MBAM Exclusions aren't working.

[ParseMe]

Hey Guys,

 

So, I had added some exclusions to MBAM, but I can see where MBAM is still looking at the files in the excluded directory via ProcessMonitor.

 

Take a look at the attached image. What am I missing?

[daledoc1]

Hello and :

 

From your screenshot, this appears to be a business computer under IT support contract from Kaseya?

 

EDITED for CLARITY:

 

As such, I would suggest contacting Kaseya first.

 

(You may also be able to work with your own IT folks, or perhaps log a ticket with the Business Support Team HERE.)

 

They would be better positioned to assist you with this, as this forum is targeted largely to Home users.

 

Thanks,

[ParseMe]

Hello and :

 

From your screenshot, this appears to be a business computer under IT support contract from Kaseya?

 

As such, I would suggest contacting your own IT folks, or logging a ticket with the Business Support Team HERE.

 

They would be better positioned to assist you with this, as this forum is targeted largely to Home users.

 

Thanks,

 

Okay, I'll also o that. But, in troubleshooting, I uninstalled the Kaseya Version and installed just MBAM Pro, and the same results are happening.

[daledoc1]

Hi:
 
Staff will correct me if I am wrong, but your Kaseya contract may be the determining factor.

I am pretty sure that, as a Kaseya customer, you should first contact Kaseya support per your contract with them.

 

There is a special forum area for Business customers HERE.  But I suspect they would likewise suggest contacting Kaseya first.

 

Perhaps our forum staff will have some different advice or suggestions.

 

Thanks,

[ParseMe]

... I have had a ticket in with Kaseya for four days. 

 

The fact that I can uninstall the Kaseya version and install the regular Pro version, and the problem still occurs, tells me it's not a "Kaseya" problem, it tells me either its a Program issue, or I'm doing the exclusions incorrectly.

[daledoc1]

Hi:

 

It's a question of your support contract.

You may be bound by that contract to obtain support from Kaseya.

Doing so elsewhere might void the contract or create other problems.

 

I'm sorry.

I wish I could help you.

 

But, this recommendation from forum staff has been the norm for other Kaseya customers posting here.

 

Perhaps a forum staff member will have some additional or different advice.

 

Thanks again,

[ParseMe]

I didn't know I needed a support contract to post on a forum...

[daledoc1]

I didn't know I needed a support contract to post on a forum...

 

No, you don't need a contract to post here.

 

What I said was that your existing support contract with Kaseya may require that you use them for support directly, instead of using this forum (which is for home users).

 

That is all.

 

I'm sorry I did not explain it clearly.

 

Again, the staff members may have additional or different advice for you.

 

Take care,

[ParseMe]

I'm not worried about it. I've disabled the Active System Protection. We're replacing MBAM with Hitman Pro due to an RMM change.

 

I'm not impressed by the support I received at all from here. I'll make sure to pass this info along to our Account Rep. 

 

I asked a question directly about MalwareBytes Exclusions, which I verified was still an issue on a regular Pro version. The only thing our "Support Contract" requires is we pay every year to keep it up and receive horrible support from Kaseya.

 

The question I asked should of been addressed regardless of "What support contract" BS I have.

 

Needless to say, I wont be using these forums any longer. I received the help I needed from Reddit's /r/SysAdmin.

[tetonbob]

The Ignore List does not preclude query of the directory or files in the directory. The Ignore List precludes action by MBAM on anything in the list.

MBAM protection, via mbamservice, queries processes attempting to enter memory. An MBAM scan, via mbam.exe would do the same for a scan. Query, but take no action if in the Ignore List.

[AdvancedSetup]

@ParseMe

 

Sorry for the late reply from someone on Staff. Daledoc1 was simply trying to assist you as best she could as a home user herself offering her own free time to other users, please don't take your frustration out on her.

 

Hopefully Bob's answer above was what you were looking for but if not please let us know. The issue with support in general is that Kaseya has contracted and asked us not to specifically provide support directly to Kaseya users as they use a custom version of the program that some members of support may not be familiar with and they don't want other issues created on their systems.

 

Thank you

 

Ron