1 Reply Latest reply on Jun 18, 2014 9:31 AM by llamamecomoquieras

    adding low-risk processes with path and wildcards

    mcdave

      Hi,

       

      Is there a possibility to add processes to the low-risk processes list including wildcards and or path?

       

      I find it quite unsafe without, because malware can abuse this by using a processname equal to a low-risked process name.

       

      If had bad intentions I simply read out the low risk processes from the ProcessList registrykey  (HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Low\) and abuse one of the listed names

       

      and certainly when you want to low rist a process with a common name, by adding the path of the process the risk would be minimized.

       

      regards,

      Dave

       

      Message was edited by: mcdave on 18/06/14 08:55:51 CDT