Excluded objects - variables and F-SECURE\COMMON\ALERTS\ scan errors

alsimmo

Hi,

 

As per subject line, I have several questions.  I'm sure I already know the answers but seeking confirmation on this.

 

The first is are wild card values ok to add in PM as excluded objects i.e. %APPDATA% or %ALLUSERSPROFILE%? 

 

Is the use of wild card exceptible such as C:\Program Files (x86)\Common Files\*.tmp for example?  In addition, if I exclude a folder is it represented as C:\Program Files (x86)\Common Files or C:\Program Files (x86)\Common Files\* or something else? 

 

Lastly, I frequently have scanning errors on a number of servers - 'An error occurred while scanning \DEVICE\HARDDISKVOLUME12\PROGRAM FILES (X86)\F-SECURE\COMMON\ALERTS\A555.TMP'.  Should this folder be excluded from real-time scanning too?

 

Thanks in advance for your time.

 

Regards,

 

Al

Ben

Hello Alsimmo,

 

Concerning your questions about wild cards, you should find answers in the following KB.

http://community.f-secure.com/t5/End-point/Using-wildcards-in-exclusions/ta-p/20428

 

For the scanning errors, our support might need to take a look at the logs on the machine to figure out what is going on.

Please kindly proceed to open a support ticket and provide a fsdiag at the same time.

 

 

Thank you

Dmitriy

Hi,

 

Regarding scanning errors you see with TMP files under PROGRAM FILES (X86)\F-SECURE\COMMON\ALERTS, this problem should be fixed in new versions of Client and Server Security products that will be released before the end of this year. Nevertheless, you can open a support ticket and request a hotfix if the problem is critical for you.

 

alsimmo

Hi Dmitriy and Ben,

 

Thanks for your reply.

 

What is the best way to define generic exclusions where HARDDISKVOLUMES may be different for real-time scanning?  Also, is there a way to find out what drives are defined as DEVICE\HARDDISKVOLUME1 or \DEVICE\HARDDISKVOLUME2\? 

 

I'm also thinking how I would exclude, say e:\reporting, if the HARDDISKVOLUME is the same as the c:\ drive?  I know the chances are small but has does this work?

 

Thanks,

Al

Dmitriy

Hi,

 

You can use wildcards (* or ?) when making exclusions with device names (i.e. DEVICE\HARDDISKVOLUME*). Please check the following posts for more details:

 

http://community.f-secure.com/t5/End-point/Exclusion-of-directories-using/m-p/5545
http://community.f-secure.com/t5/End-point/Using-wildcards-in-exclusions/ta-p/20428

 

Hope this helps.