[10/16/2024 15:10:54] : Starting Logger Instance 10/16/2024 15:10:54

[10/16/2024 15:10:54] : Test-ExchAVExclusions.ps1 script version 24.09.17.1810

[10/16/2024 15:11:11] :
###################################################################################
########
[10/16/2024 15:11:11] : Starting AV Exclusions analysis at 10/16/2024 3:10:54 PM
[10/16/2024 15:11:11] :
###################################################################################
########
[10/16/2024 15:11:11] : You can find a simple log on: Test-ExchAvExclusions-
Results-20241016031054.txt
[10/16/2024 15:11:11] : And a detailed log on: Test-ExchAvExclusions-Debug-
20241016031054.txt
[10/16/2024 15:11:12] : WARNING: Remember to add the witness directory C:\
PRDDAG19Witness on the server prdexcpro01.eone.onemaroc.net
[10/16/2024 15:11:16] : Creating EICAR Files
[10/16/2024 15:11:17] : EICAR Files Created
[10/16/2024 15:11:17] : Accessing EICAR Files
[10/16/2024 15:11:19] : Access EICAR Files Finished
[10/16/2024 15:11:19] : Analyzing Exchange Processes
[10/16/2024 15:11:21] : [FAIL] - PROCESS: EdgeTransport PID(22780) UNEXPECTED
MODULE: utilDebug.dll COMPANY: Trend Micro Inc.
PATH: C:\Program Files\Trend Micro\Smex\utilDebug.dll
FileVersion: 14.0.0.3152
[10/16/2024 15:11:21] : [FAIL] - PROCESS: EdgeTransport PID(22780) UNEXPECTED
MODULE: log4cxx.dll COMPANY: Apache Software Foundation
PATH: C:\Program Files\Trend Micro\Smex\log4cxx.dll
FileVersion: 0,10, 0, 1
[10/16/2024 15:11:21] : [FAIL] - PROCESS: EdgeTransport PID(22780) UNEXPECTED
MODULE: hookSMTP.dll COMPANY: Trend Micro Inc.
PATH: C:\Program Files\Trend Micro\Smex\hookSMTP.dll
FileVersion: 14.0.0.3152
[10/16/2024 15:11:21] : [FAIL] - PROCESS: EdgeTransport PID(22780) UNEXPECTED
MODULE: utilLogNotification.dll COMPANY: Trend Micro Inc.
PATH: C:\Program Files\Trend Micro\Smex\utilLogNotification.dll
FileVersion: 14.0.0.3152
[10/16/2024 15:11:21] : [FAIL] - PROCESS: EdgeTransport PID(22780) UNEXPECTED
MODULE: utilCommon.dll COMPANY: Trend Micro Inc.
PATH: C:\Program Files\Trend Micro\Smex\utilCommon.dll
FileVersion: 14.0.0.3152
[10/16/2024 15:11:21] : [FAIL] - PROCESS: EdgeTransport PID(22780) UNEXPECTED
MODULE: utilL10N.dll COMPANY: Trend Micro Inc.
PATH: C:\Program Files\Trend Micro\Smex\utilL10N.dll
FileVersion: 14.0.0.3152
[10/16/2024 15:11:21] : [FAIL] - PROCESS: EdgeTransport PID(22780) UNEXPECTED
MODULE: utilSystem.dll COMPANY: Trend Micro Inc.
PATH: C:\Program Files\Trend Micro\Smex\utilSystem.dll
FileVersion: 14.0.0.3152
[10/16/2024 15:11:21] : [FAIL] - PROCESS: EdgeTransport PID(22780) UNEXPECTED
MODULE: utilThread.dll COMPANY: Trend Micro Inc.
PATH: C:\Program Files\Trend Micro\Smex\utilThread.dll
FileVersion: 14.0.0.3152
[10/16/2024 15:11:21] : [FAIL] - PROCESS: EdgeTransport PID(22780) UNEXPECTED
MODULE: utilSmtpEventSink.DLL COMPANY: Trend Micro Inc.
PATH: C:\Program Files\Trend Micro\Smex\utilSmtpEventSink.DLL
FileVersion: 14.0.0.3152
[10/16/2024 15:11:21] : [FAIL] - PROCESS: EdgeTransport PID(22780) UNEXPECTED
MODULE: utilChangeNotification.dll COMPANY: Trend Micro Inc.
PATH: C:\Program Files\Trend Micro\Smex\utilChangeNotification.dll
 FileVersion: 14.0.0.3152
[10/16/2024 15:11:21] : [FAIL] - PROCESS: EdgeTransport PID(22780) UNEXPECTED
MODULE: utilGenericMessage.dll COMPANY: Trend Micro Inc.
PATH: C:\Program Files\Trend Micro\Smex\utilGenericMessage.dll
FileVersion: 14.0.0.3152
[10/16/2024 15:11:21] : [FAIL] - PROCESS: EdgeTransport PID(22780) UNEXPECTED
MODULE: hookContentProvider.dll COMPANY: Trend Micro Inc.
PATH: C:\Program Files\Trend Micro\Smex\hookContentProvider.dll
FileVersion: 14.0.0.3152
[10/16/2024 15:11:21] : [FAIL] - PROCESS: EdgeTransport PID(22780) UNEXPECTED
MODULE: utilIPC.dll COMPANY: Trend Micro Inc.
PATH: C:\Program Files\Trend Micro\Smex\utilIPC.dll
FileVersion: 14.0.0.3152
[10/16/2024 15:11:21] : [FAIL] - PROCESS: EdgeTransport PID(22780) UNEXPECTED
MODULE: utilRPC.dll COMPANY: Trend Micro Inc.
PATH: C:\Program Files\Trend Micro\Smex\utilRPC.dll
FileVersion: 14.0.0.3152
[10/16/2024 15:11:21] : [FAIL] - PROCESS: EdgeTransport PID(22780) UNEXPECTED
MODULE: utilXMLParser.dll COMPANY: Trend Micro Inc.
PATH: C:\Program Files\Trend Micro\Smex\utilXMLParser.dll
FileVersion: 14.0.0.3152
[10/16/2024 15:11:21] : [FAIL] - PROCESS: EdgeTransport PID(22780) UNEXPECTED
MODULE: icuuc68.dll COMPANY: The ICU Project
PATH: C:\Program Files\Trend Micro\Smex\icuuc68.dll
FileVersion: 68, 2, 0, 0
[10/16/2024 15:11:21] : [FAIL] - PROCESS: EdgeTransport PID(22780) UNEXPECTED
MODULE: hookCommon.dll COMPANY: Trend Micro Inc.
PATH: C:\Program Files\Trend Micro\Smex\hookCommon.dll
FileVersion: 14.0.0.3152
[10/16/2024 15:11:21] : [FAIL] - PROCESS: EdgeTransport PID(22780) UNEXPECTED
MODULE: utilAccessControl.dll COMPANY: Trend Micro Inc.
PATH: C:\Program Files\Trend Micro\Smex\utilAccessControl.dll
FileVersion: 14.0.0.3152
[10/16/2024 15:11:21] : [FAIL] - PROCESS: EdgeTransport PID(22780) UNEXPECTED
MODULE: icudt68.dll COMPANY: The ICU Project
PATH: C:\Program Files\Trend Micro\Smex\icudt68.dll
FileVersion: 68, 2, 0, 0
[10/16/2024 15:11:21] : [FAIL] - PROCESS: EdgeTransport PID(22780) UNEXPECTED
MODULE: TmAMSIProvider64.dll COMPANY: Trend Micro Inc.
PATH: C:\Windows\system32\TmAMSI\TmAMSIProvider64.dll
FileVersion: 8.55.0.1302
[10/16/2024 15:11:21] : [FAIL] - PROCESS: hostcontrollerservice PID(4696)
UNEXPECTED MODULE: TmAMSIProvider64.dll COMPANY: Trend Micro Inc.
PATH: C:\Windows\system32\TmAMSI\TmAMSIProvider64.dll
FileVersion: 8.55.0.1302
[10/16/2024 15:11:22] : [FAIL] - PROCESS: Microsoft.Exchange.Diagnostics.Service
PID(21120) UNEXPECTED MODULE: TmAMSIProvider64.dll COMPANY: Trend Micro Inc.
PATH: C:\Windows\system32\TmAMSI\TmAMSIProvider64.dll
FileVersion: 8.55.0.1302
[10/16/2024 15:11:22] : [FAIL] - PROCESS: Microsoft.Exchange.Diagnostics.Service
PID(21120) UNEXPECTED MODULE: perfSmexPerfMonMgr.dll COMPANY: Trend Micro Inc.
PATH: C:\Program Files\Trend Micro\Smex\perfSmexPerfMonMgr.dll
FileVersion: 14.0.0.1158
[10/16/2024 15:11:28] : [FAIL] - PROCESS: MSExchangeDagMgmt PID(10808) UNEXPECTED
MODULE: TmAMSIProvider64.dll COMPANY: Trend Micro Inc.
PATH: C:\Windows\system32\TmAMSI\TmAMSIProvider64.dll
FileVersion: 8.55.0.1302
[10/16/2024 15:11:29] : [FAIL] - PROCESS: MSExchangeHMHost PID(5372) UNEXPECTED
MODULE: TmAMSIProvider64.dll COMPANY: Trend Micro Inc.
 PATH: C:\Windows\system32\TmAMSI\TmAMSIProvider64.dll
FileVersion: 8.55.0.1302
[10/16/2024 15:11:29] : [FAIL] - PROCESS: MSExchangeHMWorker PID(12840) UNEXPECTED
MODULE: TmAMSIProvider64.dll COMPANY: Trend Micro Inc.
PATH: C:\Windows\system32\TmAMSI\TmAMSIProvider64.dll
FileVersion: 8.55.0.1302
[10/16/2024 15:11:33] : [FAIL] - PROCESS: w3wp PID(26032) UNEXPECTED MODULE:
TmAMSIProvider64.dll COMPANY: Trend Micro Inc.
PATH: C:\Windows\system32\TmAMSI\TmAMSIProvider64.dll
FileVersion: 8.55.0.1302
[10/16/2024 15:11:36] : [FAIL] - PROCESS: w3wp PID(27320) UNEXPECTED MODULE:
TmAMSIProvider64.dll COMPANY: Trend Micro Inc.
PATH: C:\Windows\system32\TmAMSI\TmAMSIProvider64.dll
FileVersion: 8.55.0.1302
[10/16/2024 15:15:54] : Analyzed Exchange Processes
[10/16/2024 15:15:54] : Testing for EICAR files
[10/16/2024 15:15:55] : Possible AV Scanning found
[10/16/2024 15:15:55] : WARNING: Found 26 UnExpected modules loaded into Exchange
Processes
[10/16/2024 15:15:55] : WARNING:
W3wp.exe is not present in the recommended Exclusion list but we found 3rd Party
modules on it and could affect Exchange performance or functionality.
[10/16/2024 15:15:55] : WARNING: Found 2 UnExpected modules loaded into W3wp.exe
[10/16/2024 15:15:55] : WARNING: Review D:\Sources\Exchange 2019 CU14\
BadExclusions-20241016031054.txt For the full list.