Exclude By extension

[MalAlexS]

Hello

Specific question - Can you tell me how to exclude by file extension in malwarebytes?
Please note I am very keen indeed to avoid a debate about why I shouldn't be doing this!

Many thanks

Alex

[Porthos]

There many things that are not targeted anyway. What else do you want to exclude.

MBAM will not target; JS, JSE,  PY, .HTML, VBS, VBE, WSF, .CLASS, SWF, SQL, BAT, CMD, PDF, PHP, etc.
It also does not target documents such as; PDF, DOC, DOCx, XLS, XLSx, PPT, PPS, ODF, RTF, etc.
It also does not target media files;  MP3, WMV, JPG, GIF, etc.

[MalAlexS]

How about .FLAC, .MID, .WAV ?

I still have a specific question, how can I exclude extensions?

Many thanks for the response..

[Porthos]

35 minutes ago, Porthos said:

It also does not target media files;  MP3, WMV, JPG, GIF, etc.

 

11 minutes ago, MalAlexS said:

How about .FLAC, .MID, .WAV ?

Those are media files.

11 minutes ago, MalAlexS said:

I still have a specific question, how can I exclude extensions?

You can not. Staff will have to add to this if I am mistaken.

Edited June 3, 2016 by Porthos

[MalAlexS]

Thanks

The other extension I want to remove is .RX2.

I've googled but can't find any article or documentation which specially states which extensions are excluded, does anybody know?
Also what's the best way to log this functionality as feature request?

Cheers...

[Aura]

From what I can find, .RX2 is an audio (media) extension, so it won't be targetted by Malwarebytes.

I'll also say the same as Porthos, you cannot add file type exclusion in Malwarebytes.

[MalAlexS]

I've googled but can't find any article or documentation which specially states which extensions are excluded, does anybody know?
Also what's the best way to log this functionality as feature request?

Cheers...

[Firefox]

4 minutes ago, MalAlexS said:

Also what's the best way to log this functionality as feature request?

Comments and Suggestions is your best bet to suggest to add features.

[MalAlexS]

Thanks for that, I've created a thread over there.

So the last Q is where is the article or documentation which specially states which extensions are excluded?

Cheers...

[Firefox]

I would assume its in the manuel

Malwarebytes Anti-Malware
Users Guide
Version 2.2.1

You can read the manual below to understand all functions of the new version....

Online Users Guide => HERE <=

Download PDF from => HERE <= (or just right click and choose save as)

NOTE: There is an FAQ section with valuable information located here:
Common Questions, Issues, and their Solutions

[MalAlexS]

Well I have already looked. I'm afraid the question still stands, where is the article or documentation which specially states which extensions are excluded?   Please don't answer if you don't know.

Thanks anyway.

Edited June 3, 2016 by MalAlexS

[Firefox]

1 hour ago, MalAlexS said:

Please don't answer if you don't know.

People are only trying to help answer your questions, no need to be rude about it...

[Porthos]

1 hour ago, MalAlexS said:

I'm afraid the question still stands, where is the article or documentation which specially states which extensions are excluded?

There is NOT one. This post is always offered by Experts / Staff  to explain this

https://forums.malwarebytes.org/topic/183486-fileszip-js-and-vbe/?do=findComment&comment=1041586

6 minutes ago, Firefox said:

People are only trying to help answer your questions, no need to be rude about it...

Same here.

[MalAlexS]

57 minutes ago, Firefox said:

People are only trying to help answer your questions, no need to be rude about it...

You want me to thank you twice? OK then. Thanks again.

[MalAlexS]

52 minutes ago, Porthos said:

There is NOT one. This post is always offered by Experts / Staff  to explain this

https://forums.malwarebytes.org/topic/183486-fileszip-js-and-vbe/?do=findComment&comment=1041586

Same here.

Thanks that's clearer, appreciated. So I guess I'm hoping for a more definitive answer from them.

[David H. Lipman]

I wrote that.  What would be more definitive ?

For the most part, MBAM ignores the file extension.  It looks at the file's content.  Thus MBAM will detect a malicious executable even if it is renamed  to DAVE.TXT.

Where MBAM pays attention to the extension is where you have a .EXE file renamed to something like .PDF or if one has a file with a double-extension such as .PDF.EXE

[ double-extension exploits "Hide extensions of known file types" ]

Edited June 3, 2016 by David H. Lipman

[Porthos]

10 minutes ago, MalAlexS said:

Thanks that's clearer, appreciated. So I guess I'm hoping for a more definitive answer from them

Same thing I posted in post #2

[MalAlexS]

I am trying to be nice here.

I'm hoping staff will post a definitive list of excluded extensions ? Any more comments thx for everybodies help.

[MalAlexS]

And to add this is a very important specific question for me I know others might think I being picky but that is the answer I am looking for. They should also note I have been friendly, grateful, thankful and polite throughout the thread so far. 

Edited June 4, 2016 by MalAlexS

[David H. Lipman]

There is no "definitive list of excluded extensions" based upon the fact the software is geared toward file content and not by filename.

 

[MalAlexS]

8 hours ago, David H. Lipman said:

There is no "definitive list of excluded extensions" based upon the fact the software is geared toward file content and not by filename.

 

By that logic then all files are analysed otherwise it wouldn't know what the content is,  which would mean there are no filename extension exclusions.

I think I'll create a ticket at this point. Cheers.