The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in mid-October 2026. We hope you enjoy the updated experience.

Define which potentially unwanted programs to detect on a client system

Prev Next

You can specify programs that you want the on-access scanner and on-demand scanner to treat as unwanted programs.

Before you begin

Make sure that the interface mode for the Trellix Endpoint Security (ENS) Client is set to Full access or log on to the Trellix Endpoint Security (ENS) Client as administrator.



Note

The scanners detect the programs you specify and programs specified in the AMCore content files.

Task
  1. Open the Trellix Endpoint Security (ENS) Client.

  2. Click Threat Prevention on the main Status page.

    Or, from the Action menu GUID-A3B12F55-7EE9-4519-8FCA-9ACA85C3661F-low.png, select Settings, then click Threat Prevention on the Settings page.

  3. Click Show Advanced.

  4. Click Options.

  5. From Potentially Unwanted Program Detections:

    • Click Add to specify the name and optional description of a file or program to treat as a potentially unwanted program.

      Note

      The Description appears as the detection name when a detection occurs.

    • Double-click the name or description of an existing potentially unwanted program to change.

    • Select an existing potentially unwanted program, then click Delete to remove it from the list.