Delete file

You can remotely delete files using the Delete file task. For example, you can remotely delete a file when responding to threats.

System Critical Objects (SCO) cannot be deleted. SCOs are files that the operating system and the Kaspersky Industrial CyberSecurity for Nodes application require to be able to run.

To create the Delete file task:

  1. In the main window of the Web Console, select Assets (Devices) → Tasks.

    The list of tasks opens.

  2. Click Add.
  3. Configure the task settings:
    1. In the Application drop-down list, select Kaspersky Industrial CyberSecurity for Nodes.
    2. In the Task type drop-down list, select Delete file.
    3. In the Task name field, enter a brief description of the task and click Next.
  4. In the Task scope section, select managed devices and click Next.
  5. Enter the account credentials of the user whose rights you want to use to run the task. Click Next.

    By default, Kaspersky Industrial CyberSecurity for Nodes starts the task as the system user account (SYSTEM).

  6. Finish the wizard by clicking the Finish button. A new task will be displayed in the list of tasks.
  7. Click the new task. The task properties window opens.
  8. Select the Application settings tab.
  9. To delete the file, you must enter the full path to the file, or checksum with a folder path.

    If the file is located on a network drive, enter the file path starting with \\, and not the drive letter. For example, \\server\shared_folder\file.exe. If the file path contains a network drive letter, you can get a File not found error.

  10. In the task properties window, select the Schedule tab. Configure the task schedule.

    Wake-on-LAN is not available for this task. Make sure the computer is turned on to run the task.

  11. Click Save.
  12. Select the check box next to the task and click the Start button.

As a result, Kaspersky Industrial CyberSecurity for Nodes deletes the file from the computer. If the file is locked by a different process, the task is displayed as Done, but the file itself is deleted only after the computer is restarted. After restarting the computer, confirm that the file is deleted.

The Delete file task can finish with the Access denied error if you are trying to delete an executable file that is currently running. Create a terminate process task for the file and try again.

Page top