Skip to main content

Antivirus and Application Process Exclusions for Enterprise Workloads

Antivirus software, real-time scanning tools, and third-party encryption programs can lock critical files, folders, or application processes used by the Druva Enterprise Workloads agent. If these programs lock agent configuration files or log files during operation, backup and restore tasks may fail or experience performance degradation. This article outlines the recommended antivirus exclusions, encryption program settings, and application process paths required to ensure smooth operation across your workload environments.


📝 Note

For network firewall rules, storage cluster URLs, and port requirements, see Firewall and Network Configuration for Druva Enterprise Workloads.


Exclusions for antivirus software and third-party encryption programs

If you use antivirus software, you must add the following paths to your antivirus exclusions. This will ensure smooth backup and restore operations by granting the antivirus software access to the agent binaries.

Click here to view the folders under the Antivirus exclusion section

  • C:\ProgramData\Phoenix

  • C:\Program Files\Druva\

  • C:\ProgramData\PhoenixCloudCache

  • C:\ProgramData\Druva

  • C:\ProgramData\phoenixupgrade

  • Data Volume folder path that is configured in TurboTier for exclusion. For more information on Data Volume configuration, see Configure TurboTier page.

  • root/Druva

  • /opt/Druva

  • /var/Druva

To discover and back up SQL Server on Azure VM, make sure you exclude the following folder under the AntiVirus exclusion section:

C:\Packages\Plugins\Microsoft.CPlat.Core.RunCommandWindows

Exclusions for the application processes of workloads

Click the following lists to view application processes for each workload.

Common application processes

Click here to view the processes

  • Phoenix.exe

  • PhoenixCPHwnet64.exe (64-bit machines)

  • PhoenixCPHwnet.exe (32-bit machines)

  • PhoenixActivate.exe

  • HybridWorkloadsAgent.exe

  • HybridWorkloadsAgentApp.exe

  • HybridWorkloadsCheck.exe

  • PhoenixOtelPipeline.exe

  • CheckEngine

  • EnterpriseWorkloads

  • EnterpriseWorkloadsAgent

  • EnterpriseWorkloadsMigrator

  • EnterpriseWorkloadsUpgrader

  • EnterpriseWorkloads-*-amd64.deb

  • Guestossvc.exe

  • EnterpriseWorkloads-*.msi

  • EnterpriseWorkloads.exe

  • EnterpriseWorkloadsAgent.exe

  • EnterpriseWorkloadsMigrator.exe

  • EnterpriseWorkloadsUpgrader.exe

  • CheckEngine.exe

VMware

Click here to view the processes

  • PhoenixIRAgent

  • HybridWorkloadUDA

  • PhoenixVMWareAgent

  • vmware

  • VMwareAgentPartner

  • VMwareFLRCleanupAll

  • VMwareFLRFuse

  • ProxyConf

  • VMwareGetVfatAttr

  • proxySetup

  • vsphere-discovery

  • dr-vmware

  • init.Druva-EnterpriseWorkloads

  • proxyFirstBoot

  • FLRDRSTCommandExecutor

  • PhoenixDRFailbackAgent

  • PhoenixFailbackRestServer

  • PhoenixFbcCli

  • PhoenixFbcSmbAgent

  • PhoenixVMWareAgent

  • cFuse

  • flrFuse

  • vmFuse

  • Druva-EnterpriseWorkloads.conf

  • Druva-EnterpriseWorkloads.service

  • Druva-HybridWorkloads.conf

  • Druva-HybidWorkloads.service

  • drst

  • Guestossvc

The following binaries reside on the proxy and run on the guest operating system:

  • HybridWorkloadScan.exe

  • HybridWorkloadScanx64

  • HybridWorkloadScanx86

  • HybridWorkloadUDA.exe

  • vguestossvc

  • guestossvc.exe

  • bring_disks_online.ps1

  • PhoenixSQLGuestPlugin.exe

  • PhoenixFbcWinGuestOSAgent.exe

  • PhoenixPreflight

Proxmox

Click here to view the processes

  • proxmox

  • ProxmoxAgentProcess

OpenStack

Click here to view the processes

  • openstack

  • OpenStackAgentProcess

File Servers

Click here to view the processes

  • PhoenixFSAgent.exe

  • fs.exe

  • scanner-cli.exe

  • PhoenixFSDtBackupAgent.exe

  • PhoenixFSDtRestoreAgent.exe

  • PhoenixFSBackupAgent.exe

  • PhoenixFSRestoreAgent.exe

  • PhoenixFSSnapshot.exe

NAS

Click here to view the processes

  • PhoenixNASAgent.exe

  • nas.exe

  • PhoenixNASBackupAgent.exe

  • PhoenixNASDtBackupAgent.exe

  • PhoenixNASRestoreAgent.exe

  • PhoenixNASDtRestoreAgent.exe

  • PhoenixNASDiscoveryAgent.exe

  • PhoenixNASControl.exe

  • PhoenixNasDicovery.exe

  • scanner-cli.exe

  • PhoenixS3BackupAgent

  • PhoenixS3RestoreAgent

  • PhoenixS3DiscoveryAgent

  • PhoenixAzBlobDtBackupAgent

  • PhoenixAzBlobDtRestoreAgent

  • PhoenixAzureBlobDiscoveryAgent

MS SQL Server

Click here to view the processes

  • mssql.exe

  • sqldiscovery.exe

  • PhoenixSQLAgent.exe

  • PhoenixSQLGuestPlugin.exe

  • PhoenixSQLDownloader.exe

  • PhoenixSQLUploader.exe

  • sql-ioserver.exe

  • sql-client.exe

  • drst-ioserver.exe

  • sql-client.exe

Oracle DTC

Click here to view the processes

  • oracle

  • ioserver

  • vfsserver

Oracle PBS

Click here to view the processes

  • dtagent

  • oracle-pbs

TurboTier (formerly CloudCache)

Click here to view the processes

  • PhoenixCacheWorker.exe

  • Phoenix CacheServerSVC.exe

  • PhoenixCacheControl.exe

  • PhoenixCacheServer.exe

  • Cloudcache

  • PhoenixIRService

  • PhoenixIRFS

  • vmac

  • EWLMountprocess

  • EWLFuse

  • turbotier.exe

  • turbotier

Hyper-V

Click here to view the processes

  • hyperv.exe

  • PhoenixHyperVAgent.exe

  • PhoenixHyperVControl.exe

Did this answer your question?