Log In

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips Forums!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

Posting Guidelines

Promoting, selling, recruiting, coursework and thesis posting is forbidden.


Possible Index Cache Virus

Possible Index Cache Virus

Here is an interesting one for you.

Last week, Wednesday, I opened a ticket with Commvault due to services on Commserve not starting on boot.

Was told to remove all updates/SP5 and reinstall.  I did that with no resolution.

The next day after doing this, all backups were pending with some form of communication or indexing error.

Started a ticket with CV.  The tech that worked it felt that the entire application needed to be removed/reinstalled because of the services issue.  Completed late Thursday.

It was recommended I force FULLS only on all systems because the index cache had been moved.  Friday, all fulls, no issues, Saturday, all fulls, no issues, Sunday, I was sick of looking at Commvault so I let incremental back-ups run.

Monday morning, right back to where I was before the reinstall.  Commvault hasn't given this much credence, but I have a theory.  At some pont I was able to capture a print screen from Office scan on one of my media agents that reads, "(A virus has been found in the compressed file.) from F:\Program Files\CommVault Systems\Galaxy\IndexCache\drvsetdn.EML "

I cant find this file or even the path now but the msg came from somewhere.

I believe when the incrementals were allowed to run, the index cache had to be restored.  At that point it must have restored the virus.

Anyway, thought I would share this for anyone else that might see strange behavior.


Red Flag This Post

Please let us know here why this post is inappropriate. Reasons such as off-topic, duplicates, flames, illegal, vulgar, or students posting their homework.

Red Flag Submitted

Thank you for helping keep Tek-Tips Forums free from inappropriate posts.
The Tek-Tips staff will check this out and take appropriate action.

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members!


Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close