Exclude the Recorder from Scanning

Antivirus and anti-spyware software can cause problems for Veriato Investigator during Recorder installation on Windows and on Mac clients. To be sure the antivirus software will not quarantine or display warnings, set file and folder exclusions within the antivirus software BEFORE deploying the Recorder to Windows clients.  If you use an endpoint antivirus solution, set the exclusions to apply across the network.  Note that the file path to the system folder (shown as C:\Windows below) varies, depending on the computer.  

Follow these steps.

Check profiles for custom settings

Exclude temporary setup files

Exclude Installed Recorder files

NOTE:  For a list of the Veriato Investigator Server files to exclude, click here. For instructions on setting exceptions in McAfee, Symantec, and other popular antivirus programs, Click here.

Check profiles for custom settings

Normally, the Recorder software (for Windows OS) is installed in a single folder using fixed filenames. The files are hidden in a folder named winipbin. However, for greater security, the name of this folder can be changed (prior to Recorder installation) in the Recorder Profile (Computers | Manage Recording Profiles | General Options | Client Options).  Check each Recording Profile you plan to use. If  Use Custom Binary Subdirectory is selected and another folder name is specified, repeat the winipbin file paths below, replacing "winipbin" with your folder name.

Exclude temporary setup files

Temporary files and folders are created as the Recorder is installed. These are removed after the computer has restarted and the Recorder is fully installed. To prevent antivirus warnings and quarantines during deployment and upgrades, specify exclusions for these files BEFORE installing the Recorder.  

NOTE: If you are using a Manual Setup file to install the Recorder, add an exclusion for the location from which you run the file and the name of the executable file that you have created (such as, spsetupMAN_*.exe or MyInstallFile.exe).  

Exclude temporary files with wildcards

Files listed below containing ????? (question marks) listed below indicate the Recorder version number. Use the ? (question mark) or * (asterisk) wildcard if possible, since the version will change in the future.

For 32-bit and 64-bit systems:  

C:\Users\*\AppData\Local\Temp\coresetup.*

C:\Users\*\AppData\Local\Temp\ra.dll

C:\Users\*\AppData\Local\Temp\*\*\*\controlcenterserversetup.dll

C:\Windows\admin.exe

C:\Windows\MSVxRsc.dll

C:\Windows\spsetup.exe

C:\Windows\SPSetup64.exe

C:\Windows\SR_TmpRun.ini

C:\Windows\System32\CNECommDll.dll

C:\Windows\System32\msocxushell2.dll

C:\Windows\System32\SPClientSvc?????.exe

C:\Windows\System32\SPClientSvc?????.log

C:\Windows\SysWOW64\CNECommDll.dll

C:\Windows\SysWOW64\msocxushell2.dll

C:\Windows\SysWOW64\SPClientSvc?????.exe

C:\Windows\SysWOW64\SPClientSvc?????.log

C:\Windows\Temp\MSVxRsc.dll

C:\Windows\Temp\ra.dll

C:\Windows\Temp\*.tmp

C:\Windows\Temp\_msfile*.inf

C:\Windows\winipbin\*.*

C:\Windows\Temp\IXP00?.TMP\*.*

Exclude temporary files, no wildcards

Replace "\user\" in each case with the actual user folder name and "30679" with the version number of the client you are installing. Note that if IXP000.TMP already exists, the folder increments to IXP001.TMP.

For 32-bit and 64-bit systems:

C:\Users\user\AppData\Local\Temp\coresetup.cmp

C:\Users\user\AppData\Local\Temp\coresetup.exe

C:\Users\user\AppData\Local\Temp\ra.dll

C:\Users\user\AppData\Local\Temp\2\{5b3180e9-0c7e-4ba4-9b5a-63517e94dae1}\.ba1\controlcenterserversetup.dll

In the case of the file above, the GUID and the  "2" folder could vary.

C:\Windows\admin.exe

C:\Windows\MSVxRsc.dll

C:\Windows\spsetup.exe

C:\Windows\SPSetup64.exe

C:\Windows\SR_TmpRun.ini

C:\Windows\System32\CNECommDll.dll

C:\Windows\System32\msocxushell2.dll

C:\Windows\System32\SPClientSvc30679.exe

C:\Windows\System32\SPClientSvc30679.log

C:\Windows\SysWOW64\CNECommDll.dll

C:\Windows\SysWOW64\msocxushell2.dll

C:\Windows\SysWOW64\SPClientSvc30679.exe

C:\Windows\SysWOW64\SPClientSvc30679.log

C:\Windows\Temp\MSVxRsc.dll

C:\Windows\Temp\ra.dll

C:\Windows\Temp\IXP000.TMP\Client360ProxyX64.dll

C:\Windows\Temp\IXP000.TMP\Client360ProxyX86.dll

C:\Windows\Temp\IXP000.TMP\clntinsthlp.exe

C:\Windows\TEMP\IXP000.TMP\clntinsthlp4.exe

C:\Windows\Temp\IXP000.TMP\clntprxyio.dll

C:\Windows\Temp\IXP000.TMP\install.vbs

C:\Windows\Temp\IXP000.TMP\notifier.exe

C:\Windows\Temp\IXP000.TMP\popup.bmp

C:\Windows\TEMP\IXP000.TMP\spsetup.exe

C:\Windows\Temp\IXP000.TMP\vcredist_x64.exe

C:\Windows\Temp\IXP000.TMP\vcredist_x86.exe

Exclude Installed Recorder files

If your antivirus software allows it, exclude the single folder installed by Veriato Investigator.

*\winipbin\*  or

C:\Windows\winipbin\*

Exclude installed files with wildcards

For 32-bit and 64-bit systems:

C:\Windows\Logs\Splog.log

C:\Windows\winipbin\*.*

Exclude installed files, no wildcards

For 32-bit and 64-bit systems, the following files

C:\Windows\Logs\Splog.log

 These files are installed in the hidden client installation folder "winipbin" (or as specified in the Recording Profile). The *.1 files appear temporarily when a client is reinstalled.  

C:\Windows\winipbin\bissima.dll

C:\Windows\winipbin\bissima.dll.1

C:\Windows\winipbin\bissimo.dll

C:\Windows\winipbin\bissimo.dll.1

C:\Windows\winipbin\clntprxy.dll

C:\Windows\winipbin\clntprxyio.dll

C:\Windows\winipbin\clntprxfr.dll

C:\Windows\winipbin\cmproxfr.dll

C:\Windows\winipbin\cmproxfr.dll.1

C:\Windows\winipbin\eanipw.dll

C:\Windows\winipbin\eanipw.dll.1

C:\Windows\winipbin\imepulib32.dll

C:\Windows\winipbin\mossimo.dll

C:\Windows\winipbin\mossimo.dll.1

C:\Windows\winipbin\mxcrsc32.exe

C:\Windows\winipbin\mxcrsc32.exe.1

C:\Windows\winipbin\mzsyk32.dll

C:\Windows\winipbin\quasima.dll

C:\Windows\winipbin\quasima.dll.1

C:\Windows\winipbin\quasimo.dll

C:\Windows\winipbin\quasimo.dll.1

C:\Windows\winipbin\rcxaemap.dll

C:\Windows\winipbin\rcxaemap.dll.1

C:\Windows\winipbin\secadtr.dll  

C:\Windows\winipbin\secadtr.dll.1

C:\Windows\winipbin\sgvrfy32.exe

C:\Windows\winipbin\sgvrfy32.exe.1

C:\Windows\winipbin\svrltmgr.dll

C:\Windows\winipbin\svrltmgr.dll.1

C:\Windows\winipbin\svrltmgr64.dll

C:\Windows\winipbin\svrltmgr64.dll.1

C:\Windows\winipbin\svrltwp.dll

C:\Windows\winipbin\svrltwp.dll.1

C:\Windows\winipbin\svrltwp64.dll

C:\Windows\winipbin\svrltwp64.dll.1

C:\Windows\winipbin\vdorctrl.dll

C:\Windows\winipbin\vdorctrl.dll.1

C:\Windows\winipbin\vdorctrl.sys

C:\Windows\winipbin\vdorctrl.sys.1

C:\Windows\winipbin\wshvtx.exe  

C:\Windows\winipbin\wzodlg32.dll

C:\Windows\winipbin\ 

 

 

Veriato Investigator Deployment Guide

© Veriato, Inc. All rights reserved.

Support  | Veriato Investigator