locked
How to detect if SharePoint Database is not infected by the virus RRS feed

  • Question

  • Hello All Gurus - We had this virus in our file servers which was changing the Excel files extension to AAA. We did identified and isolated those file servers. My Question is how should we be sure that SharePoint Database is safe and no files has been uploaded with AAA extension and that database is not infected. 

    Regards,


    Khushi

    Friday, August 21, 2015 5:03 PM

Answers

  • Hi,

    Please check these links

    http://www.harbar.net/archive/2013/02/22/Antivirus-and-SharePoint-2013.aspx

    http://sharepoint.stackexchange.com/questions/106202/running-anti-virus-software-on-sharepoint-2013-wfe-and-db-servers

    https://social.technet.microsoft.com/forums/sharepoint/en-US/bab1a929-d98e-40a8-9a85-5ccc0177f3cc/onprem-antivirus-solution-for-sharepoint-2013


    Please remember to click 'Mark as Answer' on the answer if it helps you

    • Marked as answer by star.wars Monday, September 7, 2015 8:41 AM
    Friday, August 21, 2015 5:12 PM
  • Hi Khushi- you could run a powershell script to find any instances of the AAA extension.

    cameron rautmann

    • Marked as answer by star.wars Monday, September 7, 2015 8:41 AM
    Friday, August 21, 2015 6:56 PM
  • HI Khushi,I think you have installed some sort of antivirus in the servers,You can check the logs of Anti virus and get to know that the DB is infected with virus or not.Please check the link below that explains more details about the various antivirus patterns if your not installed in your farm.Some of the folders we need to excluse from antivirus to function properly.Please check the link that shows the same.

    http://expertsharepoint.blogspot.com/2014/03/antivirus-for-sharepoint.html

    http://expertsharepoint.blogspot.com/2014/06/antivirus-exclusions-for-sharepoint.html


    Anil Avula[Partner,MCP,MCSE,MCSA,MCTS,MCITP,MCSM] See Me At: http://expertsharepoint.blogspot.de/

    • Marked as answer by star.wars Monday, September 7, 2015 8:41 AM
    Monday, August 24, 2015 3:44 AM

All replies

  • Hi,

    Please check these links

    http://www.harbar.net/archive/2013/02/22/Antivirus-and-SharePoint-2013.aspx

    http://sharepoint.stackexchange.com/questions/106202/running-anti-virus-software-on-sharepoint-2013-wfe-and-db-servers

    https://social.technet.microsoft.com/forums/sharepoint/en-US/bab1a929-d98e-40a8-9a85-5ccc0177f3cc/onprem-antivirus-solution-for-sharepoint-2013


    Please remember to click 'Mark as Answer' on the answer if it helps you

    • Marked as answer by star.wars Monday, September 7, 2015 8:41 AM
    Friday, August 21, 2015 5:12 PM
  • Hi Khushi- you could run a powershell script to find any instances of the AAA extension.

    cameron rautmann

    • Marked as answer by star.wars Monday, September 7, 2015 8:41 AM
    Friday, August 21, 2015 6:56 PM
  • HI Khushi,I think you have installed some sort of antivirus in the servers,You can check the logs of Anti virus and get to know that the DB is infected with virus or not.Please check the link below that explains more details about the various antivirus patterns if your not installed in your farm.Some of the folders we need to excluse from antivirus to function properly.Please check the link that shows the same.

    http://expertsharepoint.blogspot.com/2014/03/antivirus-for-sharepoint.html

    http://expertsharepoint.blogspot.com/2014/06/antivirus-exclusions-for-sharepoint.html


    Anil Avula[Partner,MCP,MCSE,MCSA,MCTS,MCITP,MCSM] See Me At: http://expertsharepoint.blogspot.de/

    • Marked as answer by star.wars Monday, September 7, 2015 8:41 AM
    Monday, August 24, 2015 3:44 AM