Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

PSC: Interop issue with Acronis

PSC: Interop issue with Acronis

Environment

  • Acronis Backup 12.5.14330
  • CB Defense Sensor: 3.4.0.1016 and Higher
  • Microsoft Windows: All Supported Versions

Symptoms

  • Acronis backup fails
  • Acronis service failed to start
  • Procmon shows a number of "name collision" errors when Acronis attempted to perform "IRP_MJ_CREATE" operations

Cause

Known compatibility issue

Resolution

Implement the following API bypass rule:
C:\Program Files\Acronis\BackupAndRecovery\**

Additional Notes

The following API bypass rules have also helped: 
C:\program files\backupclient\backupandrecovery\mms.exe
C:\program files\acronis\agent\aakore.exe

Related Content


Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎09-09-2020
Views:
620
Contributors