Hi adam900331,
You should see the results of the YARA scan as below and in this User Guide Page:
https://helpcenter.veeam.com/docs/backu ... og&ver=120
%ProgramData%/Veeam/Backup/FLRSessions/Windows/FLR__[name of the machine scanned]/Antivirus/YARA*.log.
For example, from our lab:
C:\ProgramData\Veeam\Backup\FLRSessions\Windows\FLR__ddom-malware-box_\Antivirus\
>YARA-Volume1.log
>YARA-Volume0.log
And will have some message like:
Is it not present on your system?
Similarly, if you run it as part of the Content Scan and Verification only SureBackup job or a Scan Backup, it should show a button on the bottom of the session window "Scan Log" as shown in the first link.
You should see the results of the YARA scan as below and in this User Guide Page:
https://helpcenter.veeam.com/docs/backu ... og&ver=120
%ProgramData%/Veeam/Backup/FLRSessions/Windows/FLR__[name of the machine scanned]/Antivirus/YARA*.log.
For example, from our lab:
C:\ProgramData\Veeam\Backup\FLRSessions\Windows\FLR__ddom-malware-box_\Antivirus\
>YARA-Volume1.log
>YARA-Volume0.log
And will have some message like:
Code:
[16.07.2024 15:48:48.151] <23> Info (3) Begin scan process: ExecutablePath = [C:\Program Files\Common Files\Veeam\Backup and Replication\Mount Service\yara64.exe] Args = ["C:\Windows\TEMP\tmpEF79.tmp" -r -g -p 8 -N "C:\VeeamFLR\ddom-malware-box_153cafd5\Volume1"].[16.07.2024 15:52:39.620] <144> Info (3) OnionLinks [] C:\VeeamFLR\ddom-malware-box_153cafd5\Volume1\sadklfjsd;lkf.txt[16.07.2024 15:52:39.620] <144> Warning (3) Threat found. Antivirus output: OnionLinks [] C:\VeeamFLR\ddom-malware-box_153cafd5\Volume1\sadklfjsd;lkf.txtSimilarly, if you run it as part of the Content Scan and Verification only SureBackup job or a Scan Backup, it should show a button on the bottom of the session window "Scan Log" as shown in the first link.
Statistics: Posted by david.domask — Jul 16, 2024 2:04 pm