Jump to content
BrentB9193

Exclusions for user profiles - unbelievable

Recommended Posts

We're running console version 1.7.0.3208 and agent version 1.80.2.1012.  I just came across something that I cannot believe, yet we verified with support twice.  This version provides no way of making an exclusion for a generic user profile.  So if we're trying to exclude "C:\Users\<user profile>\Program XYZ\Version 23" the best Malwarebytes can do is exclude "C:\Users\*" which essentially excludes everything in all user profiles - a deal breaker.

I'm blown away that a modern AV company provides no way to wildcard a user profile.  Has anyone else run into this?

Share this post


Link to post
Share on other sites

We're using C:\Users\*\NTUser.pol as an exclusion, and it seems to work? (Exclude a file by path).

 

There's also examples of wildcards used in a directory structure for directory exclusions, but I can't say I've tried those yet...

Share this post


Link to post
Share on other sites
8 minutes ago, MarkFleming said:

We're using C:\Users\*\NTUser.pol as an exclusion, and it seems to work? (Exclude a file by path).

 

There's also examples of wildcards used in a directory structure for directory exclusions, but I can't say I've tried those yet...

You must not be on the same version as us.  We're not on the cloud version.

Share this post


Link to post
Share on other sites

@BrentB9193 This is a known limitation with the legacy product. You cannot use wildcards in the middle of the path for a file or folder location. Only registry keys can do that. The legacy product's ignore list also does not support drive share letters or \\ unc paths. If you are experiencing a false positive we have other ways which we can explore to mitigate something you don't want detected. The new cloud product does not have this issue, this is where the "fix" went.

Edited by djacobson

Share this post


Link to post
Share on other sites

If you can't use Wild Cards, can you use Environmental Variables such as %USERNAME% and %USERPROFILE%  ?

Share this post


Link to post
Share on other sites
13 hours ago, David H. Lipman said:

If you can't use Wild Cards, can you use Environmental Variables such as %USERNAME% and %USERPROFILE%  ?

Nope, according to MB it is simply not possible.  Verified by a Senior tech.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.