Loading...

Knowledge Center


How to use wildcards when creating exclusions in VirusScan Enterprise 8.x or MOVE AV Multi-Platform
Technical Articles ID:   KB54812
Last Modified:  10/18/2016
Rated:


Environment

McAfee Management for Optimized Virtual Environments (MOVE)
McAfee MOVE AntiVirus (AV) Multi-Platform 4.x, 3.6.x
McAfee VirusScan Enterprise (VSE) 8.x

For details of MOVE supported environments, see KB74865.
For details of VSE 8.x supported environments, see KB51111.

Summary

This article explains the rules for using wildcards when creating exclusions with VSE or MOVE AV Multi-Platform.

Solution

Excluding all files of a particular extension

When excluding all files of a particular extension, use the option to exclude files by Type and specify the desired extension.

To set an exclusion:
  1. Right-click the VirusScan Enterprise icon in the system tray and select VirusScan Console.
     
    or
     
    Select Start, Programs, McAfee, VirusScan Console.
     
  2. Double-click On-Access Scanner.
  3. Select All Processes.
  4. Click the Detection tab.
  5. Select Exclusions.
  6. Select Add.
  7. Add the relevant exclusion.
  8. Click OK three times to exit the On-Access Scanner.
  9. Close the VirusScan Console screen. 

Solution

Using wildcards when creating exclusions
Wildcards (**,*, ?) are helpful in creating exclusions for VSE, but certain rules apply (see examples below).
  • The ? wildcard is used to represent a single character in the exact position where it is placed in the path or file name.
     
  • The * wildcard is used to represent partial filenames or extensions with one or more characters from the exact position where it is placed in the path \ file given.
     
  • The ** wildcard is generally used for (partial) filenames or extensions with one or more characters from the exact position where it is placed in the path \ file given.
     
  • System Environmental Variables such as %SystemRoot% can be used in exclusions. User Environmental Variables such as %UserProfile% cannot because the On‑Access scanner runs under the Windows Local System account.
Wildcard Examples

 
Example Comments
**\Temp\test.docx

Exclude a specific file in a folder named Temp anywhere on the system. 

**\test.docx
Exclude a specific file anywhere on the system.
<Drive:>\**\test.docx
Exclude a specific file in any folder on a specific drive.
Users\**\Documents\Microsoft User Data\ 
Exclude any folder under Users and any folder under User Data (select also exclude subfolders).
C:\Documents and Settings\**\Favorites\
Exclude the Favorites folder for all users.
C:\**\Favorites\
Exclude any folder named Favorites on drive C.
**\Temp\**
Exclude the Temp folder in any location, on any drive.

In this example the following directories would be excluded:
  • C:\temp
  • D:\windows\temp
  • c:\documents and settings\Administrator\Local Settings\temp
**\Temp\*.tmp
Exclude any file with a .tmp extension in a folder named Temp anywhere on the system.
**\*.html
Exclude any file with a .html extension anywhere on the system.
C:\Windows\Temp*\inifile?.*
Exclude all files named inifileX (where X is any valid character for a file name) within any folder name beginning with Temp under C:\Windows.
<drive:>\**\*.tmp
Exclude all files with the tmp extension (*.tmp) in any folder on a specific drive.
 
In this example any *.tmp files on the D: drive will be excluded:
 
D:\**\*.tmp
 
 
To set an exclusion:
  1. Right-click the VirusScan Enterprise icon in the system tray and select VirusScan Console.

    or

    Select Start, Programs, McAfee, VirusScan Console.
  2. Double-click On-Access Scanner.
  3. Select All Processes.
  4. Click the Detection tab.
  5. Select Exclusions.
  6. Select Add.
  7. Add the relevant exclusion (see examples above).
  8. Click OK three times to exit the On-Access Scanner.
  9. Close the VirusScan Console screen. 
IMPORTANT: Do not select Include Subfolders when excluding a file, as this will produce incorrect results.

For additional information and examples, review the VSE 8.x Product Guide.

{GENPDOC.EN_US}

Rate this document

Did this article resolve your issue?

Please provide any comments below

Beta Translate with

Select a desired language below to translate this page.

Glossary of Technical Terms


 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.