I'm trying to add a low-risk process to On-Access scan called agent.exe (cisco). I already have a high-risk agent.exe (macrovision) defined. When I try to add a new low-risk process it assumes it's the older (macrovision) process. What's the correct way to handle this?
You're running into a limitation of the feature.
You cannot have processes of the same name in multiple profiles.
The product enhancement request you're looking for is to have the profiles identify processes by path\name, not just name.