1 Reply Latest reply on Jun 18, 2014 9:31 AM by llamamecomoquieras

    adding low-risk processes with path and wildcards




      Is there a possibility to add processes to the low-risk processes list including wildcards and or path?


      I find it quite unsafe without, because malware can abuse this by using a processname equal to a low-risked process name.


      If had bad intentions I simply read out the low risk processes from the ProcessList registrykey  (HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Low\) and abuse one of the listed names


      and certainly when you want to low rist a process with a common name, by adding the path of the process the risk would be minimized.





      Message was edited by: mcdave on 18/06/14 08:55:51 CDT