Jump to content

Exclusions for user profiles - unbelievable

Recommended Posts

We're running console version and agent version  I just came across something that I cannot believe, yet we verified with support twice.  This version provides no way of making an exclusion for a generic user profile.  So if we're trying to exclude "C:\Users\<user profile>\Program XYZ\Version 23" the best Malwarebytes can do is exclude "C:\Users\*" which essentially excludes everything in all user profiles - a deal breaker.

I'm blown away that a modern AV company provides no way to wildcard a user profile.  Has anyone else run into this?

Link to post
Share on other sites

8 minutes ago, MarkFleming said:

We're using C:\Users\*\NTUser.pol as an exclusion, and it seems to work? (Exclude a file by path).


There's also examples of wildcards used in a directory structure for directory exclusions, but I can't say I've tried those yet...

You must not be on the same version as us.  We're not on the cloud version.

Link to post
Share on other sites

@BrentB9193 This is a known limitation with the legacy product. You cannot use wildcards in the middle of the path for a file or folder location. Only registry keys can do that. The legacy product's ignore list also does not support drive share letters or \\ unc paths. If you are experiencing a false positive we have other ways which we can explore to mitigate something you don't want detected. The new cloud product does not have this issue, this is where the "fix" went.

Edited by djacobson
Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.