An exclusion rule is a sum of conditions configured in Trusted zone that tells Kaspersky Endpoint Security for Windows to skip a particular object during an antivirus scan.
The following objects can be excluded:
The article explains how to create the following exclusion types:
- file extension-based mask;
- file name-based mask;
- folder name-based mask.
Masks can contain any symbols (including special ones) allowed for file names:
* - stands for zero or more symbols;
? - stands for any single symbol.
File name and extension have to be separated with a dot.
Masks not containing file paths (name- or extension-based masks)
*.exe – all files with .exe extension.
*.ex? – all files with .ex? extension, where ? can substitute any single symbol.
test – all files named test.
Masks containing absolute file paths (file extension, file name, or area name-based masks)
- C:\dir\*.* or C:\dir\* or C:\dir\ – all files inside the C:\dir\ folder.
- C:\dir\*.exe – all files inside the C:\dir\ folder with .exe extension.
- C:\dir\*.ex? – all files inside the C:\dir\ folder with .ex? extension where ? stands for any single symbol.
- C:\dir\test – C:\dir\test file only.
- C:\dir\dir*\file.exe – file.exe file inside the C:\dir\dir* folder, with * standing for any number of symbols.
- C:\dir\dir???\file.exe – file.exe file inside the C:\dir \dir??? folder, with ? standing for any single symbol.
You can use the * and ? symbols in the middle of a path (e.g. when indicating a subfolder) only when indicating an absolute file path.
If the option Include subfolders is enabled, Kaspersky Endpoint Security 8 for Windows excludes the folder and all subfolders of all tiers.
If the option Include subfolders is disabled, Kaspersky Endpoint Security 8 for Windows excludes only the folder itself.
File path masks (folder name-based)
- dir\*.* or dir\* or dir\ – all files in all dir\ folders;
- dir\test – all the files named test in dir\ folders;
- dir\*.exe – all files with .exe extension in all dir\ folders;
- dir\*.ex? – all files with .ex? Extension in all dir\ folders, where ? stands for any single symbol.
Using a *.* or * mask without a classification is equal to disabling the protection.
