Why should I exclude Application Control Plus folders from anti-virus scanning?

The Central Server performs various tasks from installing agents on the client computers, scanning computers and deploying policies . The anti-virus that you have installed in your network would hinder the functioning of the Central Server and agent components. This could result in various failures during agent installation, scanning the computers and policy deployment. So, it is always recommended to exclude all the folders related to Application Control Plus on the server /distribution server and agent computers. 

 

How do I exclude the folders from anti-virus scan?

You will have to exlcude the below listed files from anti-virus scan: 

The following files located under <installation drive >\Program Files\ApplicationControlPlus_Agent\bin directory:

  • cfgupdate.exe
  • dcagentregister.exe
  • dcagentservice.exe
  • dcagenttrayicon.exe
  • dcagentupgrader.exe
  • dcconfigexec.exe
  • dcmsghandler.exe
  • dcondemand.exe
  • dcpatchscan.exe
  • dcremcom.exe
  • dcstatusutil.exe
  • dctask64.exe
  • dcupload.exe
  • <installation drive >\Program Files\ApplicationControlPlus_Agent\rds\dc_rds.exe
  • <installation drive >\Program Files\ApplicationControlPlus_Agent\rds\FileTransfer\dcfiletransfer.exe
  • <installation drive >\Program Files\ApplicationControlPlus_Agent\dcconfig.exe
  • <installation directory><installation drive >\Program Files\ApplicationControlPlus_Agent\dcagent.dll

On the computer where the Central Server is installed, you should add notificationserver.exe to the exceptions list

The following .exe file names should be added to the exception list of anti-virus, for the product Distribution Server to be fully functional:

  • The following files located under <installation drive >\Program Files\ApplicationControlPlus_DistributionServer\bin directory:
    • dcagentupgrader.exe
    • dcdsinstallwizard.exe
    • dcdsservice.exe
    • dcreplication.exe
    • dc_httpd.exe

Here is an sample document, to know more excluding folders from Symantec End Point, you can refer this for more details: How to add an exception to SEP?

Note: Excluding the specific .exe files is more complex because it keeps changing over a period of time. So folders can also be added to the exclusion list, so that the specified folders are not scanned. In such cases, ensure that you need to exclude the following folders respectively.

  • Agent computers - ApplicationControlPlus_Agent
  • Application Control Plus Server - ApplicationControlPlus_Server
  • Application Control Plus Distribution Server- ApplicationControlPlus_DistributionServer

To know more about the steps to exclude the folder from Scan click here.