Malwarebytes for Windows making DNS queries for Excluded Domains

Document created by dcollins Employee on Mar 20, 2018Last modified by jyamada on Jan 23, 2019
Version 2Show Document
  • View in full screen mode

If you are using a program to monitor your network traffic, the program may show data for a computer with Malwarebytes for Windows installed that is making multiple DNS queries for websites in their exclusions list.  Refer to KB article, Exclude detections in Malwarebytes on Windows devices on how to set up exclusions.


This is expected behavior.  When you set up a website exclusion in Malwarebytes for Windows, you have the option to Exclude a domain or Exclude an IP Address.  When exclude a domain is selected, Malwarebytes for Windows will query for the IP address of the excluded domain so it can also whitelist the IP address.