-
Title
ESET NOD32 4.x.x Business Ed. antivirus + vRanger 5.2.x backup & FLR job actions can cause wi -
Description
Windows 2003 32 / 64-bit std ed servers with eset nod32 4.x.x installed hang on vRanger 5.2.x backup & file level restore jobs actions. There are no system or application events directly leading this behavior before it occurs.
-
Cause
Windows explorer.exe is being locked up by the combination of a newly called vRangerPro backup or flr job sequence & the underlying realtime scan actions of ESET NOD32 4.x.x. Also, vRanger API & FLR services randomly are seen to hang on such servers, but not in a directly windows ui hang event preceding manner. A suspected sub-component cause of this behavior appears to be scripted or manual manipulation of savepoints & / or metadata files.
-
Resolution
1. Reduce [ deselect ] the more aggressive ESET NOD32 Business Ed Threatsense realtime scan settings, specifically the following scan options:
- advanced heuristics
- potentially unwanted applications
- potentially unsafe applications
2. Create exclusions for *.var & *.metadata file types. Also create scan exclusion exceptions for any CIFS repository local DAS or network shares.
3. Refrain from deleting vRanger savepoints & metadata files either via scripted sweep-to-tape or manual savepoint & / or metadata file manipulation or deletion.
-
Additional Information
ESET NOD32 - Recommended windows server settings > http://kb.eset.com/esetkb/index?page=content&id=SOLN2144
ESET NOD32 - Setting dir / file level exclusions > http://kb.eset.com/esetkb/index?page=content&id=SOLN2153