Program False Positives can't be excluded in 4.0.4??

[Justmyopinion]

I am getting multiple real time false positives daily on a program in a suite of remote access software.  A new instance of the program is created every time it runs, so MWB puts 9 or more entries in quarantine every day and I get to watch the individual pops up telling me about a false positive breaking my work concentration - IT IS NOISE!

Who decided in 4.x that MWB was gonna be dumbed down to the point where individual users have to post their false positives to these forums and you guys decide to either add it to your global list  of exclusions, or we are out of luck.  You must have a fair number of people reporting individual websites that should be flagged on the users whitelist but you have removed that. 

The file in question is: BHV.EXE 
it is a software component of LabTech Remote Monitoring and Maintenance Platform by ConnectWise Capital.

And if there is a way for me to exclude or whitelist myself, I would certainly appreciate hearing about it.

Thank you.

[Porthos]

7 minutes ago, Justmyopinion said:

And if there is a way for me to exclude or whitelist myself,

Please see here https://support.malwarebytes.com/docs/DOC-3543

 

[Porthos]

The full user guide is here or you can click the question mark at the top of the program. https://support.malwarebytes.com/docs/DOC-3530?lang=en_US&affiliate=&x-source=mb4pchelp

[Justmyopinion]

Thank  you. 

[Porthos]

2 minutes ago, Justmyopinion said:

Thank  you. 

You are very welcome. Now that you went thru the all the trouble getting here, Welcome. The members and staff do out best to solve all all issues.

Happy Holidays to you and yours.

Edited December 12, 2019 by Porthos

[Justmyopinion]

Porthos,

It appears the Exclusion List is not interrogated by MWB when it stops real time threats, only when doing scans (at least that's what is implied in the documentation [scans only] and supported by the evidence).  So I continue to have the same program quarantined a few times a day even though it is clearly defined in my exclusion list.  Please refer to the attached PDF containing screen shots of Exclusion list and Quarantine list from MWB.

Thoughts as to how to exclude the false positive from MWB's real time threat process??

Thanks, and Seasons Greetings to you and yours as well.

 

12-18-19 Exclusion & quarantine screen shots.pdf

[Porthos]

52 minutes ago, Justmyopinion said:

Thoughts as to how to exclude the false positive from MWB's real time threat process??

I would exclude the whole folder not just the .exe in the file and folder exclusions.

[Porthos]

@Dashke Could you look in on this please.

[Justmyopinion]

18 hours ago, Porthos said:

I would exclude the whole folder not just the .exe in the file and folder exclusions.

I have excluded the folder.  Will see if that does the trick.  Thanks again.

[Justmyopinion]

On 12/19/2019 at 10:27 AM, Justmyopinion said:

I have excluded the folder.  Will see if that does the trick.  Thanks again.

Well, after about 31 hours, nothing in quarantine.  So I think doing the entire folder did the trick.

Thanks again, happy holidays!