cancel
Showing results for 
Search instead for 
Did you mean: 
xpath
Level 8
Report Inappropriate Content
Message 1 of 10

Malwarebytes folder exclusion

My customer has Mcafee Endpoint Security Thread prevention managed by an EPO console

 

They have asked me to exclude some folders in mcafee as this is stopping malwarebytes from autoupdateing.

 

Normally I would be happy doign this with a virusscan enterprise policy but the customer has moved over to Threatprevention and I cannot see an option to include subfolder in the policy.

 

here are some of the folders they want me to add as exclusions. how can I add the policy with subfolders rather than having to enter each on manually as this will take a while to do

 

Thanks.

Malwarebytes Management Console

C:\ProgramData\Malwarebytes

C:\Program Files(x86)\Malwarebytes' Managed Client

C:\Program Files (x86)\Malwarebytes' Managed Client\SCComm.exe

Malwarebytes anti-malware

C:\Program Files(x86)\Malwarebytes' Anti-Malware

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamapi.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamdor.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamhelper.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbampt.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.dll
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamext.dll
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamnet.dll
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamcore.dll

C:\ProgramData\Malwarebytes

C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref
C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.new
C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.new.yaml
C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys

C:\Windows\System32\drivers\mbam.sys

Malwarebytes Anti-Exploit

C:\Program Files(x86)\Malwarebytes Anti-Exploit

C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe
C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe
C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-cli.exe
C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe
C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.dll

C:\ProgramData\Malwarebytes

 

9 Replies
Reliable Contributor Daniel_S
Reliable Contributor
Report Inappropriate Content
Message 2 of 10

Re: Malwarebytes folder exclusion

Hey this is straight forward as this are the same steps as with VSE:

Go to the on-access-scan policies

show advanced

process settings

exclusions -> add

and here you can add paths,  filenames, extensions or what ever needs to be excluded.

 

Best regards
Dan
xpath
Level 8
Report Inappropriate Content
Message 3 of 10

Re: Malwarebytes folder exclusion

Yes,

 

But my question was how to add them and include"sub folders" with out having to manually add each folder path.

 

thanks

 

Reliable Contributor Daniel_S
Reliable Contributor
Report Inappropriate Content
Message 4 of 10

Re: Malwarebytes folder exclusion

what about using wildcards like:

**malwarebytes**\ and check the "also exclude subfolders" option???

Best regards
Dan
undrstr
Level 9
Report Inappropriate Content
Message 5 of 10

Re: Malwarebytes folder exclusion

Hi In order to get to the area where you can add or check off the subfolders for the exclusions go to the following:

 

1.   Under the Policy Catalog choose the EndPoint Security -- and then the On-Access scan option
2.   In the On-Access scan choose the policy you're using to edit it
3.   Then click the "show Advanced" button on the top left to see everything available.
4.   Scroll down the options until you see the "Process Types" section 
       a. Under the Process Types continue to scroll down until you see the Exclusions Box.  It is in there that it allows you to enter the exclusions with subfolders option.

Hope this helps.  You can also choose the Standard, High and Low Risk options if that is how you are configuring the Anti-Virus portion of ENS.

cheers;

Mike

Reliable Contributor Daniel_S
Reliable Contributor
Report Inappropriate Content
Message 6 of 10

Re: Malwarebytes folder exclusion

Well yes that´s exactly what i wrote above...

Best regards
Dan
xpath
Level 8
Report Inappropriate Content
Message 7 of 10

Re: Malwarebytes folder exclusion

Awesome, that was what I was looking for,  I was told that it was the

Endpoint Security Threat prevention : Access Protection Policy that needed to be edited.

 

However I have Manually added exclusions to the end point security Common Exclusions list,  I will clear that list and leave it as it was previously.

 

Thanks.

xpath
Level 8
Report Inappropriate Content
Message 8 of 10

Re: Malwarebytes folder exclusion

Sorry Dan I miss unerstodd your orignial reply.

Reliable Contributor Daniel_S
Reliable Contributor
Report Inappropriate Content
Message 9 of 10

Re: Malwarebytes folder exclusion

NVM you´re welcome.

You should mark the thread as answered.

Best regards
Dan
xpath
Level 8
Report Inappropriate Content
Message 10 of 10

Re: Malwarebytes folder exclusion

Thanks for you help, Kudos to you both.

Hopefully there will be no further issues with auto updates to Malwarebytes corporiate edt.

More McAfee Tools to Help You
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • Visit: Business Service Portal
  • More: Search Knowledge Articles
  • ePolicy Orchestrator Support

    • Download the new ePolicy Orchestrator (ePO) Support Center Extension which simplifies ePO management and provides support resources directly in the console. Learn more about ePO Support Center