Dr.Web Antivirus

Antivirus Exclusions for Windows

For the Staffcop Enterprise agent to work correctly with Dr.Web, add the agent’s system components to the antivirus exclusions.

  1. Open Dr.Web. Open Security Center → Files and Network.

    ../../_images/antivirus_exclude_drweb_1.png

  2. Make sure that SpIDer Gate and SpIDer Mail are turned off.

    ../../_images/antivirus_exclude_drweb_2.png

  3. Go back to Security Center and open Parental Control.

    ../../_images/antivirus_exclude_drweb_3.png

  4. Make sure that Parental Control is turned off.

    ../../_images/antivirus_exclude_drweb_4.png

  5. Go back to Security Center and open Exclusions → Applications.

    ../../_images/antivirus_exclude_drweb_5.png ../../_images/antivirus_exclude_drweb_6.png

  6. Add the agent processes to the exclusions:

    C:\Windows\SysWOW64\TimeControlSvc\vmnetdrv64.exe
    C:\Windows\SysWOW64\TimeControlSvc\vmnetdrv32.exe
    C:\Windows\SysWOW64\TimeControlSvc\sysprotect64.exe
    C:\Windows\SysWOW64\TimeSvc3Mon\vmnetmon64.exe

    Note

    Make sure that the Exclude from scanning by SpIDer Guard and Exclude from scanning by SpIDer Gate and SpIDer Mail options are turned on.

    ../../_images/antivirus_exclude_drweb_7.png ../../_images/antivirus_exclude_drweb_8.png

  7. Go back to Exclusions and open Files and Folders.

    ../../_images/antivirus_exclude_drweb_9.png

  8. Add the exclusions:

    C:\Windows\agent.msi
    C:\Windows\auxiliaryservice.exe
    C:\Windows\Winexesvc.exe
    C:\Windows\installer\*
    C:\Windows\Temp\scrim2
    C:\Windows\Temp\agent.msi
    C:\Windows\SysWOW64\TimeControlSvc\*
    C:\Windows\SysWOW64\TimeControlSvc\vmnetdrv32.exe
    C:\Windows\SysWOW64\TimeControlSvc\vmnetdrv64.exe
    C:\Windows\SysWOW64\TimeControlSvc\sysprotect64.exe
    C:\Windows\system32\config\systemprofile\AppData\Roaming\TimeSVC3
    C:\Windows\SysWOW64\TimeSvc3Mon
    C:\Windows\System32\config\systemprofile\AppData\Roaming\TimeSvc3Mon

    Note

    Make sure that the Exclude from being scanned by SpIDer Guard and Exclude from being scanned by Scanner options are turned on.

    ../../_images/antivirus_exclude_drweb_10.png

  1. Go back to Security Center and open Settings.

    ../../_images/antivirus_exclude_drweb_11.png

  2. Go to Network and make sure encrypted traffic scanning is disabled.

    ../../_images/antivirus_exclude_drweb_12.png

  3. Reboot your PC or restart the Staffcop agent.

Antivirus Exclusions for Linux

For the Staffcop Enterprise agent to work correctly with Dr.Web, add the agent’s system components to the antivirus exclusions.

  1. In the Dr.Web window, open SpIDer Gate. If SpIDer Gate is running, you will need to disable it. Go to SpIDer Gate:

    ../../_images/antivirus_exclude_drweb_13.png

  1. Click the lock icon to gain administrator rights and click Disable.

    ../../_images/antivirus_exclude_drweb_14.png ../../_images/antivirus_exclude_drweb_15.png

  2. Go to Settings:

    ../../_images/antivirus_exclude_drweb_16.png

  3. In Settings, open Exclusions → Files and Directories.

    ../../_images/antivirus_exclude_drweb_17.png

  4. In the Select files and directories window, add the exclusions, separated by semicolons without spaces:

    /usr/share/staff;/run/scela;/var/run/scela;/var/lib/scela;/etc/scelarc;/root/.config/scela.rc;/var/lib/scela/rc
    ../../_images/antivirus_exclude_drweb_18.png

  5. Confirm your selection in the Files and directories list:

    ../../_images/antivirus_exclude_drweb_19.png

  6. Return to Exclusions, go to Applications and click the plus sign +. In the Select objects window, find the agent process at this path:

    /usr/share/staff/agent

Click Select.

../../_images/antivirus_exclude_drweb_20.png

  1. In the Applications window, click OK:

    ../../_images/antivirus_exclude_drweb_21.png

  2. Go back to Settings, go to SpIDer Gate and in the Network Activity Monitoring category disable all options:

../../_images/antivirus_exclude_drweb_22.png

  1. Go to Network and turn off the Check traffic transferred via secure SSL/TLS connections option.

../../_images/antivirus_exclude_drweb_23.png

  1. Reboot your PC or restart the Staffcop agent.

Dr.Web Blocking Email Interception

In some cases, Dr.Web may block email interception.

To resolve this issue:

  1. Go to Control Panel → Computer Configuration and select the workstation.

  2. In the side menu, go to Network Connections.

  3. Open the Network Monitoring - Ports section.

  4. In the Allow list, specify all ports for interception except the ones for email (25, 2525, 465, 587, 110, 995, 143, 993).

    ../../_images/antivirus_exclude_drweb_24.png

    See also

    System ports

  5. Click Save.

    Note

    The Network Connections settings are configured on the server and are not visible to workstation users.

Last Updated: 14.11.25