Type:
Information
Summary:
If Endpoint protection flags one of our modules, we recommend whitelisting our modules. Below is a listing of the modules to include in the whitelist.
Additional Information:
Occasionally, Endpoint Protection Systems and Anti-Virus software may flag our modules as a threat, and interfere with our encryption processing. As part of its normal operation, our software performs actions that some endpoint protection utilities may consider suspicious. Encryptionizer acts as a filter driver, which sits between the application and the file system layers to process encrypted data. Some of the Encryptionizer components are designed to prevent hacking or inspection of the encryption process in order to keep the software and data secure. In addition, some endpoint protection systems will mislabel Encryptionizer as ransomware when files are being encrypted.
These attributes and behaviors are by design, but some endpoint protection schemes interpret those actions as suspicious. Note: all of our modules are digitally signed by a trusted authority, and our filter drivers themselves are also signed by Microsoft as required.
It is recommended that you whitelist our modules in your endpoint definitions.
You should whitelist all Files in the NetLib Install Folder (default C:Program Files (x86)NetLibNEP, C:Program Files (x86)NetLibFSQL, C:Program Files (x86)NetLibSECSQL – depending on your installation settings and the product installed), as well as some in the Windows System32, System32 drivers and SysWow64
If your endpoint protection platform can whitelist modules based on certificate match, please contact NetLib Support for a definition file.
Below is a listing of the modules to be whitelisted:
System32 Drivers Folder
C:Windowssystem32Driversnlcbhelp.sys
C:Windowssystem32Driversnlem1402.sys
C:Windowssystem32Driversnlemsys.sys
System32 Folder
C:Windowssystem32nlcbhelp.dll
C:Windowssystem32nlcert.dll
C:Windowssystem32nlem1402.dll
C:Windowssystem32nlemlog.dll
C:Windowssystem32nlemsys.dll
C:Windowssystem32nllicense.dll
C:Windowssystem32nlnetutil.dll
C:Windowssystem32nltools.dll
SysWow64 Folder
C:WindowsSysWow64nlcbhelp.dll
C:WindowsSysWow64nlcert.dll
C:WindowsSysWow64nlem1402.dll
C:WindowsSysWow64nlemlog.dll
C:WindowsSysWow64nlemsys.dll
C:WindowsSysWow64nllicense.dll
C:WindowsSysWow64nlnetutil.dll
C:WindowsSysWow64nltools.dll
NetLib Encryptionizer Install Folder (%EncryptionizerInstallFolder%)
Main NetLib Folder
%EncryptionizerInstallFolder%*.lfx
%EncryptionizerInstallFolder%bldcmd.exe
%EncryptionizerInstallFolder%dircmd.exe
%EncryptionizerInstallFolder%license.nep.txt
%EncryptionizerInstallFolder%NEPAdmin.exe
%EncryptionizerInstallFolder%nepadmin.ini
%EncryptionizerInstallFolder%nlaccessI32.dll
%EncryptionizerInstallFolder%nlaccessI64.dll
%EncryptionizerInstallFolder%nlaccessO32.dll
%EncryptionizerInstallFolder%nlaccessO64.dll
%EncryptionizerInstallFolder%nlaccessR32.dll
%EncryptionizerInstallFolder%nlaccessR64.dll
%EncryptionizerInstallFolder%nlbld.dll
%EncryptionizerInstallFolder%nlcbconfig.dll
%EncryptionizerInstallFolder%nlcbconfig.exe
%EncryptionizerInstallFolder%nlcbkms.dll
%EncryptionizerInstallFolder%nlcbtask.exe
%EncryptionizerInstallFolder%NLDeactivate.exe
%EncryptionizerInstallFolder%nllicense4.exe
%EncryptionizerInstallFolder%NLMenu.exe
%EncryptionizerInstallFolder%nlrun.exe
%EncryptionizerInstallFolder%reg3.dll
%EncryptionizerInstallFolder%reg3.exe
%EncryptionizerInstallFolder%sectool.exe
%EncryptionizerInstallFolder%setkmk.exe
Logs
%EncryptionizerInstallFolder%Logsinstall.log
%EncryptionizerInstallFolder%LogsLicensing.Log.txt
%EncryptionizerInstallFolder%Logsnl-activity-000.log
%EncryptionizerInstallFolder%Logs__lock.bin
Plugins
%EncryptionizerInstallFolder%Pluginsprofileplugin2.dll
%EncryptionizerInstallFolder%PluginsNLMKeyAzure.dll
Uninstall
%EncryptionizerInstallFolder%UninstallClipboard.lmd
%EncryptionizerInstallFolder%Uninstallfsql_uninstall.dat
%EncryptionizerInstallFolder%Uninstallfsql_uninstall.xml
%EncryptionizerInstallFolder%UninstallIRIMG1.BMP
%EncryptionizerInstallFolder%UninstallIRIMG2.BMP
%EncryptionizerInstallFolder%Uninstalllua5.1.dll
%EncryptionizerInstallFolder%Uninstallnetlib.ico
%EncryptionizerInstallFolder%Uninstalluninstall.exe
%EncryptionizerInstallFolder%Uninstalluninstall.fsql.nep.dist.exe
%EncryptionizerInstallFolder%UninstallUtilities.lmd
%EncryptionizerInstallFolder%UninstallWow64.lmd
x64 binaries
%EncryptionizerInstallFolder%x64nlbld.dll
%EncryptionizerInstallFolder%x64nlcbconfig.dll
%EncryptionizerInstallFolder%x64reg3.dll
If you have the EKM Client installed as well:
System32 Folder
C:Windowssystem32nlactivity.dll
SysWow64 Folder
C:WindowsSysWow64nlactivity.dll
Plugins
%EncryptionizerInstallFolder%PluginsNLMKey.dll
EEM
%EncryptionizerInstallFolder%EEMMoveRestart.exe
%EncryptionizerInstallFolder%EEMNLMActivity.dll
%EncryptionizerInstallFolder%EEMNLMClient.exe