How Antivirus Scan Works

During the Scan Backup session, the antivirus scan works in the following way:

1. On the mount server, Veeam Backup & Replication runs the Veeam Mount Service to perform the following steps:

1. Mount machine disks from backups to the mount server under the C:\VeeamFLR\<machinename> folder.
2. Initiate an antivirus scan.

2. If the antivirus does not find a clean restore point, the Scan Backup session will be finished with the Failed status. The malware detection event will be created for each restore point. Objects will be marked as Infected.

You can further access the restored machine or its disks in the isolated environment and clean the infection.

3. If the antivirus finds a clean restore point, the Scan Backup session will be finished with the Success status. The malware detection event will not be created.