Excluding Shadow Copies

Discussion in 'ESET NOD32 Antivirus' started by mlynchit, Nov 1, 2011.

Thread Status:
Not open for further replies.
  1. mlynchit

    mlynchit Registered Member

    Joined:
    Nov 20, 2010
    Posts:
    21
    I refer to this now rather old thread: https://www.wilderssecurity.com/showthread.php?t=289050

    Does ESET yet support the exclusion of Shadow Copies from real time scan?

    IMO, the product can NOT be considered SMB ready without this feature.

    I can not afford to have my Shadow Copy backups wrung thorugh the scanner.

    Other than that, I really like NOD32, and I have a 100+ seat customer awaiting conclusion of this issue.

    Cheers
    Michael.
     
  2. tony_m

    tony_m Eset Staff Account

    Joined:
    Nov 22, 2010
    Posts:
    239
    Hi mlynchit,

    Thank you for your patience. I can confirm info from other thread. There is not yet any solution ready which should allow you to add kernet paths to exclusions.

    The appropriate parties have been notified so that this feature is added in the future.
     
  3. mlynchit

    mlynchit Registered Member

    Joined:
    Nov 20, 2010
    Posts:
    21
    Thanks Tony

    It is a shame.

    I advised my team we will have to avoid NOD32 for now

    "NOD32 has no way to excluded shadow copies from scanning

    What this means is:
    1) If you were to image a live server (i.e using ShadowProtect or Acronis), obviously all data on the machine is processed and copied to a backup device
    2) NOD32 realtime scanning scans EVERY single file as the backup runs
    3) Therefore, every time you image a server, effectively a full virus scan is performed
    4) But that is silly, because the scan is against a read-only shadow copy, and therefore can not clean the files anyway
    5) Also, obviously, very slow.

    "

    Michael.
     
  4. dmaasland

    dmaasland Registered Member

    Joined:
    Nov 10, 2010
    Posts:
    468
    Why not use EFSW and use eShell scripts to disable Real Time protection before starting a backup?
     
Thread Status:
Not open for further replies.