Excluding Exchange Services from Inoculan Realtime Scanner

ID: Q195919


The information in this article applies to:
  • Microsoft Exchange Server, versions 4.0, 5.0, 5.5

IMPORTANT: This article contains information about editing the registry. Before you edit the registry, make sure you understand how to restore it if a problem occurs. For information about how to do this, view the "Restoring the Registry" Help topic in Regedit.exe or the "Restoring a Registry Key" Help topic in Regedt32.exe.

SYMPTOMS

When you run the InnocuLAN Real Time Monitor on Exchange Server computers, the Exchange Server stores may become corrupt.


WORKAROUND

To stop the InnocuLAN Real Time Monitor from monitoring the Exchange Server services, perform the following steps:

  1. Make sure that Ino_fltr.sys is dated later than February 12, 1998. This is an InnocuLAN file.


  2. Find out the processes image names from Windows NT Task Manager. Look for the following processes:

    Microsoft Exchange server:
    Store.exe
    Mad.exe
    Dsamain.exe
    Emsmta.exe
    If the Internet Mail Service is installed:
    Msexcimc.exe
    If the MS Mail connector is installed:
    Dxa.exe
    Async.exe
    Mt.ext
    If key management server is installed:
    Kmserver.exe


WARNING: Using Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk.

For information about how to edit the registry, view the "Changing Keys and Values" Help topic in Registry Editor (Regedit.exe) or the "Add and Delete Information in the Registry" and "Edit Registry Data" Help topics in Regedt32.exe. Note that you should back up the registry before you edit it. If you are running Windows NT, you should also update your Emergency Repair Disk (ERD).
  1. Start Registry Editor (Regedt32.exe).


  2. Locate the following key in the registry:


  3. HKEY_LOCAL_MACHINE\SOFTWARE\Cheyenne\InnocuLAN\CurrentVersion\Filter
  4. On the Edit menu, click Add New Value, and type the following:


  5. REG_MULTI_SZ called xProcess
  6. Type the process image names that you want to exclude from InocuLAN protection in the MultiString Editor Box (put a carriage return/line feed between each process).


  7. Restart the computer running Windows NT to load the excluded information into the driver.


Additional query words: virus scanner innoclan Innoculan

Keywords :
Version : winnt:4.0,5.0,5.5
Platform : winnt
Issue type : kbinfo


Last Reviewed: May 13, 1999
© 2000 Microsoft Corporation. All rights reserved. Terms of Use.