Skip to main content

"user exclusion list" feature in Acronis Cyber Protect

Thread solved
Forum Member
Posts: 7
Comments: 29

Latest Acronis Cyber Protect Home on Windows 11 22H2

When I attempt to add a "file" from \Windows\System32 folder: SecurityHealthService.exe

Acronis simply does not "see" the file.  Of course, it's visible in Explorer and I know it's there because it runs the Windows Security app in Windows 11.  On the other hand, Malwarebytes had no problem seeing the file and adding it to its Allow List.

I've scanned my system with everything but the kitchen sink --- no viruses, malware, corrupt files/integrity violations...no nada!   Thanks for any insight. 

 

0 Users found this helpful
Legend
Posts: 110
Comments: 28569

When I attempt to add a "file" from \Windows\System32 folder: SecurityHealthService.exe

Acronis simply does not "see" the file.  Of course, it's visible in Explorer and I know it's there because it runs the Windows Security app in Windows 11.  On the other hand, Malwarebytes had no problem seeing the file and adding it to its Allow List.

Are you running Acronis Cyber Protection for real-time protection, i.e. antivirus etc?  If so, then the default Windows Security / Defender should not be active and shouldn't need to be excluded from ACP.  ACP will turn off Defender and assert itself as the default security provider if enabled whereas security applications from other providers will be left as the main security provider by ACP if encountered.  This is to ensure only one such security provider is active on the system.

Forum Member
Posts: 7
Comments: 29

Thank you, Steve.  I do understand your explanation.  In fact, for the moment I have not let ACP take over antivirus duties.  I suppose more than anything I was just curious why of all the files under \Windows\System32, it was that one single file "SecurityHealthService.exe" that ACP refused to see in the select a file exclusion window. It sounds like you're suggesting this is somehow by design.  Either way, I guess it doesn't matter since I have ACP real-time protection paused permanently.  As an aside...I have been troubleshooting SecurityHealthService.exe in Windows 11 22H2 that has been randomly crashing. I was concerned that whatever ACP still does to protect backup files (even with real-time protection disabled) might have been involved somehow. So, I temporarily enabled ACP real-time protection just to create an exclusion list and then once finished, reset it to paused permanently...if that makes any sense.  Thanks again! 

Legend
Posts: 110
Comments: 28569

Rather than pausing real-time protection permanently, you would be better to uninstall ACP and remove the associated background services & processes instead if you are not intending to use this feature.

You can do this by going to the Control Panel > Programs & Features, selecting ACPHO and then the Modify option if offered, else the Uninstall then look for the option shown below to deselect program features:

Note: If you want to enable Windows Core Isolation in Win 11 then deselect the Try&Decide tool which will remove the tib.sys kernel driver that would prevent this.

Forum Member
Posts: 7
Comments: 29

Well, that was just too easy!  Thank you very much.