This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Exclude Remote Files

I have a computer in a policy that has 'exclude remote files' set under windows exceptions.  Whenever i attempt to run a 'test virus file' on a network drive, it immediately is quarantined.  why is this?  I set it to exclude remote files.  so if i run a bad file off of a network drive, then it should run yes?

if i am wrong, then what good is this setting?  as every application or file you accessfrom the network is going to be loaded locally first.

:15319


This thread was automatically locked due to age.
Parents
  • It appears to me that the exclude remote files doesn't work on mapped drives.  Neither does excluding them.  What's odd is that i entered the exclusion on the mapped drive, but it detected it via UNC.  but then denied location is a mapped drive.  I also also told the policy to exclude the UNC path as well, it finds the virus no matter what.

    20110804 130235 Virus/spyware 'EICAR-AV-Test' has been detected in "\\FS-1\FS-1_E\N-Drive\Apps\MAS_90\eicar.com". Cleanup unavailable.
    20110804 130235 On-access scanner has denied access to location "N:\Apps\MAS_90\eicar.com" for user domain\username      (79 items)

    :15335
Reply
  • It appears to me that the exclude remote files doesn't work on mapped drives.  Neither does excluding them.  What's odd is that i entered the exclusion on the mapped drive, but it detected it via UNC.  but then denied location is a mapped drive.  I also also told the policy to exclude the UNC path as well, it finds the virus no matter what.

    20110804 130235 Virus/spyware 'EICAR-AV-Test' has been detected in "\\FS-1\FS-1_E\N-Drive\Apps\MAS_90\eicar.com". Cleanup unavailable.
    20110804 130235 On-access scanner has denied access to location "N:\Apps\MAS_90\eicar.com" for user domain\username      (79 items)

    :15335
Children
No Data