[False Notification-Device Control]

Hello,

I have some PCs (Win 10) where Kaspersky Endpoint Security shows a notification that it is blocking a flash drive when there is nothing plugged in, hereunder the event message when the user clicks on the request access button, what could be the problem and what is the solution apart from disabling the notification.

 

Quote

Hello!

Please allow access to operations with the device Generic- Compact Flash USB Device that has been blocked according to the device access rule.

Device parameters:
Device type: Removable drives
Device name: Generic- Compact Flash USB Device
Model: VEN_GENERIC-&PROD_COMPACT_FLASH
Device ID: USBSTOR\DISK&VEN_GENERIC-&PROD_COMPACT_FLASH&REV_1.00\20060413092100000&0

Operation details:
Computer: S1FACH007
User: AUTORITE NT\Système
Blocked operation type: Read
Start date and time: 02/11/2022 08:13:10
    

 

[Block Bat Files]

On 5/20/2022 at 12:15 PM, harlan4096 said:

I think it would be possible to block *.bat files creating rules in Intrusion Prevention System (also known in home products -> Application Control).

 

Around 2 years ago, I published this guide:

It is focused in K. home products, and to protect all files in specific folders (or full drives), but I bet it can be ported to KES, and also modified the rules to only block *.bat files ?

 

I based my guide in this support link: https://support.kaspersky.com/us/14844#block4

 

I should need to install KES in a VM and try to play with the idea ?

I tried to follow your instruction but I can't type the path manually nor select it from the browse button

[Block Bat Files]

Hello guys,

I am managing a company parc that include Kaspersky endpoint security for Windows of course using Kaspersky Security Center 13.2,

my need is to block *.bat files on my network to prevent any malicious use (preferably by screenshots), could you please guide me on how to do it, I'd be thankful.