Unable to see certain .EXE files to whitelist in Active Protection
I've been using TI a long time, but just now decided to take a look at Active Protection (in TI2018 b15470). After enabling it showed 14 suspicious processes, all of which are legitimate, so I started whitelisting them.
However, I'm unable to whitelist 2 of the .EXE files, as the Active Protection browser doesn't display them in its file selection window:
- C:\Windows\System32\conhost.exe
- C:\Windows\System32\eventsentry\eventsentry_svc_x64.exe
I can see them in Explorer, and via a CMD prompt, and their ACLs look normal, so why can't TI see them, or allow them to be selected?
(And it would be much easier, and avoid this problem, if TI would allow suspicious processes to be whitelisted directly from the process list.)
Thanks.


- Log in to post comments

However, I'm unable to whitelist 2 of the .EXE files, as the Active Protection browser doesn't display them in its file selection window:
- C:\Windows\System32\conhost.exe
- C:\Windows\System32\eventsentry\eventsentry_svc_x64.exe
Just to confirm, are you saying that ATI lists those 2 programs as suspicious but does not list them in the selection list?
- Log in to post comments