Default Exchange Server exclusion list in Worry-Free Business Security (WFBS)

Support
Solution ID Last Updated
1058279 Date : 2014/02/17 Time:2:54 AM , (PST)


Product/Version Platform
Worry-Free Business Security Standard/Advanced - 6.0, 7.0, 8.0, 9.0;
Windows - 2003 Standard Server Edition, 2008 Standard Server Edition

Problem Description

This article lists down the default exclusion list for the different Exchange Server versions.

Solution

For the Microsoft Exchange scan exclusion setting, the Security Agent (SA) will auto-detect the Exchange Server location when the client is restarted. This means that if you change the Exchange Server location, the Exchange exclusion setting will also be changed after the reboot. The hard code means the exclusion path for the Exchange Server is fixed. You will not be able to manually add or remove it; you can only enable or disable it.
If the Exchange database is moved or a new one is created, the exclusion files and folders will be updated only after performing "Update Now" from the SA console.
In WFBS 7.0, the SA updates the exclusion files and folders when the AMSP service starts.
Below are the exclusion folders of the Exchange Server:
  • Exchange databases and log files. (example: %PROGRAMFILES%\Exchsrvr\MDBDATA )
  • Virtual web server folders (example: %PROGRAMFILES%\Exchsrvr\Mailroot)
  • Internet Mail Connector files (example: %PROGRAMFILES%\Exchsrvr\IMCData)
  • Web storage system (example: M:\ if enabled)
Below are the exclusion folders of Exchange Server 2007:
  • Exchange databases and log files (this could be located anywhere in any disk).
  • Exchange Transport role data. (example: %Program Files%\Microsoft\Exchange Server\TransportRoles\Pickup|D:\Program Files\Microsoft\Exchange Server\TransportRoles\data\IpFilter|D:\Program Files\Microsoft\Exchange Server\TransportRoles\data\Queue|%Program Files%\Microsoft\Exchange Server\TransportRoles\data\Temp)
  • Exchange Messaging Tracking logs. (example: %Program Files%\Microsoft\Exchange Server\TransportRoles\Logs\MessageTracking)
By default, when the SA is installed on an Exchange Server (2000 or above), it will not scan Exchange databases and log files, virtual server folders, and the M drive.
Below is the exclusion list for the Exchange Server:
[ Expand All ]

 

WFBS 6.0 and below

The exclusion list is saved in this registry hive:
For 32-bit: HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Real time Scan Configuration
For 64-bit: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\TrendMicro\PC-cillinNTCorp\CurrentVersion\Real time Scan Configuration
Exchange 2000/2003:
  • ExcludeFile=C:\Program Files\Exchsrvr\mdbdata\priv1.stm|C:\Program Files\Exchsrvr\mdbdata\priv1.edb|C:\Program Files\Exchsrvr\mdbdata\pub1.stm|C:\Program Files\Exchsrvr\mdbdata\pub1.edb
  • ExcludeFolder=C:\Program Files\Exchsrvr\mdbdata\|C:\Program Files\Exchsrvr\Mailroot\vsi 1\Queue\|C:\Program Files\Exchsrvr\Mailroot\vsi 1\PickUp\|C:\Program Files\Exchsrvr\Mailroot\vsi 1\BadMail\|M:\
Exchange 2007:
  • ExcludeFile=D:\Program Files\Microsoft\Exchange Server\Mailbox\First Storage Group\Mailbox Database.edb
  • ExcludeFolder=D:\Program Files\Microsoft\Exchange Server\Mailbox\First Storage Group|D:\Program Files\Microsoft\Exchange Server\TransportRoles\Pickup|D:\Program Files\Microsoft\Exchange Server\TransportRoles\data\IpFilter|D:\Program Files\Microsoft\Exchange Server\TransportRoles\data\Queue|D:\Program Files\Microsoft\Exchange Server\TransportRoles\data\Temp|D:\Program Files\Microsoft\Exchange Server\TransportRoles\Logs\MessageTracking
Exchange 2010:
Note: WFBS 6.0 does not support Exchange 2010.

 

WFBS 7.0

The exclusion list is saved in this registry hive:
For 32-bit: HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\UniClient\1600\Scan\Real Time
For 64-bit: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\TrendMicro\UniClient\1600\Scan\Real Time
Exchange 2000/2003:
  • ExchangeExcludedFile=C:\Program Files\Exchsrvr\mdbdata\priv1.stm|C:\Program Files\Exchsrvr\mdbdata\priv1.edb|C:\Program Files\Exchsrvr\mdbdata\pub1.stm|C:\Program Files\Exchsrvr\mdbdata\pub1.edb
  • ExchangeExcludedFolder=C:\Program Files\Exchsrvr\mdbdata\|C:\Program Files\Exchsrvr\Mailroot\vsi 1\Queue\|C:\Program Files\Exchsrvr\Mailroot\vsi 1\PickUp\|C:\Program Files\Exchsrvr\Mailroot\vsi 1\BadMail\|M:\
Exchange 2007:
  • ExchangeExcludedFile=D:\Program Files\Microsoft\Exchange Server\Mailbox\First Storage Group\Mailbox Database.edb
  • ExchangeExcludedFolder=D:\Program Files\Microsoft\Exchange Server\Mailbox\First Storage Group|D:\Program Files\Microsoft\Exchange Server\TransportRoles\Pickup|D:\Program Files\Microsoft\Exchange Server\TransportRoles\data\IpFilter|D:\Program Files\Microsoft\Exchange Server\TransportRoles\data\Queue|D:\Program Files\Microsoft\Exchange Server\TransportRoles\data\Temp|D:\Program Files\Microsoft\Exchange Server\TransportRoles\Logs\MessageTracking
Exchange 2010:
  • ExchangeExcludedFile=C:\Program Files\Microsoft\Exchange Server\V14\Mailbox\Public Folder Database 2013435852\Public Folder Database 2013435852.edb|C:\Program Files\Microsoft\Exchange Server\V14\Mailbox\Mailbox Database\Mailbox Database.edb
  • ExchangeExcludedFolder=C:\Program Files\Microsoft\Exchange Server\V14\TransportRoles\Pickup|C:\Program Files\Microsoft\Exchange Server\V14\TransportRoles\data\IpFilter|C:\Program Files\Microsoft\Exchange Server\V14\TransportRoles\data\Queue|C:\Program Files\Microsoft\Exchange Server\V14\TransportRoles\data\Temp|C:\Program Files\Microsoft\Exchange Server\V14\TransportRoles\Logs\MessageTracking

 

WFBS 8.0

The exclusion list is saved in this registry hive:
For 32-bit: HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Real time Scan Configuration
For 64-bit: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\TrendMicro\PC-cillinNTCorp\CurrentVersion\Real time Scan Configuration
Exchange 2000/2003:
  • ExcludeFile=C:\Program Files\Exchsrvr\mdbdata\priv1.stm|C:\Program Files\Exchsrvr\mdbdata\priv1.edb|C:\Program Files\Exchsrvr\mdbdata\pub1.stm|C:\Program Files\Exchsrvr\mdbdata\pub1.edb
  • ExcludeFolder=C:\Program Files\Exchsrvr\mdbdata\|C:\Program Files\Exchsrvr\Mailroot\vsi 1\Queue\|C:\Program Files\Exchsrvr\Mailroot\vsi 1\PickUp\|C:\Program Files\Exchsrvr\Mailroot\vsi 1\BadMail\|M:\
Exchange 2007:
  • ExcludeFile=D:\Program Files\Microsoft\Exchange Server\Mailbox\First Storage Group\Mailbox Database.edb
  • ExcludeFolder=D:\Program Files\Microsoft\Exchange Server\Mailbox\First Storage Group|D:\Program Files\Microsoft\Exchange Server\TransportRoles\Pickup|D:\Program Files\Microsoft\Exchange Server\TransportRoles\data\IpFilter|D:\Program Files\Microsoft\Exchange Server\TransportRoles\data\Queue|D:\Program Files\Microsoft\Exchange Server\TransportRoles\data\Temp|D:\Program Files\Microsoft\Exchange Server\TransportRoles\Logs\MessageTracking
Exchange 2010:
  • ExchangeExcludedFile=C:\Program Files\Microsoft\Exchange Server\V14\Mailbox\Public Folder Database 2013435852\Public Folder Database 2013435852.edb|C:\Program Files\Microsoft\Exchange Server\V14\Mailbox\Mailbox Database\Mailbox Database.edb
  • ExchangeExcludedFolder=C:\Program Files\Microsoft\Exchange Server\V14\TransportRoles\Pickup|C:\Program Files\Microsoft\Exchange Server\V14\TransportRoles\data\IpFilter|C:\Program Files\Microsoft\Exchange Server\V14\TransportRoles\data\Queue|C:\Program Files\Microsoft\Exchange Server\V14\TransportRoles\data\Temp|C:\Program Files\Microsoft\Exchange Server\V14\TransportRoles\Logs\MessageTracking
For other Microsoft recommended folders, add them to the scan exclusion list manually. For more information, see this Microsoft article: Recommendations for troubleshooting an Exchange Server computer with antivirus software installed.


Rate this Solution
Did this article help you?

Please provide your comments to help us improve this solution.

 
  *This form is an automated system. General questions, technical, sales and product-related issues submitted through this form will not be answered.
 
 

Connect with us on