1 Reply Latest reply on Jan 19, 2009 9:30 AM by TekNoFear

    EPO4.0 - exclusions for on demand scan

      Dear

      I have setup epo4.0 (patch 3) with 100 VSE8.5i clients on a Win2008Std server. I have created an on demand scan with some exlusions which I found in this forum as well.

      exclusions:
      c:\program files\McAfee\Common Framework + subfolders
      c:\Program Files\Common Files\McAfee\Engine + subfolders
      c:\documents and settings\all users\application data\mcafee\common framework + subfolders
      c:\windows\prefetch + subfolders
      c:\config.msi
      c:\windows\installer + subfolders

      In the report I get after the clients are scanned I still find logs from folders that are included in the exclusion list:

      Malware virus PC800140 172.16.0.140 C:\Program Files\Common Files\McAfee\Engine\avvclean.dat

      Malware virus PC800140 172.16.0.140 C:\Documents and Settings\All Users\Application Data\McAfee\Common
      Framework\Db\Agent_PC800140.xml

      I have recreated the scan task but the same thing is happening afterwards. the policys are well communicated via the agents, I checked it.

      Another strange thing is when I go back to the list with exclusion, the epo console has put extra '\' in the list:

      example:
      c:\\\\\\\\\\\\\\\\Program Files\\\\\\\\\\\\\\\\McAfee\\\\\\\\\\\\\\\\Common Framework
      c:\\\\\\\\\\\\\\\\windows\\\\\\\\\\\\\\\\prefetch

      Deleting them makes no sense as the '\' return.

      Any input is welcome

      Kind Regards

      Bert