Microsoft KB Archive/195919

= Excluding Exchange Services from Inoculan Realtime Scanner =

Article ID: 195919

Article Last Modified on 10/28/2006

-

APPLIES TO


 * Microsoft Exchange Server 4.0 Standard Edition
 * Microsoft Exchange Server 5.0 Standard Edition
 * Microsoft Exchange Server 5.5 Standard Edition

-



This article was previously published under Q195919



IMPORTANT: This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows Registry



SYMPTOMS
When you run the InnocuLAN Real Time Monitor on Exchange Server computers, the Exchange Server stores may become corrupt.



WORKAROUND
To stop the InnocuLAN Real Time Monitor from monitoring the Exchange Server services, perform the following steps:

 Make sure that Ino_fltr.sys is dated later than February 12, 1998. This is an InnocuLAN file. Find out the processes image names from Windows NT Task Manager. Locate the following processes:

Microsoft Exchange server:

Store.exe

Mad.exe

Dsamain.exe

Emsmta.exe

If the Internet Mail Service is installed:

Msexcimc.exe

If the MS Mail connector is installed:

Dxa.exe

Async.exe

Mt.ext

If key management server is installed:

Kmserver.exe



WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.

 Start Registry Editor (Regedt32.exe). Locate the following key in the registry:

HKEY_LOCAL_MACHINE\Software\Cheyenne\InnocuLAN\CurrentVersion\Filter

 On the Edit menu, click Add New Value, and type the following:

REG_MULTI_SZ called xProcess

</li> Type the process image names that you want to exclude from InocuLAN protection in the MultiString Editor Box (put a carriage return/line feed between each process).NOTE: You must enter the Multi-String data as follows:

 Include the .exe extension for the image name.</li> Image names must be typed in upper case.</li> Dsamain.exe and Store.exe must be included in the list.</li></ol> </li> Restart the computer running Windows NT to load the excluded information into the driver.</li></ol>

Additional query words: virus scanner innoclan Innoculan

Keywords: kbinfo KB195919

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.