PUA exclution

[Guest theNewGuy]

When can we expect PUA exclusion by string?

Example situation: I want to install AIMP, which is currently marked as PUA with specific name (Win32/AIMP.X PUA). Upon download, filename is generated randomly, so I cannot exclude by filename or directory. Also, I do not want to disable nor pause PUA detection. Exclusion within PUA for string "AIMP" would solve this problem.

Keep in mind, none of the major AV (info by virustotal) is detecting AIMP as a malware or a dangerous application of any kind.

[Marcos 5,070]

You can use a detection exclusion like this: