Eightlegged

I had to change the way I called the URL in the scheduled task. If i used Powershell as the app called and CURL followed my the URL as the arguments it stopped deleting them.

Event: Blocked Application: Kaspersky Endpoint Security User: ###\#### User type: Active user Component: Exploit Prevention Result description: Blocked Type: Trojan program Name: Trojan.Multi.GenAutorunTask.b Threat level: High Object type: File Object name: System Memory Reason: Dangerous action Databases release date: Today, 5/24/2021 10:04:00 AM

Kaspersky Endpoint is identifying scheduled task as a Trojan.Multi.GenAutorunTask.b. I’ve tried adding exceptions for the task folder and even Trojan.Multi.GenAutorunTask.b but to no avail. Can anyone help me?