CivicWalker

I also posted on the CommVault Forum and almost immediately received the following kind reply “I don’t think this is the right way for an antivirus to change the timestamps on a file. This will affect the backups as well since backups depend on modifications time of a file and if that changes, there is a chance that we could skip files from backup or backup extra data. The anomaly report is also pointing to the same that there is some anomaly happening on the machine. I don’t think CommVault can do anything here unless the antivirus fixes itself to not modify the timestamp.”

I am currently using CommVault v11.19 together with Kaspersky Security 10.1.2 for windows server & Kaspersky Security Center 11 Network Agent. During our weekly Kaspersky scan we've used procmon to determine that process is changing both the timestamps and attributes on scanned files. Unfortunately, this results in CommVault's File Activity Anomaly Alert triggering as it detects Ransomware like activities plus the subsequent backup takes considerably longer as more changed files are obviously detected. Is there any way of preventing the Kaspersky scan from changing both the timestamps and attributes of the files? Thanks in anticipation