Exclusions for Windows Defender users.

[Porthos]

Add to Malwarebytes Exclusions the following folders.

C:\Program Files\Windows Defender
C:\Program Files (x86)\Windows Defender
C:\ProgramData\Microsoft\Windows Defender (Enable hidden files to add this one.)

For Win 10 PRO only also add these Folders.
C:\Program Files\Windows Defender Advanced Threat Protection
C:\ProgramData\Microsoft\Windows Defender Advanced Threat Protection (Enable hidden files to add this one.)

For Windows Defender
Add these to FILE Exclusions

C:\Windows\System32\drivers\mbae64.sys
C:\Windows\System32\drivers\mbam.sys

C:\Windows\System32\drivers\MbamElam.sys
C:\Windows\System32\drivers\MBAMChameleon.sys
C:\Windows\System32\drivers\MBAMSwissArmy.sys
C:\Windows\system32\Drivers\farflt.sys

Add to Process exclusions the following files. (copy and paste works best on these)

C:\Program Files\Malwarebytes\Anti-Malware\MbamPt.exe

C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe

C:\Program Files\Malwarebytes\Anti-Malware\assistant.exe

C:\Program Files\Malwarebytes\Anti-Malware\malwarebytes_assistant.exe

C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe

C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe

C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

Folders
Also the MB folder in Program Files and the one in Program Data (it is hidden by default)

C:\Program Files\Malwarebytes
C:\ProgramData\Malwarebytes   (Enable hidden files to add this one.)

Feel free to reference this post to help users who like me who use Windows Defender with Malwarebytes Premium.

Porthos.

 

These can be adapted to most Antivirus programs.

These exclusions have allowed 0 issues with MB on all the computers I service.

For those who knock Defender....

http://news.thewindowsclub.com/windows-defender-tops-av-test-zero-day-malware-charts-89233/

 

 

 

Edited September 3, 2019 by Porthos

[dcollins]

Thanks for this. I've talked to our support teams about updating our current instructions, which lacks the driver information.

[BillH99999]

Would it be possible to get such a detailed posting for Norton Security as well?  

Also, shouldn't these be pinned to the top of the forum?  If one for each anti-virus program is too much to pin, then maybe one posting that includes multiple anti-viruses?

[Porthos]

1 hour ago, BillH99999 said:

Would it be possible to get such a detailed posting for Norton Security as well?  

I have been thinking of setting up a VM to do that and download trials of different AV's to do some screenshots. Got to find time to do it.

There are so many Norton products out there and Will have to trial and look at each (current ones only)

So many choices all around.

[Unicore]

Porthos, I've added the exclusions to both Defender and MBAM per your recommendation.  However, I've been running both MBAM and Defender for years without the exclusions and encountered no problems.  What is the advantage of including the exclusions in each program?  And thank you for the topic.

[Porthos]

39 minutes ago, Unicore said:

Porthos, I've added the exclusions to both Defender and MBAM per your recommendation.  However, I've been running both MBAM and Defender for years without the exclusions and encountered no problems.  What is the advantage of including the exclusions in each program?  And thank you for the topic.

 

 

It is not required to use exclusions but it can prevent "possible" issues and I always do it just in case.  I also think with all the ongoing changes with Windows 10 it is a good thing to do.

Better safe than sorry.

Edited May 3, 2017 by Porthos

[Unicore]

1 hour ago, Porthos said:

It is not required to use exclusions but it can prevent "possible" issues and I always do it just in case.  I also think with all the ongoing changes with Windows 10 it is a good thing to do.

Better safe than sorry.

I thought that was the case but I wanted to hear your thoughts on the matter.  I agree, better safe than sorry!  Thank you Porthos.

[Porthos]

3 minutes ago, Unicore said:

I thought that was the case but I wanted to hear your thoughts on the matter.  I agree, better safe than sorry!  Thank you Porthos.

Always Welcome.

[Kylee6114]

Within Server 2016, I had issues adding the process exclusions via the Defender Add Exclusions setting page. (Folder and file exclusions were fine.) I also couldn't manually apply process exclusions directly within the registry (via regedit or GPO). Powershell resolve the issue, though:

PS C:\> Add-MpPreference -ExclusionProcess "C:\Program Files\Malwarebytes\Anti-Malware\MbamPt.exe"
PS C:\> Add-MpPreference -ExclusionProcess "C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe"
PS C:\> Add-MpPreference -ExclusionProcess "C:\Program Files\Malwarebytes\Anti-Malware\assistant.exe"
PS C:\> Add-MpPreference -ExclusionProcess "C:\Program Files\Malwarebytes\Anti-Malware\malwarebytes_assi
PS C:\> Add-MpPreference -ExclusionProcess "C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe"
PS C:\> Add-MpPreference -ExclusionProcess "C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe"
PS C:\> Add-MpPreference -ExclusionProcess "C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe"

Nice to have the exclusions added, even though I wasn't having issues beyond the system tray being absent. Many thanks to Porthos for the list!!!

[Firefox]

1 hour ago, Kylee6114 said:

Within Server 2016, I had issues adding the process exclusions via the Defender Add Exclusions setting page. (Folder and file exclusions were fine.) I also couldn't manually apply process exclusions directly within the registry (via regedit or GPO). Powershell resolve the issue, though:

PS C:\> Add-MpPreference -ExclusionProcess "C:\Program Files\Malwarebytes\Anti-Malware\MbamPt.exe"
PS C:\> Add-MpPreference -ExclusionProcess "C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe"
PS C:\> Add-MpPreference -ExclusionProcess "C:\Program Files\Malwarebytes\Anti-Malware\assistant.exe"
PS C:\> Add-MpPreference -ExclusionProcess "C:\Program Files\Malwarebytes\Anti-Malware\malwarebytes_assi
PS C:\> Add-MpPreference -ExclusionProcess "C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe"
PS C:\> Add-MpPreference -ExclusionProcess "C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe"
PS C:\> Add-MpPreference -ExclusionProcess "C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe"

Nice to have the exclusions added, even though I wasn't having issues beyond the system tray being absent. Many thanks to Porthos for the list!!!

Hello and Welcome @Kylee6114

The topic your replied to is quite old and there has been many upgrades since then, so this list is old now.  Also FYI Malwarebytes is not supported in a Windows Server...

[IdefixPC]

On 4/29/2017 at 2:07 PM, Porthos said:

Add to Malwarebytes Exclusions the following folders.

C:\Program Files\Windows Defender
C:\Program Files (x86)\Windows Defender
C:\ProgramData\Microsoft\Windows Defender (Enable hidden files to add this one.)

For Win 10 PRO only also add these Folders.
C:\Program Files\Windows Defender Advanced Threat Protection
C:\ProgramData\Microsoft\Windows Defender Advanced Threat Protection (Enable hidden files to add this one.)

For Windows Defender
Add these to FILE Exclusions

C:\Windows\System32\drivers\mbae64.sys
C:\Windows\System32\drivers\mbam.sys

C:\Windows\System32\drivers\MbamElam.sys
C:\Windows\System32\drivers\MBAMChameleon.sys
C:\Windows\System32\drivers\MBAMSwissArmy.sys
C:\Windows\system32\Drivers\farflt.sys

Add to Process exclusions the following files. (copy and paste works best on these)

C:\Program Files\Malwarebytes\Anti-Malware\MbamPt.exe

C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe

C:\Program Files\Malwarebytes\Anti-Malware\assistant.exe

C:\Program Files\Malwarebytes\Anti-Malware\malwarebytes_assistant.exe

C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe

C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe

C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

Folders
Also the MB folder in Program Files and the one in Program Data (it is hidden by default)

C:\Program Files\Malwarebytes
C:\ProgramData\Malwarebytes   (Enable hidden files to add this one.)

Feel free to reference this post to help users who like me who use Windows Defender with Malwarebytes Premium.

Porthos.

 

These can be adapted to most Antivirus programs.

These exclusions have allowed 0 issues with MB on all the computers I service.

For those who knock Defender....

http://news.thewindowsclub.com/windows-defender-tops-av-test-zero-day-malware-charts-89233/

 

 

 

Thanks @Porthos for this very useful post !