Restore Point Marked as Infected
Sent when a user marks a restore point as infected. For more information, see Managing Malware Status.
General Information
Event ID: 42220
Event message details: Restore point has been marked as infected by <UserName>
Severity: Warning
Parameters
|
Parameter Name |
Description |
Example |
|---|---|---|
|
PointID |
Restore point ID. |
PointID="2eec1a91-7202-49a9-b60b-1436793c2502" |
|
UserName |
Name of the user who performed an operation. |
UserName="TECH\user1" |
|
ObjectName |
Object name. |
ObjectName="VM01" |
|
RestorePointTimeStamp |
Date and time when a restore point has been created. |
RestorePointTimeStamp="03/24/2025 07:00:53" |
|
VbrHostName |
Backup server name. Can be a DNS name, an FQDN or an IP address. |
VbrHostName="vbrsrv01.tech.local" |
|
VbrVersion |
Veeam Backup & Replication version. |
VbrVersion="13.0.1.180" |
|
Version |
Event version (service parameter). |
Version="1" |
|
Description |
Event message details. |
Description="Restore point has been marked as infected by TECH\user1." |
Syslog Message Example
|
1 2025-11-24T05:15:57.141518-07:00 VBRSRV01 Veeam_MP - - [origin enterpriseId="31023"] [categoryId=0 instanceId=42220 PointID="2eec1a91-7202-49a9-b60b-1436793c2502" UserName="TECH\user1" ObjectName="VM01" RestorePointTimeStamp="03/24/2025 07:00:53" VbrHostName="vbrsrv01.tech.local" VbrVersion="13.0.1.180" Version="1" Description="Restore point has been marked as infected by TECH\user1."] |