Acronis created a suspicious file name for an existing backup task
Acronis should have made an addition to an existing backup this morning. But when I checked the backup drive I see a suspicious file. Here are the file names:
O:\Acronis Backups\Dad\XPS15_190103>dir
Volume in drive O is 4TB
Volume Serial Number is 9406-CCDB
Directory of O:\Acronis Backups\Dad\XPS15_190103
01/09/2019 07:58 PM <DIR> .
01/09/2019 07:58 PM <DIR> ..
01/04/2019 01:35 AM 175,571,058,176 EDDYS-XPS_full_b1_s1_v1.tib
01/09/2019 07:58 PM 0 EDDYS-XPS_full_b2_s1_v1.tib
01/04/2019 12:11 PM 2,041,646,080 EDDYS-XPS_inc_b1_s2_v1.tib
01/05/2019 11:12 AM 13,545,669,632 EDDYS-XPS_inc_b1_s3_v1-2.tib
01/05/2019 11:01 AM 201,326,592 EDDYS-XPS_inc_b1_s3_v1.tib
01/06/2019 09:57 AM 14,844,789,760 EDDYS-XPS_inc_b1_s4_v1.tib
01/07/2019 09:51 AM 2,995,111,424 EDDYS-XPS_inc_b1_s5_v1.tib
01/08/2019 07:10 AM 13,443,331,584 EDDYS-XPS_inc_b1_s6_v1.tib
8 File(s) 222,642,933,248 bytes
2 Dir(s) 1,511,511,093,248 bytes free
O:\Acronis Backups\Dad\XPS15_190103>Today is 01/09/19 and the time now is 8:10PM (12 hours ago). Notice the name has "b2" as opposed to the normal "b1" and the size of the file is 0 bytes. Also it says "full" were by it should be "inc". What is the meaning of "bx"?
Here is the log:
1/9/2019 7:58:13 PM: -----
1/9/2019 7:58:13 PM: ATI Demon started. Version: 23.4.1.14690.
1/9/2019 7:58:14 PM: Backup reserve copy attributes: format tib; need_reserve_backup_copy false;
1/9/2019 7:58:14 PM: Operation EDDYS-XPS started by schedule.
1/9/2019 7:58:16 PM: Backup reserve copy attributes: format tib; need_reserve_backup_copy false;
1/9/2019 7:58:16 PM: Operation: Backup
1/9/2019 7:58:16 PM: Priority changed to Low.
1/9/2019 7:58:16 PM: Create Backup Archive From: To file: O:\Acronis Backups\Dad\XPS15_190103\EDDYS-XPS.tib Compression: Normal Exclude: Files matching mask Match criterion: hiberfil.sys, pagefile.sys, $Recycle.Bin, swapfile.sys, System Volume Information, *.tib, *.tib.metadata, *.~, *.tmp, C:\Users\eddy\AppData\Local\Temp, C:\Users\Administrator\AppData\Local\Temp, C:\Users\eddy\AppData\Local\Microsoft\Windows\INetCache, C:\Users\Administrator\AppData\Local\Microsoft\Windows\INetCache, C:\Users\eddy\AppData\Local\Mozilla\Firefox\Profiles\*\cache2, C:\Users\eddy\AppData\Local\Mozilla\Firefox\Profiles\*\OfflineCache, C:\Users\eddy\AppData\Local\Opera Software\Opera Stable\Cache, C:\Users\eddy\AppData\Local\Opera Software\Opera Stable\Media Cache, C:\Users\eddy\AppData\Local\Google\Chrome\User Data\Default\Cache, C:\Users\Administrator\AppData\Local\Mozilla\Firefox\Profiles\*\cache2, C:\Users\Administrator\AppData\Local\Mozilla\Firefox\Profiles\*\OfflineCache, C:\Users\Administrator\AppData\Local\Opera Software\Opera Stable\Cache, C:\Users\Administrator\AppData\Local\Opera Software\Opera Stable\Media Cache, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Cache, C:\Windows\CSC
1/9/2019 7:58:16 PM: Pending operation 173 started: 'Creating partition image'.
1/9/2019 7:58:17 PM: Writing full version to file: EDDYS-XPS_full_b2_s1_v1.tib
1/9/2019 7:58:20 PM: Pending operation 173 started: 'Creating partition image'.
Start: 1/9/2019 7:58:13 PM
Stop: 1/9/2019 7:58:20 PM
Total Time: 00:00:07
It's not suspicious, that is backup #2. It has started the next full backup. Either it is still in progress, or something prevented it from completing since it shows 0Kb in size though.
https://www.acronis.com/en-us/support/documentation/ATI2019/#37737.html
Backup file naming
A backup file name has the following attributes:
- Backup name
- Backup method (full, inc, diff: full, incremental, differential)
- Number of backup chain (in the form of b#)
- Number of backup version (in the form of s#)
- Number of volume (in the form of v#)
For example this attribute changes when you split a backup into several files. Refer to Backup splitting for details.
Thus a backup name may look the following way:
- my_documents_full_b1_s1_v1.tib
- my_documents_full_b2_s1_v1.tib
- my_documents_inc_b2_s2_v1.tib
- my_documents_inc_b2_s3_v1.tib
If you are creating a new backup, and there is already a file with the same name, the program does not delete the old file, but adds to the new file the "-number" suffix, for example, my_documents_inc_b2_s2_v1-2.tib.