Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 904590" data-attributes="member: 32260">Unfortunately, changing settings for this ASR rule in the sequence ON ---&gt; Disabled ---&gt; ON requires rebooting to fully apply the ON setting again and after that, the file is still blocked by WD.I found out that rebooting or logging off the account is not necessary when one uses ON ---&gt; Audit ---&gt; ON sequence. Furthermore, when the program has been run once in ASR set to Audit, WD remembers on the computer (but not on other computers) that this program should not be blocked anymore.<img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite109" alt=":)" title="Smile&nbsp; &nbsp; :)" loading="lazy" data-shortname=":)" />So, the most convenient way to bypass this ASR rule is setting it temporarily to Audit and run/update/install the program. If the installed application is blocked, then it is easy to whitelist the application folder via the ConfigureDefender &lt;Manage ASR Exclusions&gt;. It is OK to whitelist the &quot;Program Files&quot; folder (and on Windows 64-bit also the &quot;Program Files (x86)&quot; folder).Please, use this bypass with 24 hours delay (or more for suspicious files). </blockquote>

[QUOTE="Andy Ful, post: 904590, member: 32260"] Unfortunately, changing settings for this ASR rule in the sequence [COLOR=rgb(41, 105, 176)][B]ON ---> Disabled ---> ON[/B][/COLOR] requires rebooting to fully apply the[COLOR=rgb(41, 105, 176)][B] ON [/B][/COLOR]setting again and after that, the file is still blocked by WD. I found out that rebooting or logging off the account is not necessary when one uses [COLOR=rgb(41, 105, 176)][B]ON ---> Audit ---> ON[/B][/COLOR] sequence. Furthermore, when the program has been run once in ASR set to Audit, WD remembers on the computer (but not on other computers) that this program should not be blocked anymore.:) [B]So, the most convenient way to bypass this ASR rule is setting it temporarily to [/B][COLOR=rgb(41, 105, 176)][B]Audit [/B][/COLOR][B]and run/update/install the program. [/B]If the installed application is blocked, then it is easy to whitelist the application folder via the ConfigureDefender <Manage ASR Exclusions>. It is OK to whitelist the "Program Files" folder (and on Windows 64-bit also the "Program Files (x86)" folder). [B]Please, use this bypass with 24 hours delay (or more for suspicious files). [/B] [/QUOTE]

Verification