What exclusions should I add to my antivirus when using Malwarebytes Endpoint Security?

Document created by drossler Employee on May 12, 2017Last modified by rsullinger on Oct 13, 2017
Version 3Show Document
  • View in full screen mode

If you are using an antivirus alongside Malwarebytes Endpoint Security, you may need to add the following files to your antivirus exclusion or ignore list.


Please add the following files as both Excluded Files and Excluded Processes inside of your antivirus:

 

Managed client:

 

For x32 installations:

 

C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamapi.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamdor.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamhelper.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbampt.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.dll
C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll
C:\Program Files\Malwarebytes' Anti-Malware\mbamnet.dll
C:\Program Files\Malwarebytes' Anti-Malware\mbamcore.dll
C:\Program Files\Malwarebytes Anti-Exploit\mbae.exe
C:\Program Files\Malwarebytes Anti-Exploit\mbae-svc.exe
C:\Program Files\Malwarebytes Anti-Exploit\mbae-cli.exe
C:\Program Files\Malwarebytes Anti-Exploit\mbae64.exe
C:\Program Files\Malwarebytes Anti-Exploit\mbae64.dll
C:\Program Files\Malwarebytes' Managed Client\SCComm.exe
C:\Windows\System32\drivers\mbam.sys
C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref
C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.new
C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.new.yaml
C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys

 

For x64 installations:

 

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamapi.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamdor.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamhelper.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbampt.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.dll
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamext.dll
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamnet.dll
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamcore.dll
C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe
C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe
C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-cli.exe
C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe
C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.dll
C:\Program Files (x86)\Malwarebytes' Managed Client\SCComm.exe
C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref
C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.new
C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.new.yaml
C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys

 

Standalone Malwarebytes Anti-Malware client:

 

For x32 installations:

 

C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamapi.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamdor.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamhelper.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbampt.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.dll
C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll
C:\Program Files\Malwarebytes' Anti-Malware\mbamnet.dll
C:\Program Files\Malwarebytes' Anti-Malware\mbamcore.dll
C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref
C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.new
C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.new.yaml
C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys

 

For x64 installations:

 

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamapi.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamdor.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamhelper.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbampt.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.dll
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamext.dll
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamnet.dll
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamcore.dll
C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref
C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.new
C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.new.yaml
C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys

 

Standalone Malwarebytes Anti-Exploit client:

 

For x32 installations:

 

C:\Program Files\Malwarebytes Anti-Exploit\mbae.exe
C:\Program Files\Malwarebytes Anti-Exploit\mbae-svc.exe
C:\Program Files\Malwarebytes Anti-Exploit\mbae-cli.exe
C:\Program Files\Malwarebytes Anti-Exploit\mbae64.exe
C:\Program Files\Malwarebytes Anti-Exploit\mbae64.dll

 

For x64 installations:

 

C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe
C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe
C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-cli.exe
C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe
C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.dll

 

Standalone Anti-Ransomware client:

 

C:\Program Files\Malwarebytes\Anti-Ransomware\assistant.exe
C:\Program Files\Malwarebytes\Anti-Ransomware\MB3Service.exe
C:\Program Files\Malwarebytes\Anti-Ransomware\mbarw.exe

 

Additionally, when you are performing a push installation, your antivirus may block the installation. Push installations run the installer from a dynamically generated folder located in C:\. If you encounter this, please try temporarily disabling your antivirus, and let our support team know so that we work with the antivirus provider to prevent this from happening in the future.

Attachments

    Outcomes