Volume Shadow Snapshot.*

Any ideas why bareos-fd tries to remove vss ?

You are using VSS in your fileset - and bareos has to clean-up after the jobs.

--
Med venlig hilsen

Claus Eriksen
Systemadministrator
Lynero ApS - Professionel hosting til virksomheder

telefon:  +45 7020 1272
web:      www.lynero.dk

--
You received this message because you are subscribed to the Google Groups 
"bareos-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/bareos-users/c4f9454e-6767-80b9-a7fa-50f5a92a8b29%40lynero.dk.

Reply via email to