Host Intrusion Prevention exclusions

[dggbg]

Hello,

we have specialized software running on dedicated machine, that generate and use *.bat files (with different names), trust group can not be defined by KES (for Windows 12.10), so they are placed to High Restricted Group and software can not work. 

Any suggestions?

Thank you, Best Regards!

[harlan4096]

Welcome to Kaspersky Community.

 

For the app that generates the .bat files, try a similar rule like shows this one:

 

[dggbg]

4 hours ago, harlan4096 said:

Welcome to Kaspersky Community.

 

For the app that generates the .bat files, try a similar rule like shows this one:

 

that does not work, i`m not sure why, may be my mask is wrong, will try tomorrow. 

But Scan Exclusion works like a charm,  path_to/parent_folder/, include subfolders checked, Host Intrusion Prevention checked , Thanks for the clue 🙂

 

Edited October 9 by dggbg

[harlan4096]

Ah, I thought it was a matter of untrusted group because low reputation in KSN / unsigned files, but if it is a matter of malware detection, the Exclusion will be different!

[dggbg]

On 10/9/2025 at 4:36 PM, harlan4096 said:

Ah, I thought it was a matter of untrusted group because low reputation in KSN / unsigned files, but if it is a matter of malware detection, the Exclusion will be different!

You are right, suggested settings are fine (app name disappears from the log). 

But the software was still was unable to start, until scan exclusion.

Thanks!