Syntax for malware scan inclusions and exclusions

Directory

DIRECTORY\

Excludes all files in the specified directory and all files in all subdirectories.

C:\Program Files\ Excludes all files in the "Program Files" directory and all subdirectories.

Directory with wildcard (*)

DIRECTORY\*\

Excludes all subdirectories except for the specified subdirectory and the files that it contains.

C:\abc\*\: Excludes all files in all subdirectories of abc, but does not exclude the files in the abc directory.

Directory with wildcard (*)

DIRECTORY*\

Excludes any subdirectories with a matching name, but does not exclude the files in that directory and any subdirectories.

C:\Program Files\SubDirName*\: Excludes any subdirectories with a folder name that begins with “SubDirName”. Does not exclude all files under C:\Program Files\ or any other subdirectories.

Environment variable

${ENV VAR}

Excludes all files and subdirectories defined by an environment variable. For a Virtual Appliance, the value pairs for the environment variable must be defined in Policy or Computer Editor > Settings > General > Environment Variable Overrides.

${windir}: If the variable resolves to C:\Windows, excludes all the files in C:\Windows and all its subdirectories.

Comments

DIRECTORY #Comment

Adds a comment to your exclusion definitions.

File

FILE

Excludes all files with the specified file name regardless of its location or directory.

abc.doc: Excludes all files named abc.doc in all directories. Does not exclude abc.exe.

File path

FILEPATH

Excludes the single file specified by the file path.

C:\Documents\abc.doc: Excludes only the file named abc.doc in the Documents directory.

File path with wildcard (*)

FILEPATH

Excludes all the files specified by the file path.

C:\Documents\abc.co* (For Windows Agent platforms only): Excludes any file that has file name of abc and extension beginning with .co in the Documents directory.

Filename is a wildcard (*)

FILEPATH\*

Excludes all files under the path, but does not include the files in unspecified subdirectories

File with wildcard (*)

FILE*

Excludes all files with a matching pattern in the file name.

File with wildcard (*)

FILE.EXT*

Excludes all files with a matching pattern in the file extension.

File with wildcard (*)

FILE*.EXT*

Excludes all files with a matching pattern in the file name and in the extension.

a*c.a*p: Matches:

Does not match ad.aa

Environment variable

${ENV VAR}

Excludes files specified by an environment variable with the format ${ENV VAR}. These can be defined or overridden using Policy or Computer Editor → Settings → General → Environment Variable Overrides

${myDBFile}: Excludes the file myDBFile.

Comments

FILEPATH #Comment

Adds a comment to your exclusion definitions.

File Extension

EXT

Matches all files with a matching file extension.

doc: Matches all files with a .doc extension in all directories.

Comments

EXT #Comment

Adds a comment to your exclusion definitions.

File path

Excludes the process image file.

Directories with wildcard (*)

The wildcard replaces the directory name.

File names with wildcard (*)

The wildcard replaces the file names.

Drive name with wildcard (*)

The wildcard replaces the drive name.

Special character with wildcard (*)

The wildcard replaces a special character like ":", "\", and ".".