Antivirus Exceptions: File Extensions Etc.

article #190, updated 1191 days ago

It is either essential or highly recommendable, to insert the following file extensions as exceptions to antimalware products, most especially on servers.

Exchange & Windows Search Indexing:

*.edb
*.stm

Microsoft SQL server and others (FTDATA is a filename, not an extension):

*.mdf
*.ldf
*.ndf
FTDATA
*.bak
*.trn
*.trc
*.sqlaudit
*.sql

StorageCraft:

*.spf
*.spi
*.spk

Acronis:

*.TIB

BlackBerry Enterprise Server:

*.pdb

Microsoft virtual machine:

*.vhd
*.vpc
*.vmc
*.vhdx
*.avhd
*.vsv

VMware:

*.nvram
*.vmdk
*.vmsd
*.vmsn
*.vmss
*.vmtm
*.vmx
*.vmxf

QuickBooks:

*.DES
*.IIF
*.ND
*.QBA
*.TLG
*.QBB
*.QBM
*.QBR
*.QBW
*.QBX
*.QBY

Quicken:

*.QDF
*.QEL
*.QPH
*.IDX
*.QSD
*.QDB

AutoCAD Inventor:

*.ipt
*.iam
*.idw
*.dwg
*.ipn
*.ide
*.prt
*.g
*.asm
*.neu
*.dxf

Borland Paradox, Pervasive SQL, SQLIte, AutoCAD, and others:

*.db
*.sdf
*.ddf
*.mkd
*.pvsw
*.s3db
*.s3db-journal

For Pervasive databases, in addition to the above, you can load the Monitor to see files and folders in use.

For PostGres databases, the files don’t have extensions; their names are all numbers, and they are in a single hierarchy per database. So find that hierarchy, and set up an exception for the topmost level, and you’re in.

For Oracle databases:

*.sql
*.lst
*.pls
*.plb
*.pks
*.pkb
*.pck
*.dbf
*.log
*.rdo
*.arc
*.ctl
*.dat
*.bad
*.dsc
*.ora
*.fmb
*.fmt
*.fmx
*.rdf
*.rep
*.rex

For MySQL databases:

*.frm
*.myd
*.myi

All the extensions above, in one swell foop:

*.edb
*.stm
*.mdf
*.ldf
*.ndf
FTDATA
*.bak
*.trn
*.trc
*.sqlaudit
*.sql
*.spf
*.spi
*.spk
*.TIB
*.pdb
*.vhd
*.vpc
*.vmc
*.vhdx
*.avhd
*.vsv
*.nvram
*.vmdk
*.vmsd
*.vmsn
*.vmss
*.vmtm
*.vmx
*.vmxf
*.DES
*.IIF
*.ND
*.QBA
*.TLG
*.QBB
*.QBM
*.QBR
*.QBW
*.QBX
*.QBY
*.QDF
*.QEL
*.QPH
*.IDX
*.QSD
*.QDB
*.ipt
*.iam
*.idw
*.dwg
*.ipn
*.ide
*.prt
*.g
*.asm
*.neu
*.dxf
*.db
*.sdf
*.ddf
*.mkd
*.pvsw
*.s3db
*.s3db-journal
*.sql
*.lst
*.pls
*.plb
*.pks
*.pkb
*.pck
*.dbf
*.log
*.rdo
*.arc
*.ctl
*.dat
*.bad
*.dsc
*.ora
*.fmb
*.fmt
*.fmx
*.rdf
*.rep
*.rex
*.frm
*.myd
*.myi

A different swell foop, better suited for some antivirus software:

*.edb;*.stm;*.mdf;*.ldf;*.ndf;FTDATA;*.bak;*.trn;*.trc;*.sqlaudit;*.sql;*.spf;*.spi;*.spk;*.TIB;*.pdb;*.vhd;*.vpc;*.vmc;*.vhdx;*.avhd;*.vsv;*.nvram;*.vmdk;*.vmsd;*.vmsn;*.vmss;*.vmtm;*.vmx;*.vmxf;*.DES;*.IIF;*.ND;*.QBA;*.TLG;*.QBB;*.QBM;*.QBR;*.QBW;*.QBX;*.QBY;*.QDF;*.QEL;*.QPH;*.IDX;*.QSD;*.QDB;*.ipt;*.iam;*.idw;*.dwg;*.ipn;*.ide;*.prt;*.g;*.asm;*.neu;*.dxf;*.db;*.sdf;*.ddf;*.mkd;*.pvsw;*.s3db;*.s3db-journal;*.sql;*.lst;*.pls;*.plb;*.pks;*.pkb;*.pck;*.dbf;*.log;*.rdo;*.arc;*.ctl;*.dat;*.bad;*.dsc;*.ora;*.fmb;*.fmt;*.fmx;*.rdf;*.rep;*.rex;*.frm;*.myd;*.myi

Categories:   Antivirus/Antimalware Tools and Issues   Servers