Emby Acronis Ransomware Injection?

[rudco 4]

Greetings, 

 

Has anyone else been seeing this? Is it normal, or should I delete my entire Emby installation and re-install fresh?  I *have* notice my computer (Windows 10 up-to-date) Has started paging and freezing randomly in the past few weeks, not sure if this is a red-herring or related?

[Luke 42085]

Hi, what version of Emby Server?

[rudco 4]

Greetings, 

I think this is solved, I had upgraded to the newest version of Acronis Backup software and didn't realize that Acronis Active Protection would see Emby going about its cataloguing business and think that it was some kind of trojan "injecting" things into my system. As soo as I went into the Acronis app and "whitelisted" the Emby executable, things got muc better.

Regards, 

Ed Rudman

[Guest]

gotta love a false positive...

'its a worm and I am part of a bot network...ahhhhhh'....

Edited March 18, 2021 by Guest

[mrees 6]

I just had the same issue occur to me

Emby server v 4.5.4.0

Acronis True Image v 2021 - Build 39216

[Luke 42085]

@cayars can file a false positive report with them. Thanks for reporting.

[Carlo 4561]

On 3/14/2021 at 9:45 AM, rudco said:

Has anyone else been seeing this? Is it normal, or should I delete my entire Emby installation and re-install fresh?  I *have* notice my computer (Windows 10 up-to-date) Has started paging and freezing randomly in the past few weeks, not sure if this is a red-herring or related?

Which acronis software and version?

10 hours ago, mrees said:

Acronis True Image v 2021 - Build 39216

Got it thanks.

As soon I hear back from @rudco I'll test on my side and file a report with them.

Carlo

[rudco 4]

Hi, reporting back in here since I see some responses....ever since whitelisting Emby within the Acronis software, I have had *NO* problems with slowdowns or anything like that. Emby and Acronis are both rolling along happily. 

Versions:  Acronis True Image 2021 39216  and  Emby server v 4.5.4.0

 

[Guest]

Haven't had any signs of the problem With ESET, nor anything come up with Tenable Nessus Essentials.. thus far..

The HIPS module f EST made me verify a few actions in the beginning but no ransomware detection or infection.

Haven't done extensive testing ( with Nessus ) of the server yet, however just general system Advance Scan with it running.. 

 

[Carlo 4561]

Thanks guys,reporting this now to Acronis.