Ask a questionAsk a question
 

Proposed AnswerWhich .exe scans messenger files for virus

  • Sunday, September 20, 2009 8:07 AMLars SchmoldtMSFTUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    I just installed Forefront Client Security. Configuring File Transfer Options for Live Messenger I'm wondering which .exe scans files for viruses. Is this FSysAgent.exe inside \client\agent? Can anybody confirm that?

All Replies

  • Wednesday, September 23, 2009 10:56 PMChris MSFT Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Proposed Answer

    FSYSAgent.exe is the FEP Service executable, it is responsible for communicating  with the SCOM Agent to receive policy and send telemetry up. MPCmdRun.exe is used to start and schedule scans. Scans are actually performed by MsMpENG.exe. The larger problem here is that neither one of these executable provide an interface to allow a program like Live Messenger to request the scan of a certain file. ForeFront Endpoint Protection protects the client by using Realtime Protection to scan the file when Messenger tries to write the file to disk. The upside Live Messenger doesn't care what program you put in there it doesn't even have to be an AV product.

     

    Chris Norman, MCSE CISSP

    Stirling Beta Support Engineer

     

     

     

    • Proposed As Answer byChris MSFT Wednesday, September 23, 2009 10:56 PM
    •