Jump to content

Whitelist Reg key


Recommended Posts

We have started to deploy Malwarebytes at our facility. We have setup a schedule scan every Tuesday. Now although we only have it deployed to 30 PC's, we noticed something in the scans.

 

HKU\S-1-5-21-3451057674-2693170720-1305275285-3285\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM|DisableRegistryTools

 

We use that in our environment with policies. I can exclude that key but I noticed that the number 3285/Software is always different per machine. How do i exclude that key and not be dependent on that number?

Link to post
Share on other sites

  • Staff

Hey Scoutt,

 

With the anti-malware for business version 1.80.1.1011, you can exclude that key with a wildcard symbol so it will exclude all the different users and machines. For example:

 

HKU\*\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM|DisableRegistryTools

 

That will stop your policies from being detected.

 

Thank you,

 

Ron S

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.