Jump to content
tdhaslett

Anti-Ransomware Interfering with PDQ Inventory Scans

Recommended Posts

Hello,

We are having an issue with Anti-Ransomware interfering with Admin Arsenal's PDQ Inventory scanner.

When PDQ Inventory runs a periodic scan, it creates a new folder/file tree, for example, C:\Windows\AdminArsenal\PDQInventory-Scanner\service-1\PDQInventory-Scanner-1.exe. Once the scan successfully completes, the files are deleted. The MB3Service allows these folders and files to be created, but seems to keep them locked, so the files do not get deleted. Each time the scan takes place, the number designation on the exe file, and the containing folder both increment by one. After the scan takes place 16 times, the number cycles back to 1. Since the PDQInventory-Scanner-1.exe file did not get deleted, and is locked by MB3Service, PDQ cannot complete its scan. The only way that I can delete these folders & files is to kill the MB3Service.

Now, I know that there is no central management capabilities currently in the beta of A-RW, but is there any way to set exclusions on several machines at one time? Can exclusions be set through command line switches during install? I am hoping so! :)

-tim

Share this post


Link to post
Share on other sites

Awesome! This worked for me.

I was not sure if I needed to, but I restarted the service after applying the exclusion. Is that needed?

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.