# Antivirus Exclusions for Windows

To ensure stable, optimal performance for your Commvault access nodes, you must exclude certain folders and files from antivirus read, write, and scan processes.

Improperly configured antivirus exclusions can cause outages of applications and services due to contention or file locking. For example, antivirus software might lock the collect files that are generated during a backup. Also, most virus-scanning applications use real-time scanning, which can degrade performance or cause failures during Commvault backups and other operations.

Test Commvault features and functions to ensure compatibility with antivirus software. During regular operations, monitor Commvault processes and their interactions with the antivirus software. Work with your antivirus vendor to properly configure and tune the antivirus settings. Ensure that antivirus rules and schedules do not interfere with Commvault operations, allowing all tasks to run and complete successfully.

The information provided is not a complete list of exclusions because the Commvault software might change with updates and new releases.

Important

- Make sure that no scheduled or on-demand antivirus scans run during Commvault backups.

- Degraded backup performance and unknown backup failures might be caused by host intrusion prevention systems (HIPS).

- If you experience performance and consistency problems with SQL Server when certain modules are loaded into the server, see Microsoft KB 2033238.

## Exclusions to Implement

### CommServe, Client, and MediaAgent Installation Paths

Paths to exclude | File extensions to exclude
--- | ---
software_installation_path\Microsoft.NET\Framework64\<version>\Temporary ASP.NET Files\dm2websvc | None
software_installation_path\Commvault | None
C:\ProgramData\Commvault Systems | None
Updates Cache (SoftwareCache) folder with CVPackages and CVUpdates subfolders on the CommServe server | None
DR backup set (CS_DR) folders on the CommServe server | None
Job Results folder | None
Index Cache folder | .al .bmp.7z.cfg .cmt .conf .csv .cvf .cvf.7z .cvf.rfczip .dat .dbinfo .dblog .dbviewprops .dirty .dbs .fcs .fct .idx .info .lic .livelogprops .txt .xml *locks*

### Additional MediaAgent Paths

Paths to exclude | File extensions to exclude
--- | ---
Disk libraries (CV_MAGNETIC folder) Note If you use a UNC path to access the magnetic libraries, exclude the UNC path as well. | *.bak *CHUNK* *.compact2 *.csivolume *.idx *MEDIA* *.prunable *SFILE* *.xml
Deduplication engines (CV_SIDB folder) | *.cfg *.csv *.dbinfo *.dbLog *.dbViewProps *.lic *.FCS.* *.lck *.FCT *.dat *.idx *.xml ZRJournal.*

### Virtual Server Agent

- VMware VDDK (vmware-SYSTEM folder)

### SharePoint Agent

- Temp folder (for example, C:\Users\Commvault Services account\AppData\Local\Temp)

### Content Indexing and Search

- The entire CI Engine install folders (CIServer and CVCIEngine folders)

- Solr folder

- CI Index folder

- Web Server Cache folder

  (HKEY_LOCAL_MACHINE\SOFTWARE\Commvault\Galaxy\Instance001\DM2WebSearchServer\sZCACHEDATAFILESPATH)

### Outlook Add-In with ContentStore Email Viewer

On computers where the Outlook Add-In with ContentStore is installed, exclude the following folders:

- C:\ProgramData\SoftwareCache\

- C:\Program Files\CVArchiverAddin or C:\Program Files (x86)\CVArchiverAddin

- %appdata%\CVProvider

- If the LITE mode cache location is a shared location, exclude the UNC path of the cache

### ContinuousDataReplicator

- CDR Replication Logs folder

### CommCell Consoles

The following executables and folders are used by the stand-alone CommCell console, the web-browser CommCell Console, and any workstations that access either version of the CommCell Console. If the executables and folders are scanned by the antivirus software, it might cause some problems with the CommCell Console.

- java.exe: Verify that the antivirus software does not lock this file.

- javaw.exe: Verify that the antivirus software does not lock this file.

## Commvault Executables

3dnfsd.exe ACSLSTool.exe ADBackup.exe ADCreateIndex.exe AddPrePostDriveCmd.exe AddScriptToShutdownGPO.exe adLdapTool.exe AdMailboxMonitor.exe ADRestore.exe AppMgrSvc.exe archiveIndex.exe ArchiveMgrViewer.exe ArchPrune.exe ArmTool.exe AuthorUtil.exe AuxCopy.exe AuxCopyMgr.exe backint.exe BlindMediaInventory.exe BLKWinSetup.exe BlockRestore.exe BlrSvc.exe bootsect.exe CaCertUtility.exe CatalogMigration.exe CCMManager.exe CDRCLI.exe CDRControl.exe CDRControlXP.exe CDRXHelp.exe CLAFRestore.exe CLBackup.exe clBackupXP.exe ClDB2Agent.exe ClDbArchive.exe ClDBControlAgent.exe CLDBengine.exe ClDctmAgent.exe ClDctmFTIBackup.exe ClDctmScan.exe CLIFRestore.exe ClIFXAgent.exe ClMgrS.exe ClOraAgent.exe CloudChunkRecall.exe CloudStorageExplorer.exe CloudTestTool.exe CLReboot.exe CLRestore.exe CLSAPAgent.exe CLSybAgent150.exe CLSybBrowse150.exe ClSybBrowseAgent.exe ClSybDirect.exe CommServeDR.exe CommservSurveyQueryUpgrade.exe CommServSurveyTool.exe ConfigureClientTool.exe ConfigureObjectStore.exe ConfigureProxyContentStore.exe CreateExchangeProfileAgent.exe CreateIndex.exe CreateMountPathLabel.exe CreateVirtualLink.exe CSERBackup.exe CSRecoveryAssistant.exe curl.exe cv-helm.exe cv7z.exe cvaadbackup.exe cvaadrestore.exe CvAADUtil.exe cvadbutil.exe CVAddSiteAdmin.exe CvAdUtil.exe cvApplyLanguagePacks.exe CvAppMgrAccessControlTest.exe CvAWSRDSAgent.exe CvAzureAccountGenerator.exe CVAzureADCustomConfigHelper.exe CVAzureIntegrationMessages.exe CVAzurePerfTool.exe CvBfmAgent.exe CVBlkLevelBackup.exe cvBlrDrvInstall.exe CvBlrVMBoot.exe CVBmrDeploy.exe CVCacheSet.exe CvCalcEncDataSize.exe CVCBTInstaller.exe CVChunkLister.exe CVCIAnalytics.exe cvcl_test.exe cvcl_ver.exe CvCloudBackupCoordinator.exe CVCloudBkp.exe CvCloudBkpController.exe CVCloudBkpNew.exe CvCloudCoordinator.exe CVCloudDiscover.exe cvclouddiscoverv2.exe CvCloudInterface.exe CvCloudPermissionsReport.exe CVCloudRst.exe CvCloudRstController.exe CvCloudRstCoordinator.exe CVCloudRstNew.exe CVClusterNotify.exe CvContentStoreSync.exe CVConvertUnicode.exe CvCosmosDB.exe CVCRCTool.exe cvd.exe cvd365backup.exe cvd365bkpcontroller.exe cvd365bkpcoordinator.exe CVD365CustomConfigHelper.exe cvd365restore.exe CvD365RstController.exe cvDBUpgradeWrapper.exe CVDeviceLink.exe CvDiagnostics.exe CVDiskEraser.exe CVDiskPerf.exe CvDistributedSystemMgr.exe CVDistributor.exe CVDOTNET4GAC.exe CvDynamoDB.exe CVEdgeDriveAddinConfigBuilder.exe CvEdgeMonitor.exe CvExAutomatedTask.exe CvExchDatabaseRestore.exe CvExchDbRestoreCoordinator.exe CVExCheckReadiness.exe CVExchMetadataCalculator.exe CVExchSnapBackup.exe CVExDiscover.exe CVExIdxSync.exe CVExIdxSyncCoordinator.exe CvExLiveUpdateBkp.exe CVExportSearchResults.exe CVExpPluginRegSvr.exe CVExSysDiscoveryUI.exe cvextractor.exe CvFailover.exe CvFileCrawler.exe CvFileDiff.exe CVFileScan.exe CVFLRCopyBack.exe CVForeignHandler.exe CvFsBlrApp.exe CVFSSnap.exe cvfw_stats.exe cvfwCLI.exe cvfwd.exe cvfwd_test_clnt.exe cvfwd_test_svc.exe cvfwgen.exe CVGACUtil.exe CVGACUtil40.exe CVGrpcCppSharpService.exe CVIndexCopy.exe CVIndexCopyCoordinator.exe CVInstallDokany.exe CvInstaller.exe CVInstallPrereqPackages.exe CVInstallThirdParty.exe CvInstallUpdatesAddin.exe CVSPOfflineMiningRestore2013.exe CVSPRBSInstallTool.exe CVSPRBSMigrator.exe CVSPRBSMigrator2013.exe CVSPRestore.exe CVSPRestore2013.exe CVSPScan.exe CVSPScan2013.exe CVSPTester.exe CVSPWCPowerRestore.exe CVSPWebPartInstaller.exe CVSPWebPartInstaller2013.exe CVSPWebPartInstallerLauncher.exe CvSQLAddInConfig.exe CvSQLAlias.exe CvSQLBackupProxy.exe CvSQLBackupUtility.exe CVSQLDBArchive.exe CVSQLDBBackup.exe CvSqlLogBackupUtility.exe CvSQLRestore.exe CvSQLRestoreProxy.exe CvSQLStudioConfig.exe CvSSMSAddinConfig.exe CVSVCStat.exe CvSyncProxy.exe CVSystemTray.exe CVTeamsBackup.exe CVTeamsBackupCoordinator.exe | CVTeamsRestore.exe CVTeamsRestoreCoordinator.exe cvTerraformProvider.exe CVUninstaller.exe CvVDSConfig.exe CVVDTool.exe cvVerifyArchive.exe CVVersion.exe CVVICleanup.exe CVVIRestore.exe CVVMChecksum.exe CVVMCommands.exe CVVMHeartbeatUtils.exe CVVMwareCBTUtil.exe CVVMwareSnapshotUtil.exe CVVSCatalog.exe CVVSCatalogDisc.exe CVvsdr.exe cvvsp2v.exe CVVSSnap.exe DagIndexing.exe DatabaseUpgrade.exe Db2CmdProc.exe DB2uext2.exe DBMaintenance.exe DBMinePrep.exe DBMineTool.exe DbUpgradeReport.exe DBUpgradeUI.exe dcmj2pnm.exe DDBCustomRestoreMgr.exe DirServersOfflineRestore.exe DiscoverClients.exe DiskArrayConfig.exe DistributeUpdates.exe DlpRecaller.exe DM2DBMigrator.exe DM2DBOperation.exe DM2ExMBRestore.exe DM2Install.exe DM2LNDocRestore.exe DM2LnExRestore.exe DM2SPDocRestore.exe dm2updatehandler.exe DM2ZipFiles.exe DMRExPubRestore.exe DMRExRestore.exe DownloadCenterUpgrade.exe DownloadUpdates.exe DriverInstaller.exe DRRestore.exe DynCache.exe DynCacheInstaller.exe EDCFileLevelAnalytics.exe EdgeUploader.exe EmailDataParser.exe EvMgrs.exe ex2000DbStartRestore.exe Ex2KMBDMStartRestore.exe Ex2kPubStartBackup.exe ExArcArchiving.exe ExArcCreateIndex.exe ExArcMonitor.exe ExchangeOnePassIdxGUI.exe ExchBackup.exe ExchBackupShadow.exe ExchBrowse.exe ExchDiscover.exe ExchRestore.exe ExchRestoreShadow.exe ExDBBackupShadow.exe exDbIFRestore.exe exDBStartBackup.exe exDbStartRestore.exe ExDBVSSRestore.exe ExIntegCheck.exe exmbcreateindex.exe ExMBUtility.exe ExMiningAgent.exe ExportToPdf.exe ExPubBackup.exe ExPubbackupshadow.exe ExPubClientBrowse.exe ExPubCreateIndex.exe ExPubDMArchiving.exe ExPubDMCreateIndex.exe ExPubRestore.exe ExPubRestoreShadow.exe expubstartbackup.exe ExSysDiscoveryWrapper.exe exTiDbBackup.exe ExTiDBDiscover.exe exTiDbRestore.exe ExTiMBDMArchiving.exe ExTiMBstartBackup.exe ExTiPubStartBackup.exe FailOverSetup.exe FDCMgr.exe FindMailbox.exe FLRSnapTool.exe FsIndexedRestore.exe fsStartIfind.exe FSVSSRestore.exe gacutil.exe GenProcessModuleInfo.exe GenProcessModuleInfo32.exe getBackupList.exe GetExchangeStoreList.exe GetMntVolFreeSpace.exe GxAdmin.exe GXDCRemove.exe GXHSMPopup.exe GXHSMSelDel.exe GXHSMStartRestore.exe GXHSMStub.exe GXHSMUtility.exe GxKill.exe GxSplash.exe GxSQL.exe GxSQLCmd.exe GxTail.exe GxWinClusterPlugin.exe IdxCLI.exe IdxGUI.exe idxlabelutil.exe IFind.exe IMAPGateway.exe IMAPGatewayService.exe ImgFileLvlRestore.exe IndexCacheView.exe IndexCheckPoint.exe IndexingService.exe indexRestore.exe InstallHelper.exe InstallUpdates.exe JetMapiHelper.exe JetMapiHelperEx.exe JobMgr.exe KMIPClient.exe LaunchInstaller.exe LibraryServerCLITool.exe LibraryTool.exe ListFilesForJob.exe ln6dbBackup.exe ln6dbDiscover.exe ln6dbifind.exe ln6dbRestore.exe ln6dbRestoreLogs.exe LN6PartitionDiscover.exe lndbcheck.exe lndbClbackup.exe lndbClRestore.exe lndbClRestoreLogs.exe lndbCmdChild.exe LNDBiDAOSC.exe lndbIfind.exe lndbRestore.exe lndbRestoreLogs.exe lndbSnapBackup.exe lndbSnapRestore.exe lnDiscover.exe lnDMBackup.exe lnDMDiscover.exe lnDMIfind.exe LNDMPredictorTool.exe lnDMRestore.exe lnDMStub.exe lndocClBackup.exe LNDocCLRestore.exe lndocDiscover.exe lndocIfind.exe lndocRestore.exe lndocViewDiscover.exe lnExRestore.exe lnPartitionDiscover.exe LNXMLViewer.exe LogMonitorControlProcess.exe LogMonitoring.exe LREPCoordinator.exe LREPTest.exe MailboxCleanup.exe ManualPrefetchTapes.exe mcvcbtcmd.exe MediaLabelReader.exe MediaManager.exe MFSJCleanup.exe MigrateRestoredFiles.exe MigrateToEdge.exe MigrationAssistant.exe MonadCCRProxy.exe MongoInstallDetails.exe MoveDDBClientCacheClient.exe MoveDDBClientCacheServer.exe MoveDir.exe MsgToEml.exe | MSIRemoveOrphanedRegKeys.exe msmb2000startBackup.exe msmbstartBackup.exe MySqlBackup.exe MySqlBrowseAgent.exe MySqlIfind.exe MySqlLogBackup.exe MySqlLogRestore.exe MySqlRestore.exe MySQLStartRestore.exe NasBackup.exe NasCreateIndex.exe NasRestore.exe NASSystemDiscovery.exe ndmplisten.exe NotesRecaller.exe OneTchUtl.exe OneTouch.exe PassPhraseTool.exe pdftohtml.exe pdftotext.exe PostGresBackup.exe PostGresIfind.exe PostGresLogBackup.exe PostgresLogRestore.exe PostgreSQLBrowseAgent.exe PostGresRestore.exe Predict.exe prePopulateEvents.exe PreScanProxy.exe PruneDM2Cache.exe PseudoMountClient.exe PSTDiscovery.exe PSTDiscoveryGui.exe puttygen.exe QCreate.exe QCURL.exe QDelete.exe QDrive.exe QGetErrorString.exe QInfo.exe QInstaller.exe QLibrary.exe QList.exe QLogin.exe QLogout.exe QMedia.exe QModify.exe QOperation.exe QSDK.exe QST2.exe QUninstallAll.exe QUninstaller.exe regEvMgrsWithAD.exe RemoveUpdates.exe restoreClusterDb.exe ReviewSetMigrator.exe SaveMergeBitmap.exe ScanIndex.exe ScanScsiTool.exe scheduledReport.exe ScsiCmdTool.exe SelDelete.exe sendLogFiles.exe SetPreImagedNames.exe Setup.exe SetupCacheCmdLine.exe sharePointDbStartRestore.exe SIDB2.exe sidb2_90.exe SILODB.exe SIMCallWrapper.exe SMTPGateway.exe SnapManagementTool.exe SnapOSInterface.exe SnapRegistrationTool.exe SnapTest.exe SP2k3DocBackup.exe SP2k3DocCreateIndex.exe SP2k3DocRestore.exe SPDBBackup.exe SPDBIFind.exe SPDDConfigCollectFileReader.exe SPDocOfflineRestore.exe SProvConvertXML.exe SPV2DbDiscover.exe SPV2DBStartRestore.exe SQLBackup.exe SQLBackupMaster.exe SQLVSSRestore.exe SrvDb2Agent.exe SrvDctmRestore.exe SrvIfxAgent.exe SrvOraAgent.exe SrvSybAgent.exe StartIFRestore.exe StartPrePostCmd.exe StartupGui.exe StartupGUIPreStart.exe StubRecaller.exe synthfull.exe TapeTool.exe TapeToolGui.exe TestVMInfo.exe TP_RPackage.exe unzip.exe UpdateADGroupMailId.exe UpdateCVProfile.exe UpdateIndex.exe UpdateNotificationCenter.exe UpdateServerXml.exe UserPasswordUpdate.exe UserRecoveryTool.exe UUIDgen.exe Verify_ServiceAccount.exe VirtualLibraryTool.exe VMFSSanInfo.exe vmheartbeatmon.exe VMManagement.exe VMWareSnapRestore.exe VSAAppAwareInstall.exe VSAApplicationBackupCopy.exe VSAAppNotifier.exe vsAppComplete.exe vsbkp.exe VSDisc.exe vsrst.exe VSS_HWPROV_SVC.exe VSS_SWProv_Svc.exe VSSynthFull.exe vStorageDiskRead.exe vsvrst.exe W2DBStartRestore.exe wimserv.exe winnthostid.exe WinPETaskBar.exe WinSysMonSetupTool.exe workflowEngine.exe xml2table.exe

## Commvault Processes

Commvault processes must be excluded from antivirus read, write, and scan processes. Legacy operating systems and antivirus software might require the names of processes to be truncated. For information, contact the vendor.

- Available Services in Commvault Version 11

- Available Services in Commvault Version 10

## Related Topics, External References

Topic | External reference
--- | ---
Microsoft recommendations on antivirus exclusion for current operating systems | Microsoft KB article 822158
Standard Microsoft recommendations for servers running SQL Server | Microsoft KB article 309422
Issues caused by antivirus software on Cluster Services that are not cluster aware | Microsoft KB article 250355
Configuring and viewing Forefront Endpoint Protection (FEP) group policy settings | Configuring and Viewing FEP Group Policy Settings
Symantec standard recommendations for servers to create exceptions | Creating Centralized Exceptions in Symantec Endpoint Protection Manager 11 Creating Exceptions Policies in the Endpoint Protection Manager
McAfee standard recommendations for servers to create exceptions | McAfee Master Article
Sophos standard recommendations for servers to create exceptions | Recommended vendor exclusions for use with Sophos products Sophos Endpoint Security and Control: Exclude Windows items from scanning Sophos Endpoint: File and folder exclusions do not work
Windows Defender scanning options Windows Defender UNC paths are not scanned by default. If you configured Windows Defender to scan UNC paths, run the Microsoft Powershell script to exclude the paths from being scanned. | Configure Microsoft Defender Antivirus scanning options

## Disclaimer

Implementing the antivirus exclusions described in this document may increase the attack vulnerability risk to computers or network by malicious users or by malware or viruses. Before making these changes, it is recommended that the attack vulnerability risks that are associated with implementing these settings be evaluated. It is up to the discretion of the reader's and their company's policies whether to implement the guidelines recommended within this document. Minor revisions and/or service packs that are released by application and operating system vendors are supported by our software. We will provide information on any known caveat for the revisions and/or service packs. In some cases, these revisions and/or service packs affect the working of our software. Changes to the behavior of our software resulting from an application or operating system revision/service pack may be beyond our control. The older releases of our software may not support the platforms supported in the current release. However, we will make every effort to correct the behavior in the current or future releases when necessary. Please contact your Software Provider for any problem with a specific application or operating system. Additional considerations regarding minimum requirements and End of Life policies from application and operating system vendors are also applicable.

×

Loading...