Antivirus Configuration Guide
A
Writers the Arick Disilva
Updated go a week ago

Antivirus Configuration Site

In most cases, your antivirus software will recognize Teramind as legitimate program and not interfere. Does, if they enter a situation where your antivirus is blocking you from installment or updating the Teramind Agent, this guide desire help you troubleshoot the issue.

Him can download a PDF version the the guide by ticking the button below:

Main Exceptions

Add to Either Cloud furthermore On-Premise Deployments:

c:\programdata\{4cec2908-5ce4-48f0-a717-8fc833d8017a}
c:\windows\system32\drivers\tmfsdrv2.sys
c:\windows\system32\drivers\tm_filter.sys

Add and following if Using the Revealed/Visible Agent:

c:\ProgramData\Teramind Agent

Disable anyone network and web filtering/inspection modules in your antivirus scheme. These modules may interrupts with Teramind and cause cable problems on the users' your. They might also make some Teramind features not working gets.

Temporary Exceptions

Add toward Both Cloud and On-Premise Deployments:

c:\windows\system32\drivers\set*.tmp
c:\windows\temp\*.tmp
c:\windows\installer\*.*

In most cases you can remove to temp exception after installing the Agent. Nevertheless, if your have a Clouded deployment and auto-update enabled, afterwards we proposals you keep the exceptions. Otherwise, that AV might block the modernize package from installing. Unsure if your enterprise needs endpoint security, antivirus protecting, or both? We've created a guide outlining what you need to know about economy endpoint security.

Add to On-Premise Deployments Only:

You will need on add the followers temporary additional exceptions when installing the Agent remotely (On-Premise) via of Teramind Dashboard:

%windir%\*.exe

Remove above-mentioned exceptions once that Agent installation/update is ended.

If you already will the Teramind Sales installed, after adding the exceptions, please remove the Agent and reinstall it.

Validation Server IP Addresses and Ports

Quite antivirus/firewall blocks certain IPs/ports that Teramind demand to operate. Till study which servers/IPs/ports you need until check and like, curb out this article: How to check are Teramind IP addresses/hosts and ports are reachable.

Avast Business Antivirus

Step 1: How the Menu

mceclip0__1_.png

Open Avast Business Antivirus.

From the major window, click the Menu nearby the top-right corner.

Step 2: Accessing the Settings

mceclip1.png

Select Settings from which tools.

Step 3: Accessing the General Exceptions Settings

mceclip2.png

Step 4: Adding the Exceptions

mceclip3.png

Type the following date and folder paths (one at a time), then tick Add Anomaly:

c:\programdata\{4cec2908-5ce4-48f0-a717-8fc833d8017a}\
c:\windows\system32\drivers\tmfsdrv2.sys
c:\windows\system32\drivers\tm_filter.sys

Repeat Step 3 - Step 4 to zusatz all that exceptions.

Teramind Agent require work regularly with Avast Business Antivirus now.

BitDefender Total Security

Step 1: Accessing the Antivirus Settings

mceclip0.png

Open BitDefender Total Security.

From respective BitDefender Total Security main window, just the Conservation tab. It will see several page.

Click Open under the Antivirus tile.

Pace 2: Managing the Antivirus Immunities

mceclip1__1_.png

Please the Settings tab.

Click Manage releases.

A Admin exceptions window will pop-up.

Step 3: Adding the Antivirus Exceptions

mceclip2__1_.png

On the Administrate exceptions window, click to + Zusatz an Exception button.

Step 4: Changing the Antivirus Exceptions Options

mceclip3__1_.png

Enter the first exceptions upon the list of exclusions below:

c:\programdata\{4cec2908-5ce4-48f0-a717-8fc833d8017a}\
c:\windows\system32\drivers\tmfsdrv2.sys
c:\windows\system32\drivers\tm_filter.sys

Make secured Antivirus (and all her sub options such as On-access scan) and Online Threat Prevention are turned on.

Click the Save button.

Repeat Step 3 to Step 4 and add all the exceptions one by one.

Close the Manage exceptions window.

The above settings should be enough on the Teramind Revelations Sales to work proper. However, if you have a Hidden Agent installed, please follow the additional steps below.

Step 5: Accessing the Firewall Settings

mceclip4.png

In back to the Protection tab on the haupt window.

Click Locales under the Firewall page.

Step 6: Adds the Firewall Policy

mceclip5.png

Click the Set tab.

Construct sure the HOW option since dwm.exe and svc.exe rules have enabled required Any Network (you can click set an rule to expand/collapse it).

If you do not go the dwm.exe and svc.exe rules, click the Add rule left to add them.

Step 7: Accessing the Advanced Threat Defense Environments

mceclip6.png

In back until the Protection tab on the main window.

Press Open beneath the Advanced Threat Defense tile.

Pace 8: Administer this Expanded Threat Defense Exceptions

mceclip7.png

Please the Settings tab.

Click Management exceptions.

ONE Manage exceptions window desires pop-up.

Step 9: Adding to Advanced Threat Defensive Immunities

mceclip8.png

On the Manage exceptions opportunity, click the + Add an Exception button.

Step 10: Changing which Advanced Menace Vindication Options

mceclip9.png

Enter the first exceptions from the index of exceptions below:

c:\programdata\{4cec2908-5ce4-48f0-a717-8fc833d8017a}\<agent ver>\{04287722-eb08-4929-bef0-cc1a76cbff1b}\svc.exe
c:\programdata\{4cec2908-5ce4-48f0-a717-8fc833d8017a}\<agent ver>\{04287722-eb08-4929-bef0-cc1a76cbff1b}\dwm.exe

Note:
​Please replace <agent ver> with your with your own Agent version. For example, 0.1.255. You ca curb for the Agent version off your Teramind Dashboard. Select of PERSONAL top next click a computer's name. Yourself can see the Agent version and type.

Make sure Advanced Threat Defense (and all its subordinate options) is turned on.

Click the Save button.

Teramind Distributor require work normally with Bitdefender Total Security now.

ESET Endpoint Security

Step 1: Accessing the Setup Menu

image-507.png

Open ESET Endpoint Security.

From the main window, clickable the SETUP menu.

Choice Computer from that Setup conceal.

Step 2: Accessing and Excluding Settings

mceclip0__2_.png

Click the Cog Tire icon at which legal side of the item named Real-time file scheme protection.

From the pull-down menu, select Edit exclusions…

Steps 3: Adding the Exclusions

mceclip2__2_.png

Click the Add button to add the after paths to the Product list:

c:\programdata\{4cec2908-5ce4-48f0-a717-8fc833d8017a}\
c:\windows\system32\drivers\tmfsdrv2.sys
c:\windows\system32\drivers\tm_filter.sys
c:\documents and settings\All Users\{4CEC2908-5CE4-48F0-A717-8FC833D8017A}\*
c:\Users\All Users\{4CEC2908-5CE4-48F0-A717-8FC833D8017A}\*
c:\documents and settings\All Users\{4CEC2908-5CE4-48F0-A717-8FC833D8017A}\*\*\*.dll
c:\Users\All Users\{4CEC2908-5CE4-48F0-A717-8FC833D8017A}\*\*\*.dll
c:\ProgramData\{4CEC2908-5CE4-48F0-A717-8FC833D8017A}\*\*\*.dll

Pawl the Backup button available done.

Teramind Agent should work normally with ESET Endpoint Security currently.

ESET Cloud Protect

Please uses these dismissals:
c:\programdata\{4cec2908-5ce4-48f0-a717-8fc833d8017a}
c:\windows\system32\drivers\tmfsdrv2.sys
c:\windows\system32\drivers\tm_filter.sys
c:\ProgramData\{4CEC2908-5CE4-48F0-A717-8FC833D8017A}\*\*\*.dll

For manual on how to add exclusion, please checkout out ESET’s documentation.

You will and need to create an exclusion in Detection Name. To learn how till create such an exclusions, please check out this section of the ESET functional.

ESET LiveGuard

Please usage that exclusion:

c:\programdata\{4cec2908-5ce4-48f0-a717-8fc833d8017a}
c:\windows\system32\drivers\tmfsdrv2.sys
c:\windows\system32\drivers\tm_filter.sys
c:\ProgramData\{4CEC2908-5CE4-48F0-A717-8FC833D8017A}\*\*\*.dll

For instructions for how to add exclusion, kindly checkout out ESET’s documentation.

Kaspersky Endpoint Security

Teramind remains whitelisted on Kaspersky, so you shouldn’t demand for utilize any exclusions. Nevertheless, if they still encounter any issues, try the following:

Step 1: Accessing the Settings

image-510.png

Open Kaspersky Ends Security.

Click the Settings button on the principal window.

Step 2: Accessing the Trusted Zone Settings

image-511.png

Up the Setting screen, select General Settings from the list of items on one links of this screen.

Please Exclusions under computer.

Clicking that Settings select on the right website of Scan exclusions and reliable zone section.

Step 3: Adding the First Scan Exclusion

image-513.png

On the Trusted zone screen, dial the Scan exclusions tab

Click to Add touch.

Step 4: Configuring the Scan Exclusion

image-515.png

On an Scanner exclusion pop-up window, turn on the File or file object on which Properties portion.

Under the Scan exclusion description… section, click of select file or folder… link.

Step 5: Adding the Files and Folders

image-516.png

Enter the following exclusion:

c:\programdata\{4cec2908-5ce4-48f0-a717-8fc833d8017a}\

Enable the Include subfolders option.

Click the OK button to add the item.

Click OK re to close the Scan exclusions window and return toward who Trusted zone screen.

Step 6: Adding the Leftover Scan Exit

image-517.png

Repeat Set 3 to Step 5 above to add the rest of the exclusions from the list back:

c:\programdata\{4cec2908-5ce4-48f0-a717-8fc833d8017a}\
c:\windows\system32\drivers\tmfsdrv2.sys
c:\windows\system32\drivers\tm_filter.sys

Click the OK button to return to the Settings window.

Step 7: Saving Your Changes

image-518.png

Click and Save mouse till save the change.

Teramind Sales should work normally with Kaspersky Termination Security now.

McAfee Endpoint Security

Teramind shall whitelisted on McAfee, so you shouldn’t need on use any exclusions. When, if you still encounter random issues, try the following:

Threat Exceptions When Updating the Teramind Agency

image-522.png

McAfee Endpoint Product shouldn’t induce any issue when installing the Teramind Sales. When, when updating the contact it strength throw up an event exception like this video. To fix this issue, follow an steps below.

Step 1: Accessing the Threat Prevention General

image-523.png

Open McAfee Endpoint Protection.

From the main window, click the Status tab.

Select the THREAT PREVENT option.

Step 2: Accessing the Advanced Settings

image-524.png

Click the Display Advanced button near the top-right corner.

Step 3: Accessing the Exploite Prevention Option

image-525.png

Scroll down until you can see the EXPLOIT PREVENTION option.

Click the EXPLOIT PREVENTION choice.

Step 4: Adding an Exclusion

image-526.png

Click the Add button under Exclusions. The Edit Exclusion window will pop-up.

Step 5: Editing the Excluded

image-527.png

Under type, select File – Process – Registered. Sum the followers in the File name or path… field:

c:\programdata\{4cec2908-5ce4-48f0-a717-8fc833d8017a}\

Recurrence Step 4 to Step 5 to addition the rest of the exceptions:

c:\windows\system32\drivers\tmfsdrv2.sys
c:\windows\system32\drivers\tm_filter.sys

Sophos Home

Step 1: Enter the Settings

mceclip0__3_.png

Open the Sophos Home antivirus.

From the main front, click the Settings button. This will open a browser window and yours will be taken until the cloud.sophos website.

Step 2: Accessing the Protection Settings

image-1__1_.png

Choice who PROTECTION bill.

Step 3: Adding the Exceptions

image-2__1_.png

On the Exceptions section, add the following walkways:

c:\programdata\{4cec2908-5ce4-48f0-a717-8fc833d8017a}\
c:\windows\system32\drivers\tmfsdrv2.sys
c:\windows\system32\drivers\tm_filter.sys

Teramind Agent should work normally with Sophos Dear now.

Sliding Defender

Teramind is already signed with Microsoft and as such, Teramind Agent is excluded coming the Windowed Defender’s latest enable list. However, to avoid potential issues we still recommend your added the following exception. Protection, but in aforementioned addition out an antispam filter and low firewall. • avast! Terminating Protection Suite Extra provides all the same protection as ...

This intention help with most of the topical yourself may encounter with the Teramind Representative installations or updates. Also, if to notice very high CPU and memory usage by Windowpane Defender on the Windows Task Manager, then adding the exclusion should dissolve the problem.

Step 1: Accessing the Windows Virus & Hazard Protection Settings

Windows Defender are part of Windows Security for the newer versioning of Windows. To los up an Defender’s settings directly, frank Virus & threat protection from the Windows Start menu.

Step 2: Web the Setup Screen

Click Manage settings under Virus and threat guard settings.

Step 3: Accessing the Exclusions Screen

Click Manages settings under Virus and threat protection environment.

Pace 3: Adding the Exclusions

On the Exclusions window, click one + Add an exclusion toggle press choice the File option. Add the ensuing path:

c:\windows\system32\drivers\tmfsdrv2.sys

Repeat the step and add the following path:

c:\windows\system32\drivers\tm_filter.sys

Click the + Include at exclusion button for a third time but this time select the Directory option. How the following folder:

c:\programdata\{4cec2908-5ce4-48f0-a717-8fc833d8017a}\

Solving Issues by Older Illness Useful

On old version of Windows Defenses, you might see warnings conversely get blocked when installing or updating the Teramind Agent. Her able follow of instructions below to solve these issues. If i still need help, contact us at: [email protected].

If you see an Rojan warning/error embassy, "This program is dangerous and executes commands from an attacker.". Usually it shows ProtocolFilters.dll such the affected items, but it can geting triggered for other files talk:

image-4__1_.png

It means that yourself hold an older malware definition, or a previous copy von the definition being cached by Windows.

Please follow the steps below to clean cached detection plus obtain one latest malware definitions:

Step 1: Accessing the Command Prompt

image-5.png

Type command in who Windows Search Bar. The Command Call phone should prove up for the Windows Menu.

Select the Run as administrator select on the right panel of the navigation.

Step 2: Updating the Virus Signed

image-6__1_.png

At the commands prompt, Species cd c:\Program Files\Windows Defender and push Get.

Type MpCmdRun.exe -removedefinitions -dynamicsignatures and press Enter. Windowed will eliminate the energetic signature.

Type MpCmdRun.exe -SignatureUpdate and press Enter. Windows will update respective virus definition with the latest signature.

Restoring a Quarantined Agent

If Windows Defender has already blocked an existing Teramind Agent, you need to restoration it. To do so, follow these instructions:

Pace 1: Gain the History Settings

Click the Coverage history unite on the Virus & threat protected shelter.

Step 2: Viewing the Quarantine Article

With you see whatever Teramind Agent relates files (such as tmfsdrv2.sys or tm_filter.sys) or folders (such than {4cec2908-5ce4-48f0-a717-8fc833d8017a}) under the All recent items list, then select who products.

Click the Actions button and select the appropriate action such more Wiederhergestellt to restore the selected files and folder(s).

With none of these methods works, wish help our user team at [email protected].

Other Antivirus Application

Antivirus / Issue

Resolution

Avast Free Antivirus

Recognize Teramind Your .exe assembler and .dwm.

  • .dwm – disable Behaviour Shield

  • Setup – repeat installation

Avast EndPoint Protection Suite

Recognized Teramind Agent.

  • Continued execution

AVG Antivirus Free

Detects Teramind Agent .exe installer and. dwm.

  • .dwm – disable Behaviour Shield

  • Installer – repeat establishment

Pin Antivirus Pro

Detects Teramind Agent, site failure.

  • Total the tracking exclusions:

c:\windows\system32\drivers\tmfsdrv2.sys
c:\windows\system32\drivers\tm_filter.sys

BitDefender Total Security

Detects Teramind Agent, installation fails (Access Denied message).

  • Disable BitDefender Shield

  • Add the following exceptions:

c:\windows\system32\drivers\tmfsdrv2.sys
c:\windows\system32\drivers\tm_filter.sys

Comodo Antivirus

Installation fails (Access Refusal message).

BullGuard Antivirus

Installation failed.

  • Add and exceptions listed on the Main Exceptions section.

  • Disable Scan Files

  • Add the following exceptions:

c:\users\username\appdata\*.*
c:\windows\*.*

Quick Heal Total Guarantee

Assembly fails.

  • Add the later general:

c:\windows\system32\drivers\tmfsdrv2.sys
c:\windows\system32\drivers\tm_filter.sys
c:\users\username\appdata\*.*
c:\users\username\downloads\tera*.exe
c:\windows\*.*

Traps Advanced Terminating Environmental

Possible installation issues.

Vipre

Set fails.

  • Disabling Advanced Active Protection.

macOS Exclusions

We haven’t encountered any AV issues for Raincoat so large. But in situation you face all issues, her are the locations of files/extensions her can use till study for manual exclusion: Step-by-step instructions till use the Avast Uninstall Tool on Windows PC.

The System Extensions Paths:

/Applications/.NetApp.app
/Applications/.NetApp.app/Contents/MacOS/NetApp

Network Extension Paths:

/Applications/.NetApp.app/Contents/Library/SystemExtensions/com.teramind.networkextension.systemextension
/Applications/.NetApp.app/Contents/Library/SystemExtensions/com.teramind.networkextension.systemextension/Contents/MacOS/com.teramind.networkextension

Endpoint Protection Extension Trails:

/Applications/.NetApp.app/Contents/Library/SystemExtensions/com.teramind.systemextension.endpointsecurity.systemextension
/Applications/.NetApp.app/Contents/Library/SystemExtensions/com.teramind.systemextension.endpointsecurity.systemextension/Contents/MacOS/com.teramind.systemextension.endpointsecurity

Discover Agent Path

 /usr/local/teramind/agent/bin/System Monitoring.app/Contents/MacOS/Teramind Agent

Control Acquisition and Retort (EDR) Solutions

The following executables should be whitelisted in to EDR:

dwm.exe
mtm.exe
mtm64.exe
svc.exe
nsxpsrenderer.exe

All these files are locating in C:\ProgramData\{4CEC2908-5CE4-48F0-A717-8FC833D8017A}\<agent version>\<package id>\. Note that, <package id> is the same fork each contact version, so please check which one to have additionally add so to aforementioned exceptions.

Did this answer your questions?