I can't add path in a policy "Prevent the creation of new executable files in the Program Files folder" like "C:\Program Files\exclu"
How to manage file and folder exclusions in VirusScan Enterprise 8.x using wildcards Technical Articles ID: KB50998 Last Modified: 5/12/2016
The first exclusion would be treated as a filename (abc), and the second would be treated as a directory (...\abc\...).
Access protection policies in VSE are meant to have processes listed not file paths. For example, if foo.exe were needing to create new executable files in the Program Files folder, you would need to add "foo.exe" as a process to exclude, not the path that foo.exe would create.