Know the processes that are, by default, whitelisted by the WRS. This list of processes cannot be found in Security Server console.
By default, the following processes are whitelisted by the WRS:
- Tmlisten.exe
- PccNTMon.exe
- NTRmv.exe
- AutoPcc.exe
- AutoPccp.exe
- OfcService.exe
- OfcAosMgr.exe
- OfcDBBackup.exe
- OfcHotFix.exe
- OfcUpdate.exe
- Patch.exe
- VerConn.exe
- IpXfer.exe
- SPNSXfr.exe
- TMVS.exe
- ClientMover.exe
- NTRtScan.exe
- Opdcs.exe
- wspsrv.exe
- Tomcat.exe
- UtilChkWSS.exe
- Apache.exe
- HostedAgent.exe
- YahooMessenger.exe
- YahooM~1.exe
- ClnDiag.exe
- nsffprx.exe
- communicator.exe
- mstsc.exe
- Tmlisten.exe
- PccNTMon.exe
- NTRmv.exe
- AutoPcc.exe
- AutoPccp.exe
- OfcService.exe
- OfcAosMgr.exe
- OfcDBBackup.exe
- OfcHotFix.exe
- OfcUpdate.exe
- Patch.exe
- VerConn.exe
- IpXfer.exe
- SPNSXfr.exe
- TMVS.exe
- ClientMover.exe
- NTRtScan.exe
- Opdcs.exe
- wspsrv.exe
- Tomcat.exe
- UtilChkWSS.exe
- Apache.exe
- HostedAgent.exe
- YahooMessenger.exe
- YahooM~1.exe
- ClnDiag.exe
- nsffprx.exe
- communicator.exe
- mstsc.exe
- Tmlisten.exe
- PccNTMon.exe
- NTRmv.exe
- AutoPcc.exe
- AutoPccp.exe
- OfcService.exe
- OfcAosMgr.exe
- OfcDBBackup.exe
- OfcHotFix.exe
- OfcUpdate.exe
- Patch.exe
- VerConn.exe
- IpXfer.exe
- SPNSXfr.exe
- TMVS.exe
- ClientMover.exe
- NTRtScan.exe
- Opdcs.exe
- wspsrv.exe
- UtilChkWSS.exe
- HostedAgent.exe
- Nsffprx.exe
You can find this list in the registry of the client under the registry hive: HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\NSC\TmProxy\WhiteList.