Skip to main content

Constant cyber-protect-service.exe ransomware injection warning

Thread needs solution

Almost every day, I get a warning from Acronis that it has stopped cyber-protect-service.exe because of an attempted ransomware injection. Each time, there are about 80 affected files that are apparently restored due to the injection. I can find no information about this. The affected files are in c:\ProgramData\Acronis\NGMP\ave\db/597\Plugins\ and are mostly .bak files with the exception of 1 file, update.txt.

My deep scans find nothing amiss and I am running the most current version of 2021.

Anyone else having this issue?

Cheers, Tom

0 Users found this helpful

Tom, welcome to these public User Forums.

I can only recommend raising this issue direct with Acronis Support for them to investigate.

See KB 67117: Acronis True Image 2021: using two or more antivirus solutions on the same computer is not recommended

KB 65499: Acronis True Image 2021: Advanced Antimalware Protection FAQ

I have not seen other users reporting this type of issue in these forums and do not use the Acronis Cyber Protect feature myself.