Av Excluded Processes Not Being Ingored

empezza

Using BDTS 2013.

I have a file that BD detects as infected - virus name:Application.Crack.PDE

I know what the file is for and do not want it touched by BD. So in AV settings, the file has been added to "Excluded Files and folders" and to "Excluded processes", and is also ALLOWED in Firewall settings Application Rules.

Despite this, BD will not ignore the file. Generally BD will move the file to Quarantine twice each day. If I restore the file from Quarantine, the file stays put for a while.

Today BD once again moved the file into Quarantine, so I had a look at the AV Exclusions setting and the entry for this file was no longer there! So BD ignored the exclusion and quarantined the file, and also removed the exclusion rule!

What more do I need to do to get BD to ignore this file?

rootkit

Hi

Please follow the steps explained in the article below and send me via PM the generated log file:

http://forum.bitdefender.com/index.php?showtopic=29927

If the file is too big to attach it, upload it on

http://www.sendspace.com

or

http://www.mediafire.com

and send me a PM with the download link.

Also, could you please send me the file so I can run some tests?

Have a nice day.

empezza

PM with the download link sent.

Why is it that my SENT MESSAGES is empty after sending you a PM?

Max

columbo

Hi Max

This thread will help to explain what happened, and how to correct it for future composed/sent PMs: http://forum.bitdefender.com/index.php?showtopic=37240

It would be nice if it saved a copy automatically, but that would mean more deleting in our PM accounts, as ever message would be saved.

Cheers

empezza

The suspect file was last "restored" by me on 29 August at 11:56am - nearly 2 days ago.

Since then it has NOT been moved to quarantine, and the Exclusion rule is still in place. So maybe this issue has resolved itself somehow

empezza

The suspect file was last "restored" by me on 29 August at 11:56am - nearly 2 days ago.

Since then it has NOT been moved to quarantine, and the Exclusion rule is still in place. So maybe this issue has resolved itself somehow

Well, it didn't last. Today the file was moved to quarantine yet again.

The exclusion rule is still in place, but BD is ignoring it.

Log and file was sent to Christian 5 days ago. No reply so far.

rootkit

Hello

I did run some tests and that application injects some other processes in Windows files.

The product is not blocking the file, is blocking the actions.

Where did you get that application?

Thank you!