“under”? I think it has to be in the same key, separated by comma - i.e. something like IgnoreProcess=avast.setup,MailWasher.exe