Skip to main content
Question

Veeam Version 12.1 - Malware Detections Query


Show first post

30 comments

Scott
Forum|alt.badge.img+9
  • Veeam Legend
  • 1003 comments
  • April 2, 2024

Create a shortcut on your desktop as a huge time saver as many of the files I had were not malware and continue to show up.

 

Use the size of the log files to compare. They shouldn’t grow or change by a huge amount. You could script something to check vs the previous days and email yourself the changes, but hopefully in the next few versions of Veeam some of this gets fine tuned a bit. I have many false positives, but I did actually find some ransomware files using this feature from about 8 years ago which was interesting. 

 

 


Scott
Forum|alt.badge.img+9
  • Veeam Legend
  • 1003 comments
  • April 2, 2024
coolsport00 wrote:
Scott wrote:

C:\ProgramData\Veeam\Backup\Malware_Detection_Logs

Hey Scott, based off the Malware event he posted, his event is for Inline Entropy scans. When that is used, there is no Malware_Detection_Logs folder and subsequent log file. That is only used for File System Analysis scans.

 

Oh I misread that. Thanks 


coolsport00
Forum|alt.badge.img+20
  • Veeam Legend
  • 4153 comments
  • April 2, 2024
Scott wrote:
coolsport00 wrote:
Scott wrote:

C:\ProgramData\Veeam\Backup\Malware_Detection_Logs

Hey Scott, based off the Malware event he posted, his event is for Inline Entropy scans. When that is used, there is no Malware_Detection_Logs folder and subsequent log file. That is only used for File System Analysis scans.

 

Oh I misread that. Thanks 

No worries bud.


  • New Here
  • 1 comment
  • March 27, 2025

How can see which file effected? I coudnt find any log files


coolsport00
Forum|alt.badge.img+20
  • Veeam Legend
  • 4153 comments
  • March 30, 2025

Hi ​@cobanah -

If you’re using the Inline Entropy Scan Engine, there is no way currently. This may change in a future release of VBR, but how that scan works, it may not be possible. 

For the File System Analysis Scan Engine, you can look at logs in:
C:\ProgramData\Veeam\Backup\Malware_Detection_Logs

See below URL for more info:

https://helpcenter.veeam.com/docs/backup/vsphere/malware_detection_guest_index_logs_and_indexing.html?ver=120


Comment