[Tool] Automatic pause and resume for backup-software

Suggestions around PrimoCache
tyraelmetanamede
Level 4
Level 4
Posts: 28
Joined: Tue Feb 05, 2019 11:17 pm

Re: [Tool] Automatic pause and resume for backup-software

Post by tyraelmetanamede »

Hi idefix44,

today is your lucky day - i stand corrected. I found another way to get the memory footprint which works well across different windows versions and is even faster than before.

Please download release 0.0.4 (or higher if available). I implemented the fix for the memory leak. Please do test this release and report back if this also works for you.

Attention: the new version uses around 11 MB RAM from the start, but does not grow anymore - at least on my machines.

Best regards,
Kadrim
idefix44
Level 8
Level 8
Posts: 137
Joined: Sat Oct 26, 2013 2:13 pm

Re: [Tool] Automatic pause and resume for backup-software

Post by idefix44 »

I'll let you know.

Thanks.
idefix44
Level 8
Level 8
Posts: 137
Joined: Sat Oct 26, 2013 2:13 pm

Re: [Tool] Automatic pause and resume for backup-software

Post by idefix44 »

v0.0.4 fixes the memory leak when using PrimoCacheBackupDetect with Windows XP Home SP3 x86.

So: GOOD JOB!
tyraelmetanamede
Level 4
Level 4
Posts: 28
Joined: Tue Feb 05, 2019 11:17 pm

Re: [Tool] Automatic pause and resume for backup-software

Post by tyraelmetanamede »

I am happy to hear that it works for you!

Would you mind sharing your 2 .ini-Files with me? So i could update the program to include those two backup-programs by default?

Best regards
Kadrim
idefix44
Level 8
Level 8
Posts: 137
Joined: Sat Oct 26, 2013 2:13 pm

Re: [Tool] Automatic pause and resume for backup-software

Post by idefix44 »

Norton Gost 10.0:
Interval=10000
Process=vprosvc.exe
Threshold=30000000

EaseUS Todo Backup Home 11.5:
Interval=5000
Process=TbService.exe
Threshold=25000000
idefix44
Level 8
Level 8
Posts: 137
Joined: Sat Oct 26, 2013 2:13 pm

Re: [Tool] Automatic pause and resume for backup-software

Post by idefix44 »

Since my first tests of PrimoCacheBackupDetect I've got many alerts from my antivirus software on my 2 PCs (360 Total Security).
So I upload the .exe to the VirusTotal site (https://www.virustotal.com/).
The result was that 7 antivirus found PrimoCacheBackupDetect malicious.

So I stop to use your tool and delete my installation folders.

Any comments?
tyraelmetanamede
Level 4
Level 4
Posts: 28
Joined: Tue Feb 05, 2019 11:17 pm

Re: [Tool] Automatic pause and resume for backup-software

Post by tyraelmetanamede »

Hi idefix44,

thanks for bringing this to my attention!

What happens here is that a so called heuristic checks the functions inside the program and if some combination is used, the program is deemed malicous. This is called a "false positive" where some antivirus programs detect a harmless application as a virus.
Read some more about that here: https://blog.virustotal.com/2018/06/vtm ... tives.html

Let me explain the "dangerous" functions beeing used:

1) gaining Admin-Rights: this is needed for the program to use any of other functions, like getting process details (backup-service) from another user or pausing/resuming the cache
2) installing a scheduled task: this is used for windows vista and higher to automatically start the program with admin rights on the next reboot

What you can do:

A)
check the source-code thouroughly (that is why i made the application open source anyway): https://github.com/kadrim/PrimoCacheBac ... Detect.au3

Even if you are not a programmer, i think you will understand what is going on, the code is pretty short too.
After that you could install AutoIt v3 and compile the program yourself - that way you can be sure, that noone tampered with the .exe file

B)
add the program to the exception list of your Antivirus program. That way you won't get notifications about that false positive anymore. Please check the source-code anyway, so you can see that nothing malicious is going on.


What one can see on the VirusTotal page is, that many AV-Programs (i only use the windows defender, as that's enough for me) do not see this application as a threat. And one can see, that it's mostly determined by a heuristic and not 100% confidence.

So i am sorry, there is not much i can do about this, as long as admin-rights are still needed to pause/resume the PrimoCache.

Best regards
Kadrim
idefix44
Level 8
Level 8
Posts: 137
Joined: Sat Oct 26, 2013 2:13 pm

Re: [Tool] Automatic pause and resume for backup-software

Post by idefix44 »

Thanks for your answers to my questioning.
idefix44
Level 8
Level 8
Posts: 137
Joined: Sat Oct 26, 2013 2:13 pm

Re: [Tool] Automatic pause and resume for backup-software

Post by idefix44 »

Back to thanks tyraelmetanamede for his soft wich is required is you have scheduled backups of your cached volumes/partitions.
My setting advices:
Norton Gost 10.0:
Interval=60000
Process=vprosvc.exe
Threshold=35000000

EaseUS Todo Backup Home 11.5:
Interval=60000
Process=TbService.exe
Threshold=0

Thanks again.
tyraelmetanamede
Level 4
Level 4
Posts: 28
Joined: Tue Feb 05, 2019 11:17 pm

Re: [Tool] Automatic pause and resume for backup-software

Post by tyraelmetanamede »

Thanks idefix!

As soon as I have the time I will implement these settings as defaults.

As a side note: I am currently in the process of talking to the many anti virus suppliers to fix the "false positive" reporting.

This implies sending the binary along with the source code and a documentation to each and every company. So far the response is quite positive but it takes a long time until every av-program deploys a new whitelist.

Please be patient ;-)
Post Reply