Skip to content
English
Contact us
  • There are no suggestions because the search field is empty.

Antivirus and EDR Exclusions for NovaBACKUP 22

Add these folder, process, service, and network exclusions so antivirus and EDR software does not block NovaBACKUP 22.

Applies to: NovaBACKUP PC Agent and NovaBACKUP Server Agent, version 22. For version 21.x, see Exclude NovaBACKUP Files and Directories from Active Anti-Virus and Anti-Spyware Scanning (21.x and newer versions).

NovaBACKUP 22 runs as a desktop application that talks to a local Windows service. If antivirus or endpoint detection and response (EDR) software quarantines one of its files, blocks one of its processes, or blocks the local connection between the application and the service, the application cannot connect and backups can fail. Add the exclusions below before you deploy NovaBACKUP 22 to agents that run security software.

Folders

FolderContents
C:\Program Files\NovaStor\NovaStor NovaBACKUP\Program files: the desktop application, the service, and the backup engine
C:\ProgramData\NovaStor\NovaStor NovaBACKUP\Configuration, logs, job files, backup catalogs (FPI), and temporary files
Each local backup destination, for example E:\BackupsYour backup data. Scanning it slows backups and restores.

Note: If NovaBACKUP was installed to a different folder, exclude that folder instead.

Processes

All paths are relative to C:\Program Files\NovaStor\NovaStor NovaBACKUP\.

ProcessRole
Service\BackupClient.Service.exeThe NovaBACKUP service (Windows service Backup Client)
nsService.exeThe backup engine service (Windows service nsService, display name NovaStor NovaBACKUP Backup/Copy Engine)
engine.exeThe backup and restore engine
ManagementServer.Agent.Service.exeThe CMon agent (Windows service Backup Client Agent Service)
App\NovaBACKUP.exeThe desktop application
App\resources\bin\BackupClient.Desktop.exeThe desktop application's back end
vssnbk.exeVolume Shadow Copy helper
nsCtrl.exe, nsCmd.exeEngine control and command line
LogCollector.exeLog Collector
NovaBackX.exeThe Legacy NovaBACKUP UI (on upgraded computers)
DR\DRBackup.exeLegacy image backup engine (only on computers upgraded from earlier versions)
DR\x64\drdiag.exeDisaster Recovery Imaging service (only on computers upgraded from earlier versions)
UpdateApp.exeUpdate helper

Windows services

  • Backup Client
  • nsService (NovaStor NovaBACKUP Backup/Copy Engine)
  • Backup Client Agent Service
  • Disaster Recovery Imaging, only on computers upgraded from earlier versions that used legacy image backups

Network

ConnectionAllow
Desktop application to the NovaBACKUP servicehttp://localhost:5000 on the agent itself
Agent to the CMonOutbound TCP port 4502 to your CMon
Agent to cloud storageOutbound HTTPS (port 443) to your cloud storage endpoint

Important: Some EDR products block local connections between processes. If the application shows that it cannot connect to the service, check that the connection to localhost:5000 is allowed.

Behavior your EDR may flag

A backup product reads every file it backs up, creates Volume Shadow Copy snapshots, and, for full system recovery, reads disk and partition layouts. Some EDR products treat this as suspicious. If backups fail with access errors while your EDR reports blocked activity, add the processes above to the EDR's allow list or trusted applications in addition to its scan exclusions.

Best Practices

  • Add the exclusions in your RMM or EDR policy before the upgrade, so the first backup after the upgrade is not interrupted.
  • Recheck exclusions after each NovaBACKUP update. Some security products tie exclusions to a file hash.
  • If your security policy requires your backup destinations to be scanned, use a separate scheduled scan that runs outside the backup window.

Related Articles

Still Need Help?

Contact NovaBACKUP Support: