C drive backup gets stuck for hours on certain files

[pk-it]

Hi Team, I would like to know what can be done for below issue as i my backup for C drive is failing or gets stuck for hours when tries to backup below files, i have excluded these files as of now and ran backup to make it success, however it does not get success while backing them up.

09/30/2015 13:35:58 - Info bpbrm (pid=20840694) from client SERVER_ABC TRV - error clearing archive bit: C:\Program Files\Common Files\Symantec Shared\SEVINST.EXE (WIN32 5: Unknown error)
09/30/2015 13:35:58 - Info bpbrm (pid=20840694) from client SERVER_ABC TRV - error clearing archive bit: C:\Program Files\Common Files\Symantec Shared\EENGINE\EPERSIST.DAT (WIN32 5: Unknown error)
09/30/2015 13:36:06 - Info bpbrm (pid=20840694) from client SERVER_ABC TRV - error clearing archive bit: C:\Program Files\Symantec\Symantec Endpoint Protection\AutoExcl.exe (WIN32 5: Unknown error)
09/30/2015 13:36:06 - Info bpbrm (pid=20840694) from client SERVER_ABC TRV - error clearing archive bit: C:\Program Files\Symantec\Symantec Endpoint Protection\regid.1992-12.com.symantec_SEP.swidtag (WIN32 5: Unknown error)
09/30/2015 13:36:06 - Info bpbrm (pid=20840694) from client SERVER_ABC TRV - error clearing archive bit: C:\Program Files\Symantec\Symantec Endpoint Protection\regid.1992-12.com.symantec_SEP_Windows_Client.swidtag (WIN32 5: Unknown error)
09/30/2015 13:36:06 - Info bpbrm (pid=20840694) from client SERVER_ABC TRV - error clearing archive bit: C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.5337.5000.105\License.rtf (WIN32 5: Unknown error)
09/30/2015 13:36:06 - Info bpbrm (pid=20840694) from client SERVER_ABC TRV - error clearing archive bit: C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.5337.5000.105\isolate.ini (WIN32 5: Unknown error)
09/30/2015 13:36:06 - Info bpbrm (pid=20840694) from client SERVER_ABC TRV - error clearing archive bit: C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.5337.5000.105\Bin\AVHostPlugin.dll (WIN32 5: Unknown error)
09/30/2015 13:36:06 - Info bpbrm (pid=20840694) from client SERVER_ABC TRV - error clearing archive bit: C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.5337.5000.105\Bin\AVMan.plg (WIN32 5: Unknown error)
09/30/2015 13:36:06 - Info bpbrm (pid=20840694) from client SERVER_ABC TRV - error clearing archive bit: C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.5337.5000.105\Bin\AVProxy.dll (WIN32 5: Unknown error)

09/30/2015 13:36:06 - Info bpbrm (pid=20840694) from client  SERVER_ABC : TRV - last message being suppressed after 10 occurrences

[watsons]

I don't quite understand, if you said you have excluded those files from backup, your next backup still pick up those files? or they didn't but still the job fails (with other files)?  Please clarify.

I can see those affected files are "Symantec endpoint" applications, ask yourself if you really need to backup those. If not just exclude the entire folder, if you need to backup just ensure endpoint are not holding those files while you backup - schedule another time for backup if you have to.

[Nicolai · Accepted solution]

Somewhat related thread about antivirus:

https://www-secure.symantec.com/connect/forums/netbackup-7-and-anti-virus

I am pretty sure SEP is messing with Netbackup. Had somewhat the same issue in-house. You to exclude SEP from scanning Netbackup processes.

[sdo]

I suspect that SEP is placing hard blocking file locks on itself to prevent malware from tampering with, or in your case even reading (i.e. even the backup application is blocked from reading), the SEP related files.  If so, then your only option is to exclude those SEP files, as you will never be able to read them whilst SEP is running.

[Marianne]

Try to exclude the folders instead of files, e.g.
C:\Program Files\Common Files\Symantec Shared 
C:\Program Files\Symantec\Symantec Endpoint Protection

Create bpbkar log folder on the client to see how Exclude List is used.