Information

Article Number	000009295

Title	What to add to AV Exceptions (if path/exe has to be used rather than folder wide exceptions)

URL Name	What-to-add-to-AV-Exceptions-if-path-exe-has-to-be-used-rather-than-folder-wide-exceptions

Keywords	AV, file, exclusion, .exe, process, executable, antivirus, anti, virus, exception, quarantine

Last Modified Date	1/21/2025, 8:04 PM

Summary	The following article will list the file exceptions of Varonis software that are required to antivirus software if folder exceptions cannot be made to ensure the software functions properly.

Related Products	DAW - DatAdvantage for Windows

Platform

Version	8.5; 8.6

Build

Article Content

If you are unsure on where the installation is located, it is recommended to review the details of the service in question to find the path to the executable.

Open the services.msc console from the host you are looking to apply the exceptions to, and double click the service in question. Then under "General", copy out the "Path to Executable".
Another way of checking the home folder of your installation is to open the Management Console and browse to Root > DSP Server and highlight the installation path. You can also find the location of the working share for your deployment in this location.

For the DSP/Probe:

Note that the following exes/paths can be added to the exclusions, assuming the default installation location was selected during installation.

A further caveat is that if you require a process to be added to the exclusions rather than an .exe, then the process name will be the same as the service that spawned it.

%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\AdvancedSearch\Varonis.AdvancedSearch.Service.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\Alert\Varonis.Alert.WebService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\ApplicationService\Varonis.ApplicationService.WebService.exe
%ROOT%:\Program Files\Varonis\WinAgent\VrnsMon.exe
%ROOT%:\Program Files\Varonis\WinAgent\VrnsCifsQueue.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\Audit\Varonis.Audit.WindowsService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\Authentication\Varonis.Authentication.WebService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\AutoComplete\Varonis.AutoComplete.WebService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\ContextCard\Varonis.ContextCard.WebService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\Dashboards\Varonis.Dashboards.WebService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\Data Classification\VaronisAlertsService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\Data Classification\VaronisArchiveExtractor.exe
%ROOT%:\Program Files\Varonis\Database Adapter\Varonis.DbAdapter.WindowsService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage API\DatAdvantage Web API\Varonis.DatAdvantage.Api.WebService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\DataLakeCleaner\Varonis.DataLake.Cleaner.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\DLEAggregationEngine\Varonis.DLE.AggregationEngine.WinSrvc.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\DLEAlgoEngine\Varonis.DLE.AlgoEngine.WindowsService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\DLEManagement\Varonis.UBA.Management.WebService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\GridCollector\Enricher\CEP.Service.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\EntityModel\Varonis.EntityModel.WebService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\EntityPage\Vrns.EntityPageService.WebService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\EventsGenerator\Varonis.EventsGenerator.Service.exe
%ROOT%:\Program Files (x86)\Varonis\FilewalkAgent\VrnsSvcFW.exe
%ROOT%:\Program Files (x86)\Varonis\FilewalkAgent\VrnsSvcFwMon.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\GridCollector\VrnsFilterSvc.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\Followup\Varonis.Followup.WebService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\GridCollector\VrnsForwarderSvc.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\GridCollector\Varonis.Forwarder.Service.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\Gateway\Varonis.Gateway.SelfHosting.exe
%ROOT%:\Program Files\Varonis\DatAdvantage\Probe\VrnsMonSvc.exe
%ROOT%:\Program Files\Varonis\DatAdvantage\Probe\VrnsProbeSvc.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\IDU Server\Varonis.IduServer.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\IDU Server\Varonis.IduServer.Watchdog.exe
%ROOT%:\Program Files\Varonis\DatAdvantage\TopologyManager\EventFlow\LoggingWindowsService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\Layout\Varonis.Layout.WebService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\License\Varonis.License.WebService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\LiveUpdate\Varonis.LiveUpdate.Service.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\Mail\Varonis.Mail.WebService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\Minifier\Varonis.Minifier.WebService.exe
%ROOT%:\Program Files\Varonis\Varonis Office365 Agent\Office365Agent.exe
%ROOT%:\Program Files\Varonis\Varonis Office365 Agent\Office365AgentMonitor.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\GridCollector\PatternAggregator.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\PublisherService\Varonis.DA.Publisher.Service.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\GridCollector\VrnsRealTimeAlertsSvc.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\Report\Varonis.Report.WebService.exe
%ROOT%:\Program Files (x86)\Varonis\Reporting API Adapter\Varonis.DatAdvantage.Api.AdapterService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\GridCollector\Resolver\ResolverSrv.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\ResourcesDataAccess\Varonis.ResourcesDataAccess.WindowsService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\Search\Varonis.Search.WebService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\ShipperConfiguration\Varonis.Shipper.ConfigurationService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\SolrImporter\Varonis.SolrImporter.Service.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\SolrLoader\Varonis.SolrLoader.Service.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\SolrManagement\Varonis.SolrManagement.Service.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\SolrMonitor\Varonis.SolrMonitor.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\SqlExtractor\Varonis.SqlExtractor.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\Streams\Varonis.Agents.Collector.Streams.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\Streams\Varonis.Agents.Collector.LogstashManager.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\SyncManager\Varonis.SyncManager.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\UserData\Varonis.UserData.WebService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\UserPreferences\Varonis.UserPreferences.WindowsService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\UserRoles\Varonis.UserRoles.WebService.exe
%ROOT%:\Program Files\Varonis\DatAdvantage\TopologyManager\VSBConfigurationSvc.exe
%ROOT%:\Program Files\Varonis\DatAdvantage\TopologyManager\Varonis.Infra.VSB.HealthService.exe
%ROOT%:\Program Files\Varonis\DatAdvantage\TopologyManager\VSBKVService.exe
%ROOT%:\Program Files\Varonis\DatAdvantage\TopologyManager\Varonis.Infra.VSB.SupervisorSvc.exe
%ROOT%:\Program Files\Varonis\DatAdvantage\TopologyManager\VSBTopologyManager.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\IDU Server\Varonis.CoreHost.exe
%ROOT%:\Program Files\Varonis\DatAdvantage\Probe\Filewalk\Filewalk.exe
%ROOT%:\Program Files\Varonis\DatAdvantage\Probe\Filewalk\SQLFSHandler\SQLFSHandler.exe
All files located in the location of the system variable %RABBITMQ_BASE% on the DSP server
- This is typically defined as the "rmqcluster_service" folder within the location used for the DSP Working Share

The following Erlang software location may differ depending on the installed version:

%ROOT%:\Program Files\erl%\erts%\bin\erl.exe
%ROOT%:\Program Files\erl%\erts%\bin\erlsrv.exe
%ROOT%:\Program Files\erl%\lib\os_mon-%\priv\bin\win32sysinfo.exe
%ROOT%:\Program Files\erl%\erts%\bin\inet_gethost.exe

During an upgrade or repair the following locations need to be whitelisted for the Installer to function correctly.

%LocalAppData%:\Temp
- Note: Whitelisting only %temp% may miss the Installer working folder VaronisInstaller.
C:\Windows\Temp

For Collectors:

%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\Collector\VrnsProbeSvc.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\Collector\VrnsMonSvc.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\Streams\Varonis.Agents.Collector.Streams.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\Streams\Varonis.Agents.Collector.LogstashManager.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\AdvancedSearch\Varonis.AdvancedSearch.Service.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\Alert\Varonis.Alert.WebService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\ApplicationService\Varonis.ApplicationService.WebService.exe
%ROOT%:\Program Files\Varonis\WinAgent\VrnsMon.exe
%ROOT%:\Program Files\Varonis\WinAgent\VrnsCifsQueue.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\Audit\Varonis.Audit.WindowsService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\Authentication\Varonis.Authentication.WebService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\AutoComplete\Varonis.AutoComplete.WebService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\ContextCard\Varonis.ContextCard.WebService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\Dashboards\Varonis.Dashboards.WebService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\Data Classification\VaronisAlertsService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\Data Classification\VaronisArchiveExtractor.exe
%ROOT%:\Program Files\Varonis\Database Adapter\Varonis.DbAdapter.WindowsService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage API\DatAdvantage Web API\Varonis.DatAdvantage.Api.WebService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\DataLakeCleaner\Varonis.DataLake.Cleaner.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\DLEAggregationEngine\Varonis.DLE.AggregationEngine.WinSrvc.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\DLEAlgoEngine\Varonis.DLE.AlgoEngine.WindowsService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\DLEManagement\Varonis.UBA.Management.WebService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\GridCollector\Enricher\CEP.Service.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\EntityModel\Varonis.EntityModel.WebService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\EntityPage\Vrns.EntityPageService.WebService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\EventsGenerator\Varonis.EventsGenerator.Service.exe
%ROOT%:\Program Files (x86)\Varonis\FilewalkAgent\VrnsSvcFW.exe
%ROOT%:\Program Files (x86)\Varonis\FilewalkAgent\VrnsSvcFwMon.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\GridCollector\VrnsFilterSvc.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\Followup\Varonis.Followup.WebService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\GridCollector\VrnsForwarderSvc.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\GridCollector\Varonis.Forwarder.Service.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\Gateway\Varonis.Gateway.SelfHosting.exe
%ROOT%:\Program Files\Varonis\DatAdvantage\Probe\VrnsMonSvc.exe
%ROOT%:\Program Files\Varonis\DatAdvantage\Probe\VrnsProbeSvc.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\IDU Server\Varonis.IduServer.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\IDU Server\Varonis.IduServer.Watchdog.exe
%ROOT%:\Program Files\Varonis\DatAdvantage\TopologyManager\EventFlow\LoggingWindowsService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\Layout\Varonis.Layout.WebService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\License\Varonis.License.WebService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\LiveUpdate\Varonis.LiveUpdate.Service.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\Mail\Varonis.Mail.WebService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\Minifier\Varonis.Minifier.WebService.exe
%ROOT%:\Program Files\Varonis\Varonis Office365 Agent\Office365Agent.exe
%ROOT%:\Program Files\Varonis\Varonis Office365 Agent\Office365AgentMonitor.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\GridCollector\PatternAggregator.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\PublisherService\Varonis.DA.Publisher.Service.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\GridCollector\VrnsRealTimeAlertsSvc.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\Report\Varonis.Report.WebService.exe
%ROOT%:\Program Files (x86)\Varonis\Reporting API Adapter\Varonis.DatAdvantage.Api.AdapterService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\GridCollector\Resolver\ResolverSrv.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\ResourcesDataAccess\Varonis.ResourcesDataAccess.WindowsService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\Search\Varonis.Search.WebService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\ShipperConfiguration\Varonis.Shipper.ConfigurationService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\SolrImporter\Varonis.SolrImporter.Service.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\SolrLoader\Varonis.SolrLoader.Service.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\SolrManagement\Varonis.SolrManagement.Service.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\SolrMonitor\Varonis.SolrMonitor.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\SqlExtractor\Varonis.SqlExtractor.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\Streams\Varonis.Agents.Collector.Streams.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\Streams\Varonis.Agents.Collector.LogstashManager.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\SyncManager\Varonis.SyncManager.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\UserData\Varonis.UserData.WebService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\UserPreferences\Varonis.UserPreferences.WindowsService.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\UserRoles\Varonis.UserRoles.WebService.exe
%ROOT%:\Program Files\Varonis\DatAdvantage\TopologyManager\VSBConfigurationSvc.exe
%ROOT%:\Program Files\Varonis\DatAdvantage\TopologyManager\Varonis.Infra.VSB.HealthService.exe
%ROOT%:\Program Files\Varonis\DatAdvantage\TopologyManager\VSBKVService.exe
%ROOT%:\Program Files\Varonis\DatAdvantage\TopologyManager\Varonis.Infra.VSB.SupervisorSvc.exe
%ROOT%:\Program Files\Varonis\DatAdvantage\TopologyManager\VSBTopologyManager.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\IDU Server\Varonis.CoreHost.exe
%ROOT%:\Program Files\Varonis\DatAnswers\solr\bin\solrService.exe >> if using DatAnswers
%ROOT%:\Program Files\Varonis\DatAnswers\watchdog\bin\vswdService.exe >> if using DatAnswers
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\Collector\Filewalk\Filewalk.exe
%ROOT%:\Program Files (x86)\Varonis\DatAdvantage\Collector\Filewalk\SQLFSHandler\SQLFSHandler.exe
All files located in the location of the system variable %RABBITMQ_BASE% on the collector
- This is typically defined as the "rmqcluster_service" folder within the location used for the Collector Working Share

The following Erlang software locations may differ depending on the installed version:

%ROOT%:\Program Files\erl%\erts%\bin\erl.exe
%ROOT%:\Program Files\erl%\erts%\bin\erlsrv.exe
%ROOT%:\Program Files\erl%\lib\os_mon-%\priv\bin\win32sysinfo.exe
%ROOT%:\Program Files\erl%\erts%\bin\net_gethost.exe

For the Zookeeper Server:

%ROOT%:\Program Files (x86)\Zookeeper\zookeeper-x.x.xx.jar
%ROOT%:\Program Files (x86)\Zookeeper\WatchDogZooKeeper\Varonis.SolrZookeeperWatchdog.WebService.exe

For the SOLR Server:

%ROOT%:\Program Files (x86)\Solr\server\start.jar
%ROOT%:\Program Files (x86)\Solr\WatchDogSolr\Varonis.SolrZookeeperWatchdog.WebService.exe

Related Resources

Antivirus Allowed List Requirements

Varonis Help Article Link	What to add to AV Exceptions (if path/exe has to be used rather than folder wide exceptions)

Central Article Link	What to add to AV Exceptions (if path/exe has to be used rather than folder wide exceptions)

Channels	Internal, Customer, Partner, Public

What to add to AV Exceptions (if path/exe has to be used rather than folder wide exceptions)

Information