Hi guys,
hope you´re well.
We have the following behaviour in our production environment.
The following path has been added in the trusted objects within the configured file mask part of the malware detection.
C:\VeeamFLR\v-epa-db1_f02a103a\Volume4\Oracle\fast_recovery_area\PEG1\FLASHBACK
Now it happens frequently that only the ID afte the VM name changed, therefore the the detection triggers an anlarm.
For this example from C:\VeeamFLR\v-epa-db1_f02a103a\Volume4\Oracle\fast_recovery_area\PEG1\FLASHBACK to C:\VeeamFLR\v-epa-db1_9141dd11\Volume4\Oracle\fast_recovery_area\PEG1\FLASHBACK
For us it is not clear why the ID is chaning from time to time.
Maybe you can help us out?
withe kind regards
Oliver
hope you´re well.
We have the following behaviour in our production environment.
The following path has been added in the trusted objects within the configured file mask part of the malware detection.
C:\VeeamFLR\v-epa-db1_f02a103a\Volume4\Oracle\fast_recovery_area\PEG1\FLASHBACK
Now it happens frequently that only the ID afte the VM name changed, therefore the the detection triggers an anlarm.
For this example from C:\VeeamFLR\v-epa-db1_f02a103a\Volume4\Oracle\fast_recovery_area\PEG1\FLASHBACK to C:\VeeamFLR\v-epa-db1_9141dd11\Volume4\Oracle\fast_recovery_area\PEG1\FLASHBACK
For us it is not clear why the ID is chaning from time to time.
Maybe you can help us out?
withe kind regards
Oliver
Statistics: Posted by OMW72 — Oct 22, 2025 9:18 am







