Forum Discussion

SecOpsGuy's avatar
SecOpsGuy
Level 2
10 years ago
Solved

Backup Exec Temporary Files & FIM

I am working on a FIM project right now and am going over some files I often see popping up in our reports. Three in particular are of interest to me:

C:\WINDOWS\system32\drivers\VirtFile.sys
C:\Windows\System32\DRVSTORE\VirtFile_BEECE804497C13681B68D69D6AED20EC850A6B2E\VirtFile.inf
C:\Windows\System32\DRVSTORE\VirtFile_BEECE804497C13681B68D69D6AED20EC850A6B2E\VirtFile.sys

I am considering writing exclusions for these files as I assume they are either temporary files or change often.

Would someone be kind enough tell me what role these files play with regards to Backup Exec?

 

  • They're to do with the virtual file filter, and installed when you install an agent supporting AOFO. If you enable Advanced Open File Option you should be able to back them up.

     

  • They're to do with the virtual file filter, and installed when you install an agent supporting AOFO. If you enable Advanced Open File Option you should be able to back them up.

     

  • Thanks for the speedy reply and context.

    I see now that I went further back in time that these files were not changing as often as I though. We apparently had a number of upgrades take place over the last week or so.