Excluding Zoom from antivirus and DLP software

While typically not flagged as a potential issue, some antivirus and DLP software will block the Zoom desktop client and prevent it from operating correctly. IT admins can configure their antivirus and DLP software to ensure Zoom is on each program’s allow or exclusion list, while preventing unauthorized access by other malicious software.

For specifics on how to add Zoom to your antivirus and DLP software, refer to that specific product's support documentation.

Requirements for excluding Zoom from virus and DLP scans

• Zoom desktop app for Windows, macOS, or Linux
  Note: This includes the standard desktop client, as well as the VDI clients. 
• Antivirus or DLP software that provides an allow or exclusion list

Which files to exclude on Windows

To prevent any issues between the Zoom desktop client and your antivirus or DLP software, add the following items to an exclusion or allow list provided in the antivirus or DLP software:

C:\Users\*\AppData\Roaming\Zoom\<bin>\airhost.exe
C:\Users\*\AppData\Roaming\Zoom\<bin>\zCrashReport64.exe
C:\Users\*\AppData\Roaming\Zoom\<bin>\zCrashReport.exe
C:\Users\*\AppData\Roaming\Zoom\<bin>\Zoom.exe
C:\Users\*\AppData\Roaming\Zoom\<bin>\Zoom_launcher.exe
C:\Users\*\AppData\Roaming\Zoom\<bin>\ZoomDocConverter.exe
C:\Users\*\AppData\Roaming\Zoom\<bin>\ZoomOutlookIMPlugin.exe
C:\Users\*\AppData\Roaming\Zoom\<bin>\ZoomOutlookMAPI.exe
C:\Users\*\AppData\Roaming\Zoom\<bin>\ZoomOutlookMAPI64.exe
C:\Users\*\AppData\Roaming\Zoom\<bin>\zTscoder.exe
C:\Users\*\AppData\Roaming\Zoom\<bin>\zUpdater.exe
C:\Users\*\AppData\Roaming\Zoom\<bin>\aomhost64.exe
C:\Users\*\AppData\Roaming\Zoom\<bin>\aomhost.exe
C:\Users\*\AppData\Roaming\Zoom\<bin>\CptControl.exe
C:\Users\*\AppData\Roaming\Zoom\<bin>\CptHost.exe
C:\Users\*\AppData\Roaming\Zoom\<bin>\CptInstall.exe
C:\Users\*\AppData\Roaming\Zoom\<bin>\CptService.exe
C:\Users\*\AppData\Roaming\Zoom\<bin>\installer.exe
C:\Users\*\AppData\Roaming\Zoom\zWebview2Agent.exe
C:\Users\*\AppData\local\temp\CptInstall.exe
C:\Users\*\AppData\local\Zoom\plugin\cef_x86\zCefAgent.exe
C:\Users\*\AppData\local\Zoom\plugin\cef_x64\zCefAgent.exe
C:\Users\*\AppData\local\Zoom\plugin\cef_arm64\zCefAgent.exe

C:\<Program Files>\Zoom\<bin>\airhost.exe
C:\<Program Files>\Zoom\<bin>\zCrashReport64.exe
C:\<Program Files>\Zoom\<bin>\zCrashReport.exe
C:\<Program Files>\Zoom\<bin>\Zoom.exe
C:\<Program Files>\Zoom\<bin>\Zoom_launcher.exe
C:\<Program Files>\Zoom\<bin>\ZoomDocConverter.exe
C:\<Program Files>\Zoom\<bin>\ZoomOutlookIMPlugin.exe
C:\<Program Files>\Zoom\<bin>\zTscoder.exe
C:\<Program Files>\Zoom\<bin>\zUpdater.exe
C:\<Program Files>\Zoom\<bin>\aomhost64.exe
C:\<Program Files>\Zoom\<bin>\aomhost.exe
C:\<Program Files>\Zoom\<bin>\zCrashReport64.exe
C:\<Program Files>\Zoom\<bin>\zCrashReport.exe
C:\<Program Files>\Zoom\<bin>\CptControl.exe
C:\<Program Files>\Zoom\<bin>\CptHost.exe
C:\<Program Files>\Zoom\<bin>\CptInstall.exe
C:\<Program Files>\Zoom\<bin>\CptService.exe
C:\<Program Files>\Zoom\<bin>\installer.exe
C:\<Program Files>\Zoom\<bin>\zWebview2Agent.exe

C:\<Program Files>\Common Files\Zoom\Support\CptService.exe (MSI and exe)
C:\<Program Files>\Common Files\Zoom\Support\CptControl.exe (MSI and exe)
C:\<Program Files>\Common Files\Zoom\Support\CptHost.exe (exe only)
C:\<Program Files>\Common Files\Zoom\Support\zCrashReport64.exe (exe only)

Notes:

• The <Program Files> variables mentioned above may be either \Program Files\ or \Program Files (x86)\, depending on if the 64-bit or 32-bit version of the Zoom client that has been installed. 
• The <bin> locations above may represent \bin\, \bin_00\, \bin_01\, etc.

VDI-specific files

When using Zoom’s Virtual Desktop Infrastructure (VDI) solution, the following files should be added to an exclusion or allow list provided in the antivirus or DLP software:

VDI Client (Similar to Windows)

C:\Program Files\ZoomVDI\bin\airhost.exe
C:\Program Files\ZoomVDI\bin\aomhost64.exe
C:\Program Files\ZoomVDI\bin\CptControl.exe
C:\Program Files\ZoomVDI\bin\CptHost.exe
C:\Program Files\ZoomVDI\bin\CptInstall.exe
C:\Program Files\ZoomVDI\bin\CptService.exe
C:\Program Files\ZoomVDI\bin\Installer.exe
C:\Program Files\ZoomVDI\bin\zCrashReport.exe
C:\Program Files\ZoomVDI\bin\zCrashReport64.exe
C:\Program Files\ZoomVDI\bin\Zoom.exe
C:\Program Files\ZoomVDI\bin\ZoomOutlookIMPlugin.exe
C:\Program Files\ZoomVDI\bin\ZoomOutlookMAPI\ZoomOutlookMAPI.exe
C:\Program Files\ZoomVDI\bin\ZoomOutlookMAPI\ZoomOutlookMAPI64.exe
C:\Program Files\ZoomVDI\bin\ZoomVDITool.exe
C:\Program Files\ZoomVDI\bin\zTscoder.exe
C:\Program Files\ZoomVDI\bin\zUpdater.exe
C:\Program Files\ZoomVDI\bin\zWebview2Agent.exe
C:\Program Files\ZoomVDI\bin\zWspExtension.exe

Note: For VDI Client version 6.2.13 or below, C:\Program Files\ZoomVDI\bin\ZoomDocConverter.exe will also need to be exluded.

Universal Plugin Management

C:\Program Files\ZoomVDIPluginManagement\CptControl.exe
C:\Program Files\ZoomVDIPluginManagement\CptInstall.exe
C:\Program Files\ZoomVDIPluginManagement\CptService.exe
C:\Program Files\ZoomVDIPluginManagement\ZoomVDIPluginManagement.exe
C:\Program Files\ZoomVDIPluginManagement\ZoomVDITool.exe
C:\Program Files\ZoomVDIPluginManagement\bin\zUpdater.exe
C:\Program Files\Common Files\ZoomVDIPluginManagement\Support\CptControl.exe
C:\Program Files\Common Files\ZoomVDIPluginManagement\Support\CptInstall.exe
C:\Program Files\Common Files\ZoomVDIPluginManagement\Support\CptService.exe

Universal Plugin

C:\Program Files\ZoomVDIUniversalPlugin\airhost.exe
C:\Program Files\ZoomVDIUniversalPlugin\aomhost64.exe
C:\Program Files\ZoomVDIUniversalPlugin\zCrashReport64.exe
C:\Program Files\ZoomVDIUniversalPlugin\Zoom.exe
C:\Program Files\ZoomVDIUniversalPlugin\plugin\zWspExtension.exe

Which files to exclude on macOS

To prevent any issues between the Zoom desktop client and your antivirus or DLP software, add the following items to an exclusion or allow list provided in the antivirus or DLP software:

Within the zoom.us.app bundle

zoom.us.app/Contents/Frameworks/airhost.app
zoom.us.app/Contents/Frameworks/aomhost.app
zoom.us.app/Contents/Frameworks/caphost.app
zoom.us.app/Contents/Frameworks/CptHost.app
zoom.us.app/Contents/Frameworks/Transcode.app
zoom.us.app/Contents/Frameworks/ZMScreenshot.app
zoom.us.app/Contents/Frameworks/ZoomAutoUpdater.app
zoom.us.app/Contents/Frameworks/ZoomPhone.app
zoom.us.app/Contents/Frameworks/ZoomClips.app
zoom.us.app/Contents/Frameworks/ZoomUninstaller.app

Within the /Library/Application Support/zoom.us folder

/Library/Application Support/zoom.us/CefAgent/ZoomCefAgent.app
/Library/Application Support/zoom.us/Plugins/airhost.app
/Library/Application Support/zoom.us/Plugins/aomhost.app
/Library/Application Support/zoom.us/Plugins/Frameworks/ZoomAutoUpdater.app
/Library/Application Support/zoom.us/Plugins/Frameworks/ZoomPhone.app

VDI-specific files

When using Zoom’s Virtual Desktop Infrastructure (VDI) solution, the following files should be added to an exclusion or allow list provided in the antivirus or DLP software:

Within the ZoomVDI.app bundle

/Applications/ZoomVDI.app/
/Applications/ZoomVDI.app/Contents/Frameworks/MediaEngine/zoom.app
/Applications/ZoomVDI.app/Contents/Frameworks/MediaEngine/zoom.app/Contents/Frameworks/caphost.app
/Applications/ZoomVDI.app/Contents/Frameworks/MediaEngine/zoom.app/Contents/Frameworks/Zoom Workspace Aomhost.app

Within the ZoomVDIUninstaller.app bundle

/Applications/ZoomVDIUninstaller.app

Within the Zoom VDI Plugin Management.app bundle

/Applications/Zoom VDI Plugin Management/Zoom VDI Plugin Management.app
/Applications/Zoom VDI Plugin Management/Zoom VDI Plugin Management.app/Contents/Frameworks/ZMVDIAutoUpdater.app

Within the Uninstall Zoom VDI Plugin Management.app bundle

/Applications/Zoom VDI Plugin Management/Uninstall Zoom VDI Plugin Management.app

Within /Library/PrivilegedHelperTools folder

/Library/PrivilegedHelperTools/us.zoom.ZoomVDIDaemon 

Within /Library/Audio/Plug-Ins folder

/Library/Audio/Plug-Ins/HAL/ZoomAudioDevice.driver 

Additional exclusions

For some older VDI versions, such as 5.16.10 and 5.13.0, there are additional legacy folders that will need to be excluded: 

/Library/Application Support/ZoomVDIAus/Frameworks/ZMVDICommandLineTool.app
/Applications/ZoomVDI.app/Contents/Frameworks/MediaEngine/zoomhdxMediaEngine.app
/Applications/ZoomVDI.app/Contents/Frameworks/MediaEngine/zoomhdxMediaEngine.app/Contents/Frameworks/caphost.app
/Applications/ZoomVDI.app/Contents/Frameworks/MediaEngine/zoomhdxMediaEngine.app/Contents/Frameworks/aomhost.app
/Applications/Zoom VDI Plugin Management/Uninstall Zoom VDI Plugin Management.app/Contents/MacOS/ZMVDIInstallHelper
/usr/local/bin/zvtool

Which files to exclude on Linux

To prevent any issues between the Zoom desktop client and your antivirus or DLP software, add the following items to an exclusion or allow list provided in the antivirus or DLP software:

Linux Client

~/opt/zoom/Qt

VDI-specific files

Linux VDI Universal plugin

/usr/lib/zoomvdi-universal-plugin/Qt
/usr/lib/zoomcitrixplugin/Qt
/usr/lib/zoomvmwareplugin/Qt
/usr/lib/zoomvdi-universal-plugin/zoom
/usr/lib/zoomvdi-universal-plugin/crash_processor
/usr/lib/zoomvdi-universal-plugin/Zoom_VDI_Plugin_Management
/usr/lib/zoomvdi-universal-plugin/aomhost