Legitimate McAfee process Blocked by ENS

[GimarVivero]

How do i whitelist detection below:

NT AUTHORITY\SYSTEM ran C:\Program Files\McAfee\WebAdvisor\updater.exe, which tried to access HKLM\SOFTWARE\GOOGLE\CHROME\NATIVEMESSAGINGHOSTS\SITEADVISOR.MCAFEE.CHROME.EXTENSION, violating the rule "Web Control - Protect plugin registry keys and values", and was blocked. For information on how to respond to this event, see KB85494.

already had added the Process: "C:\Program Files\McAfee\WebAdvisor\updater.exe" with the hash: "5af00234881abac49843deceb408988d" on the excluded on McAfee AAC protection.

if you can provide mcafee Certificate it would be much better

[mmuthuga]

Hi @GimarVivero

McAfee ENS Web control and McAfee WebAdvisor are different products. You can try to add updater.exe to Self Protection exclusion or uninstall WebAdvisor if using ENS Web control.

Was my reply helpful?
If this information was helpful in any way, or answered your question, will you please select "Accept as Solution" in my reply, or give kudos as appropriate, so together we can help other members?

[GimarVivero]

So does this mean that McAfee WebAdvisor is not a part of McAfee ENS web Control ? how was it installed on our machine?

I cannot add "updater.exe" as whitelist without the hash since this might also whitelist potential malwares.

[mmuthuga]

Hi @GimarVivero 

McAfee WebAdvisor is not a part of McAfee ENS web Control. It is a free software.

Was my reply helpful?
If this information was helpful in any way, or answered your question, will you please select "Accept as Solution" in my reply, or give kudos as appropriate, so together we can help other members?