Prevent AAC from blocking trusted programs

If a trusted program is blocked, exclude the process from AAC by creating a temporary global exclusion in the Common settings.

Caution
To avoid security risks, remove a global exclusion immediately after use. Failure to remove a global exclusion leaves your systems vulnerable to malware attacks.

Task

Select Menu → Policy → Policy Catalog, then select Endpoint Security Common from the Products list in the left pane.
From the Category list in the right pane, select Options.
Click the Edit link for an editable policy.
Click Show Advanced.
In the Exclusions section, click Add.
Enter the full process path.
You can enter a local or UNC path. You can also include environment variables.
Enter at least one identifier.
- Process MD5 hash
  1. Open a command prompt.
  2. Type certutil.exe -hashfile "full process path" MD5.
    For example: certutil.exe -hashfile "c:\Windows\System32\icacls.exe" MD5
  3. Copy the MD5 hash and paste it in the Process MD5 hash field.
    Here is an example process MD5 hash: 24084debc1369b35e57f8efe0500a83d
    You might need to remove spaces inserted by certutil.exe.
- Signer certificate MD5 hash
  1. Open a command prompt with administrator rights.
  2. Type "c:\Program Files\Common Files\McAfee\SystemCore\vtpinfo.exe" /validatemodule "full process path".
    For example: "c:\Program Files\Common Files\McAfee\SystemCore\vtpinfo.exe" /validatemodule "c:\Windows\System32\icacls.exe"
  3. Copy the signer certificate MD5 and paste it in the Signer certificate MD5 hash field.
    Here is an example signer certificate MD5 hash: 708ac5123ae46b4557a24225d3a8dbfc
Click OK, then click Save.