Skip to main content
Answer

Veeam Backup - Infected Source/VM

  • September 22, 2021
  • 16 comments
  • 828 views

JustineP
Forum|alt.badge.img+1

If the source VMs have virus/infected, technically Veeam can backup that but can Veeam knows that the source is infected with virus/ransomware?

Best answer by Chris.Childerhose

Veeam is performing the backup but would be unaware about infection.

That is where SureBackup with the virus scanning could help for checking the backup. But again won't help initial backup.

Thanks for that.

If SureBackup scanned the VM and there is virus/infected, what will be the next approach of the SureBackup? They will delete it? or Fix?

You can then use Secure Restore to help with removing or fixing the VM.  Check here - https://helpcenter.veeam.com/docs/backup/vsphere/av_scan_about.html?ver=110

 

16 comments

Chris.Childerhose
Forum|alt.badge.img+21
  • Veeam Legend, Veeam Vanguard
  • September 22, 2021

Veeam is performing the backup but would be unaware about infection.

That is where SureBackup with the virus scanning could help for checking the backup. But again won't help initial backup.


JustineP
Forum|alt.badge.img+1
  • Author
  • Comes here often
  • September 22, 2021

Veeam is performing the backup but would be unaware about infection.

That is where SureBackup with the virus scanning could help for checking the backup. But again won't help initial backup.

Thanks for that.

If SureBackup scanned the VM and there is virus/infected, what will be the next approach of the SureBackup? They will delete it? or Fix?


Chris.Childerhose
Forum|alt.badge.img+21
  • Veeam Legend, Veeam Vanguard
  • Answer
  • September 22, 2021

Veeam is performing the backup but would be unaware about infection.

That is where SureBackup with the virus scanning could help for checking the backup. But again won't help initial backup.

Thanks for that.

If SureBackup scanned the VM and there is virus/infected, what will be the next approach of the SureBackup? They will delete it? or Fix?

You can then use Secure Restore to help with removing or fixing the VM.  Check here - https://helpcenter.veeam.com/docs/backup/vsphere/av_scan_about.html?ver=110

 


JustineP
Forum|alt.badge.img+1
  • Author
  • Comes here often
  • September 22, 2021

Veeam is performing the backup but would be unaware about infection.

That is where SureBackup with the virus scanning could help for checking the backup. But again won't help initial backup.

Thanks for that.

If SureBackup scanned the VM and there is virus/infected, what will be the next approach of the SureBackup? They will delete it? or Fix?

You can then use Secure Restore to help with removing or fixing the VM.  Check here - https://helpcenter.veeam.com/docs/backup/vsphere/av_scan_about.html?ver=110

 

Thanks a lot! :) appreciated


JustineP
Forum|alt.badge.img+1
  • Author
  • Comes here often
  • September 22, 2021

Veeam is performing the backup but would be unaware about infection.

That is where SureBackup with the virus scanning could help for checking the backup. But again won't help initial backup.

Thanks for that.

If SureBackup scanned the VM and there is virus/infected, what will be the next approach of the SureBackup? They will delete it? or Fix?

You can then use Secure Restore to help with removing or fixing the VM.  Check here - https://helpcenter.veeam.com/docs/backup/vsphere/av_scan_about.html?ver=110

 

Thanks a lot! :) appreciated

But… prior to the backup, can SureBackup feature knows if there is infected, or totally not? :)

or I can use the Surebackup once i do have the backup of the source

 

https://helpcenter.veeam.com/docs/backup/vsphere/surebackup_hiw.html?ver=110


Chris.Childerhose
Forum|alt.badge.img+21
  • Veeam Legend, Veeam Vanguard
  • September 22, 2021

Veeam is performing the backup but would be unaware about infection.

That is where SureBackup with the virus scanning could help for checking the backup. But again won't help initial backup.

Thanks for that.

If SureBackup scanned the VM and there is virus/infected, what will be the next approach of the SureBackup? They will delete it? or Fix?

You can then use Secure Restore to help with removing or fixing the VM.  Check here - https://helpcenter.veeam.com/docs/backup/vsphere/av_scan_about.html?ver=110

 

Thanks a lot! :) appreciated

But… prior to the backup, can SureBackup feature knows if there is infected, or totally not? :)

or I can use the Surebackup once i do have the backup of the source

 

https://helpcenter.veeam.com/docs/backup/vsphere/surebackup_hiw.html?ver=110

SureBackup is used for testing restores and can do the scanning of the VMs for viruses.  You would need a backup of the infected VM first to test it with SureBackup as it points to the backup job. :smiley:


JustineP
Forum|alt.badge.img+1
  • Author
  • Comes here often
  • September 22, 2021

Veeam is performing the backup but would be unaware about infection.

That is where SureBackup with the virus scanning could help for checking the backup. But again won't help initial backup.

Thanks for that.

If SureBackup scanned the VM and there is virus/infected, what will be the next approach of the SureBackup? They will delete it? or Fix?

You can then use Secure Restore to help with removing or fixing the VM.  Check here - https://helpcenter.veeam.com/docs/backup/vsphere/av_scan_about.html?ver=110

 

Thanks a lot! :) appreciated

But… prior to the backup, can SureBackup feature knows if there is infected, or totally not? :)

or I can use the Surebackup once i do have the backup of the source

 

https://helpcenter.veeam.com/docs/backup/vsphere/surebackup_hiw.html?ver=110

SureBackup is used for testing restores and can do the scanning of the VMs for viruses.  You would need a backup of the infected VM first to test it with SureBackup as it points to the backup job. :smiley:

Okay clear! Thanks :))


JustineP
Forum|alt.badge.img+1
  • Author
  • Comes here often
  • November 2, 2021

@Chris.Childerhose hello, for veeam one, can that monitoring tool scan/check the VMs prior to backup if that VMs are impacted by ransomware? I saw  article for veeamone that it can "prevent and detect” ransomware - https://go.veeam.com/ransomware-prevention-kit

We are looking for a solution that can check prior backup, if VMs are impacted by any ransomware, or not. Thanks :)


JMeixner
Forum|alt.badge.img+16
  • On the path to Greatness
  • November 2, 2021

I think for this you will use one of the Anti-Virus applications.

Veeam can scan for viruses in backups.


JustineP
Forum|alt.badge.img+1
  • Author
  • Comes here often
  • November 2, 2021

I think for this you will use one of the Anti-Virus applications.

Veeam can scan for viruses in backups.

Yes agree, AV will do the scanning and customer is aware for that,,, we are checking the veeamone, if veeamone can scan/know prior backup if VMs are impacted before the backup schedule.

 

 


JMeixner
Forum|alt.badge.img+16
  • On the path to Greatness
  • November 2, 2021

In my understanding is VeeamOne a monitoring tool for Veeam. I am not aware that it has AV capabilities….

But I am not the deepest VeeamOne specialist, so please proof me wrong dear fellow communiteers 😎


Mildur
Forum|alt.badge.img+12
  • Influencer
  • November 2, 2021

You 

@Chris.Childerhose hello, for veeam one, can that monitoring tool scan/check the VMs prior to backup if that VMs are impacted by ransomware? I saw  article for veeamone that it can "prevent and detect” ransomware - https://go.veeam.com/ransomware-prevention-kit

We are looking for a solution that can check prior backup, if VMs are impacted by any ransomware, or not. Thanks :)

 

@JustineP 

You need to use Sure Backup Jobs with Malware Scan (Secure Restore).

Veeam One can give you a report of the surebackup jobs and will show you, if a virus was found or not in the last surebackup run.

 

Recovery Verification Overview - Veeam ONE Reporting Guide


Chris.Childerhose
Forum|alt.badge.img+21
  • Veeam Legend, Veeam Vanguard
  • November 2, 2021

@Chris.Childerhose hello, for veeam one, can that monitoring tool scan/check the VMs prior to backup if that VMs are impacted by ransomware? I saw  article for veeamone that it can "prevent and detect” ransomware - https://go.veeam.com/ransomware-prevention-kit

We are looking for a solution that can check prior backup, if VMs are impacted by any ransomware, or not. Thanks :)

From what I can recall the new VONE does have ransomware monitoring of some sort and very basic but I am sure it is there.  This is what I have read -

https://www.veeam.com/blog/one-ransomware-alarms.html

 


marcofabbri
Forum|alt.badge.img+12
  • On the path to Greatness
  • November 4, 2021

What virus repository database does Veeam use for virus scanning in secure restore???


Mildur
Forum|alt.badge.img+12
  • Influencer
  • November 4, 2021

What virus repository database does Veeam use for virus scanning in secure restore???

Veeam uses the installed anti virus software on the mount server to check for malware.

It depends on your installed antivirus product. Veeam doesn’t have an antivirus database.


marcofabbri
Forum|alt.badge.img+12
  • On the path to Greatness
  • November 4, 2021

What virus repository database does Veeam use for virus scanning in secure restore???

Veeam uses the installed anti virus software on the mount server to check for malware.

It depends on your installed antivirus product. Veeam doesn’t have an antivirus database.

Ah there, in fact I could not understand. Thanks @Mildur :)