SAP Knowledge Base Article - Preview

3315834 - Antivirus is reporting that files under \usr\sap\<SID>\<instance name>\data\cache are a malware


A defender antivirus is reporting that there are files being created by the Internet Communication Manager process (icman.exe) under the \usr\sap\<SID>\<instance name>\data\cache directory (e.g. M0x2B0) which are identified as a malware.



ABAP Platform all versions.

SAP NetWeaver all versions.

SAP Web Dispatcher all versions.


ABAP platform all versions ; SAP NetWeaver all versions ; SAP Web Dispatcher all versions


malware, cache, icm, defender, vulnerability , KBA , BC-CST-IC , Internet Communication Manager , BC-CST-WDP , Web Dispatcher , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.