Kaspersky Endpoint Protection Cloud

[CraigSunderland]

Hi, we use KEPC, and since our update to Sage200, the AV is actively removing components of the Sage200 program regardless of rules set in place.

The path to the files being removed is as follows:

C:\Users\[username]\AppData\Local\Apps\2.0\[RandomFolder1]\[RandomFolder2]\[RandomFolder3\Sage200Desktop.exe

RandomFolder1,2,3 are exactly that and seemingly dependent on user profile etc.

When Sage200 bombs out after a crash (caused by the forced removal of the components) it has to go through a reinstall. This can happen to an individual user 12 - 15 times a day as they put orders onto the program.

How can I get Kaspersky to accept Sage200 without removing files essential to its use?

[CraigSunderland]

in addition to the above, I have attempted to include the following in the rules in:

Security profiles/Default/Advanced Threat detection and exclusions/Trusted applications:

• C:\users\*\appdata\local\apps\2.0\*\*\*\Sage200Desktop.exe
• %userprofile%\appdata\local\apps\2.0\*\*\*\Sage200Desktop.exe
• %localappdata%\apps\2.0\**\Sage200Desktop.exe

Also in:

Security profiles/Default/Advanced Threat detection and exclusions/Malware scan exclusions

• c:\users\*\AppData\Local\Apps\2.0\*\*\*\Sage200Desktop.exe

 

 

Edited July 3, 2023 by CraigSunderland

[JL - KL DACH]

Hello,

it looks this is a false detection and file get removed.

Please refer to the following link to address possible false/positives

https://forum.kaspersky.com/topic/kaspersky-how-to-report-false-positive-22328/#:~:text=If you suspect a false,reanalyze on the results page.

[Guest #37]

Hi,

Additionally, my personal recommendation is to contact with Sage support for a detailed list of exclusions for Kaspersky Endpoint Protection Cloud.

Regards