Trend Micro exclusions for Malwarebytes Cloud

Document created by jgolomb Employee on Dec 26, 2018Last modified by jyamada on Jun 26, 2019
Version 12Show Document
  • View in full screen mode

We've identified incidents where Trend Micro's business products conflict with the Malwarebytes cloud platform. In some incidents, Trend Micro products block installations, updates, and other operations related to Malwarebytes. Malwarebytes and Trend Micro will work side by side with the correct exclusions in place. To help prevent conflicts between Trend Micro products and your Malwarebytes products, add mutual exclusions to the settings in both security software using the instructions below.

 

Configure policy scan settings in Trend Micro

Follow the steps below to configure Trend Micro's policy scan settings to prevent any exclusion conflicts with Malwarebytes software.

  1. Open the Trend Micro application.

  2. Click POLICIES > click the policy you wish to configure.

  3. In the Configure Policy menu, click Scan Settings.

  4. Under Real-Time Scan, click Configure Settings.

  5. In the Real-Time Scan Settings menu, select Created or modified.

  6. Click OK > click Save

 

Now you may proceed to add exclusions.

 

Set exclusions in Trend Micro

Follow the steps below to add your Malwarebytes software to Trend Micro's exclusions.

 

  1. Open the Trend Micro application.

  2. You will need to exclude our programs in each of the next 3 layers. Refer to Malwarebytes cloud platform exclusions list for more information.

  3. In Trend, navigate to Trusted Program List Settings and add the exclusions for our programs.

  4. Go to Predictive Machine Learning Settings and do the same. These will require you to use the SHA1 hash of the executable for the exclusion.

  5. Go to Behavior Monitoring Settings, then add the Malwarebytes files to the list of Approved Programs.

 

Files by path

  • C:\ProgramData\Malwarebytes\MBAMService\*
  • C:\ProgramData\Malwarebytes Endpoint Agent\*
  • C:\Program Files\Malwarebytes Endpoint Agent\*
  • C:\Program Files\Malwarebytes\Anti-Malware\*

 

Folders by path

  • C:\Program Files\Malwarebytes Endpoint Agent\*
  • C:\Program Files\Malwarebytes\Anti-Malware\*
  • C:\ProgramData\Malwarebytes Endpoint Agent\*
  • C:\ProgramData\Malwarebytes\MBAMService\*

 

Set exclusions in Malwarebytes cloud console

Add Trend Micro to your Malwarebytes software's exclusions.

  1. Log in to the Malwarebytes cloud console.

  2. Click Settings > Exclusions.

  3. Click New, then add the Trend Micro file paths.

 

To see more detailed instructions for exclusions in the Malwarebytes cloud console, refer to the article Add exclusions to the Malwarebytes cloud console.

 

Here is a list of Trend Micro file and folder paths to exclude in your Malwarebytes software.

 

Files by path

Applies to both 32-bit and 64-bit systems.

  • C:\Windows\System32\drivers\TmXPflt.sys
  • C:\Windows\System32\drivers\VSApiNt.sys
  • C:\Windows\System32\drivers\TMPreFlt.sys
  • C:\Windows\System32\drivers\TMEBC32.sys
  • C:\Windows\System32\drivers\TMEBC64.sys
  • C:\Windows\System32\drivers\TM_CFW.sys
  • C:\Windows\System32\drivers\tmlwf.sys
  • C:\Windows\System32\drivers\tmwfp.sys
  • C:\Windows\System32\drivers\tmusa.sys
  • C:\Windows\System32\drivers\tmeevw.sys
  • C:\Windows\System32\drivers\tmtdi.sys
  • C:\Windows\System32\drivers\tmactmon.sys
  • C:\Windows\System32\drivers\tmcomm.sys
  • C:\Windows\System32\drivers\tmevtmgr.sys

 

Folders by path

Applies to both 32-bit and 64-bit systems.

  • %PROGRAMFILES\Trend Micro
  • %PROGRAMDATA%\Trend Micro

 

The following exclusion is also required for 64-bit systems.

  • %PROGRAMFILES(X86)%\Trend Micro

 

With mutual exclusions in place, your Malwarebytes software and Trend Micro business products should work alongside each other without conflicts.

 

Additional information

Attachments

    Outcomes