Restore Point Marked as Infected
Sent when a user marks a restore point as infected. For more information, see Managing Malware Status.
General Information
Event ID: 42220
Event message details: Restore point has been marked as infected by <UserName>
Severity: Warning
Parameters
Parameter Name | Description | Example |
|---|---|---|
PointID | Restore point ID. | PointID="2eec1a91-7202-49a9-b60b-1436793c2502" |
UserName | Name of the user who performed an operation. | UserName="TECH\user1" |
ObjectName | Object name. | ObjectName="VM01" |
RestorePointTimeStamp | Date and time when a restore point has been created. | RestorePointTimeStamp="03/24/2025 07:00:53" |
VbrHostName | Backup server name. Can be a DNS name, an FQDN or an IP address. | VbrHostName="vbrsrv01.tech.local" |
VbrVersion | Veeam Backup & Replication version. | VbrVersion="12.3.1.1139" |
Version | Event version (service parameter). | Version="1" |
Description | Event message details. | Description="Restore point has been marked as infected by TECH\user1." |
Syslog Message Example
1 2025-03-24T05:15:57.141518-07:00 VBRSRV01 Veeam_MP - - [origin enterpriseId="31023"] [categoryId=0 instanceId=42220 PointID="2eec1a91-7202-49a9-b60b-1436793c2502" UserName="TECH\user1" ObjectName="VM01" RestorePointTimeStamp="03/24/2025 07:00:53" VbrHostName="vbrsrv01.tech.local" VbrVersion="12.3.1.1139" Version="1" Description="Restore point has been marked as infected by TECH\user1."] |
