App Vols, Mirage, Horizon Antivirus Exclusions

 VMware App Volumes Antivirus Exclusions

On Desktops:

  • C:\Program Files (x86)\CloudVolumes
  • C:\SnapVolumesTemp

VMware Mirage Antivirus Exclusions

On the Servers:

  • Mirage Storage Volumes
  • Mirage Local Cache. This is configured during installation, but is located by default at:
  • C:\ProgramData\Wanova\Mirage\LocalCache

On Desktops:

  • Mirage Staging Area – C:\Wanova Volume Information
  • Configure these services to be white listed by the computer protection software:

On the Servers:

  • Wanova.Management.Service.exe
  • Wanova.Server.Service.exe

 On Desktops:

  • Wanova.Desktop.Service.exe


VMware Horizon Antivirus Exclusions

General Exclusions for All Windows Platforms


     •     Pagefile.sys


     •     *.pst


     •     %systemroot%\System32\Spool (replace %systemroot% with actual directory)


     •     %systemroot%\SoftwareDistribution\Datastore (replace %systemroot% with actual directory)


     •     %allusersprofile%\NTUser.pol


     •     %systemroot%\system32\GroupPolicy\registry.pol

Microsoft Active Directory Domain Controller

     •     <drive>: \ WINNT \ SYSVOL


     •     <drive>: \ WINNT \ NTDS


     •     <drive>: \ WINNT \ ntfrs


     •     <drive>: \ WINNT \ system32 \ dhcp


     •     <drive> : \ WINNT \ system32 \ dns

Microsoft IIS Server

     •     Web Server log files should be excluded from scanning. By default, IIS logs are saved in


     •     <drive>: \ WINNT \ system32 \ LogFiles


     •     <drive>: \ WINNT \ system32 \ IIS Temporary Compressed Files

Cisco CallManager

     •     Drive:\Program Files\Call Manager


     •     Drive:\Program Files\Call Manager Serviceability


     •     Drive:\Program Files\Call Manager Attendant

Microsoft SQL Server

Because scanning may hinder performance, large databases should not be scanned. Since Microsoft SQL Server databases are dynamic, exclude the directory and backup folders from the scan list. If it is necessary to scan database files, a scheduled task can be created to scan them during off-peak hours.

     •     <drive>: \ Program Files \ Microsoft SQL Server \ MSSQL \ Data


     •     <drive: \ WINNT \ Cluster (if using SQL Clustering)


     •     Q:\ (if using SQL Clustering)

Cluster Servers

     •     Q:\ (Quorum drive)


     •     C:\Windows\Cluster

Microsoft Sharepoint Portal Server

     •     <drive>: \ Program Files \ SharePoint Portal Server


     •     <drive>: \ Program Files \ Common Files \ Microsoft Shared \ Web Storage System


     •     <drive>: \ Windows \ Temp \ Frontpagetempdir


     •     M:\

Microsoft Systems Management Server (SMS)

     •     SMS \ Inboxes \ SMS_Executive Thread Name


     •     SMS_CCM \ ServiceData


     •     Microsoft Operations Manager Server (MOM)


     •     <drive>: \ Documents and Settings \ All Users \ Application Data \ Microsoft \ Microsoft


     •     Operations Manager


     •     <drive>: \ Program Files \ Microsoft Operations Manager 2005

Microsoft Internet Security and Acceleration Server (ISA)

     •     <drive>: \ Program Files \ Microsoft ISA Server \ ISALogs


     •     <drive>: \ Program Files \ Microsoft SQL Server \ MSSQL$MSFW \ Data

Microsoft Windows System Update Server (WSUS)

     •     <drive:> \ WSUS


     •     <drive:> \ WsusDatabase

Other file extension types that should be added to the exclusion list include large flat and designed files, such as VMware disk partitions. Scanning VMware partitions while attempting to access them can affect session loading performance and the ability to interact with the virtual machine.

     •     Exclusions can be configured for the directories that contain the Virtual Machines, or by excluding *.vmdk and *.vmem files.


     •     VMware View Connection Server—Java Message Bus


Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.