Create Exception Windows Defender

0 views

Skip to first unread message

Adah

unread,

Aug 3, 2024, 5:33:27 PM8/3/24

to derlilehal

I have been using Evernote for years and have had it running on this Windows computer for more than 3 years. I was recently forced to upgrade to version 10, not ideal, but hey, I'm working thought that issue. (I should have researched for another solution before now, so that's on me).

I am here today, because, for the first time ever, when launching Evernote 10 on my PC, I was prompted to add exceptions for it thought the Windows Defender Firewall. (I chose to not allow this). Evernote still seems to work just fine, but I am curious as to why I was prompted to do this in the first place.

Once again! When launching the Evernote app today, it processed an automatic update, and I was presented with this pop-up screen again. I have a screen shot this time. I have never added an exception to the Windows Firewall for Evernote before and it seems to work just fine.

For me it happened with a download from the Evernote website that I initiated myself. But it was only on one "micro-version" and it corrected itself a few days later wiht the next update. So, unfortunately, your issue may be different.

HELP!! ME TOO!! For the first time ever (in ten years of using Evernote!) the Windows Security (Firewall access) dialog box (which looks just like the screenshot posted by ADUTCHMAN above) also just appeared on my Evernote Windows Desktop upon Evernote updating automatically to version # 10.87.6. I am clueless as to why or even what box to uncheck on it -- I unchecked the "Public Networks" box, but it will not let me uncheck the "Private Networks" box (even when I try to access the settings through Windows Control Panel "Allow Apps to Communicate Through Windows Defender Firewall" -- it will not let me uncheck Private Networks.)

Does anyone know which boxes should be unchecked (or checked) to secure the highest level of security/safety for my Windows laptop PC (which is on my private home wifi network), yet allow Evernote to function properly?

If you follow that link you'll find a (surprisingly long) list of all apps with permissions, and on my system Evernote already has access to both public and private networks - as do many other apps that depend on online access like my mail client and installed browsers.

It is not transparent (not for an app dev, not for you, not for us) when and why a security software will treat a data flow differently. Most apply some "self learning" routines, and some heuristics (assumptions) to detect activities that may have escaped the AV database.

I disagree. When looking at the allowed apps in the Windows Firewall rules, evernote.exe was found. I never added it and I know that Microsoft will not just automatically add an app to the firewall rules.

I proceeded to manually remove the entry and the entry for evernote.exe was gone for a while. Subsequently, an update was silently pushed, and I was prompted to restart the app to allow the installation to proceed. Upon doing so, I got the security warning asking as previously posted. I chose not to allow it and re-checked the list of allowed apps in the firewall rules. Again, evernote.exe was showing up. That is a pretty strong indication that the installer for evernote is attempting to add itself to the windows firewall rules.

On my system, Outlook, Chrome and a dozen other web-related apps have all got access that I didn't (AFAIK) specifically authorise - it's not just Evernote's installer that seems to add exceptions to the firewall. If it's a concern then do ask Support about it.

But what if I want to add, specifically, a registry entry exception to Windows defender in a similar manner, how would I acheive that? Is it even possible to add a registry entry as an exception to Windows defender?

When enabled, the Windows Firewall blocks all incoming network traffic to your computer except those applications and ports you allow. Use the Windows Firewall control panel utility to manage these exceptions.

The installers for RPM Remote Print Manager (RPM) and ExcelliPrint create a program exception. The program exception allows the software to receive print jobs from your host system. You might enable the exception only for specific network types. If our software is not receiving connections, and you have already established that the host system uses the correct IP address, we recommend reviewing the firewall exception.

You can configure the software to listen on multiple TCP ports simultaneously. First, you need to determine which ports your print host uses, then create an exception for each port in the Windows Firewall.

This topic first came up for us many years ago when Microsoft added a firewall to Windows XP. So naturally, we found as soon as the first user tried to run one of our products; consequently, this may be one of the longest-running pages on our website.

If you need a good software print server, please give our RPM Remote Print Manager product a try! Download the free 21-day trial and see what it can do for you. Be sure your firewall is open on ports 515 and 9100 and that you're not already running the Microsoft TCP/IP services module.

In the Defender portal I can create exceptions for security recommendations, but this usually covers an entire application or OS. I'd like to be able to create an exception for a specific weakness, such as CVE-2021-36934. In this case there is no patch, but I have deployed the workaround, effectively nullifying the weakness, but the detection method cannot detect this.

Doing this would remove this weakness from the portal for 30 days (or whatever), without affecting other weaknesses which would be patched by following a recommendation, for example, to update Windows.

I am using W10 on a 64 bit PC and Opera browser. I had a recent version of Libre Office but when I attempted to update to Version 7.1.3 , I was blocked by Windows Defender. I created an exception in Windows Defender for Libre Office 7.1.3 but was still blocked. I turned Windows Firewall off but was still blocked. I made the mistake of uninstalling my previous version of Libre Office for a clean installation, but was still blocked. How do I get around this problem.

I found that Choose Where to get Apps was already set to Anywhere. My computer is running W10 plus System Mechanic Ultimate Defence and Malwarebytes. I could not find any conflict. I was able to create an exception in the firewall, but the download was still blocked. I do have an old Brother printer (HL2140) but could not find a Utilities file. I turned Windows Defender OFF but it still managed to block the download. Turned it on again and off again, still blocked. I could not get to Controlled Folder access and there was no option for ransomware. I was unable to add C:\Program Files\LibreOffice\program\soffice.bin as an exception in the firewall.
I have often found that instructions for help do not match what I find in my version of W10, and many instructions assume a level of basic knowledge that I do not have. LibreOffice was working perfectly until the last update and I have no intention of going Office 365. Currently using MS Office 2010.

Do similar steps for Malwarebytes or System Mechanic Ultimate Defence but the settings you want are probably called Ransomware protection or Whitelist or something similar. Add soffice.bin to the whiltelist or Allowed programs or something similar setting.

The problem seems to be with Microsoft Edge and Windows Defender Smartscreen, even though I had not been using Edge. I did a search for App and Browser Controls and toggle-switched off Check Apps and Files, Smartscreen for Microsoft Edge and Smartscreen for Microsoft Store Apps.
After doing that, I was able to install Libre Office 7.1.2, but when I tried to install 7.1.3, it told me to check with the vendor if the file was a valid Windows Installer package.
I am now asking if 7.1.3 does have a valid Windows Installer package?

Method: Hit Protection, Antivirus open, Settings, Manage Exceptions, + Add an Exception, click and browse to the folder or exe, hit OK, see the path, Antivirus turned on, and enable On-access scan (and the other two), hit Save. At this point I would expect to see my exception in the list, but the list is empty, it says that I have not set up any antivirus exceptions.

The reason I need the exception is that I am developing a C++ application using Visual Studio, and Bitdefender insists that one of my debug exe's contains a virus (Gen: Variant.Lazy.185809), which I think is a false positive (I am definitely not writing a virus :-)). But every time I build it, Bitdefender quarantine's it, which makes the build fail so I can't continue with running unit tests etc. (I have seen outside Bitdefender's site that people have complained about this same problem, haven't found a solution though.)

I am using Bitdefender Free, Build 26.0.21.78, on Windows. I have started with the free one to see what it is like. (Apparent lack of being able to create an antivirus exception is not giving me a good impression.)

Summary of the below is that while I can't create an Antivirus exception, I can create an Advanced Threat Defense exception, but it seems to me that this exception is not doing what it is supposed to.

As I had explained in the original post, I hit Protection, Antivirus/Open, Settings, Manage Exceptions, (current exception list shows as empty for All, Antivirus, ATD and OTP), hit "+ Add an Exception", added (in my case) the path E:\Dev, with "Antivirus" ticked and "On-access scan", "On-demand scan" and "Embedded scripts" all ticked, hit Save where it now shows me the Antivirus exception list which I would have thought should now contain my new exception, but the list is empty. I can't seem to create an Antivirus exception.

Did that and I have an exception there, but not an Antivirus exception. If I try to turn this exception into an Antivirus exception, it disappears. (Recreated the exception.) The exception under Advanced Threat Defense has the path: