Delete file

You can remotely delete files using the Delete file task. For example, you can remotely delete a file when responding to threats.

Note: System Critical Objects (SCO) cannot be deleted. SCOs are files that the operating system and the Kaspersky Endpoint Security application require to be able to run.

To create a Delete file task:

1. In the main window of the Web Console, select Devices > Tasks.

   The list of tasks opens.

2. Click Add.

   The New task wizard starts.

3. Configure the task settings:
   1. In the Application drop-down list, select Kaspersky Endpoint Security for Mac (12.1).
   2. In the Task type drop-down list, select Delete file.
   3. In the Task name field, enter a brief description.
   4. Select one of the following options:
      • Assign task to an administration group

        The task is assigned to devices included in an administration group. You can specify one of the existing groups or create a new one.

        For example, you may want to use this option to run a task of sending a message to users if the message is specific for devices included in a specific administration group.

      • Specify device addresses manually or import addresses from a list

        You can specify NetBIOS names, DNS names, IP addresses, and IP subnets of devices to which you want to assign the task.

        You may want to use this option to execute a task for a specific subnet. For example, you may want to install a certain application on devices of accountants or to scan devices in a subnet that is probably infected.

      • Assign task to a device selection

        The task is assigned to devices included in a device selection. You can specify one of the existing selections.

        For example, you may want to use this option to run a task on devices with a specific operating system version.

4. Select devices according to the selected task scope option.
5. In the Specify which file you need to delete drop-down list, select one of the options and fill in the required fields. To add the file, you must enter the full path to the file, or both file hash and the path.
6. Enter the account credentials of the user whose rights you want to use to run the task. Click Next.

   Note: By default, Kaspersky Endpoint Security starts the task as the system user account (root).

7. At the Finish task creation step, click the Finish button to create the task and close the wizard.

   If you enabled the Open task details when creation is complete option, the task settings window opens. In this window, you can check the task parameters, modify them, or configure a task start schedule, if necessary.

8. Click the new task.

   The task properties window opens.

9. Select the Schedule tab.
10. Configure the task schedule.

    Note: Make sure the computer is turned on to run the task.

11. Click the Save button.
12. To run the task immediately regardless of the configured schedule, do the following:
    1. Select the checkbox next to the task.
13. Click the Run button.

As a result, Kaspersky Endpoint Security deletes the file from the computer. If the file is locked by a different process, the task is displayed as Completed, but the file itself is deleted only after the computer is restarted. After restarting the computer, confirm that the file is deleted.

The Delete file task can finish with the Access denied error if you are trying to delete an executable file that is currently running. Create a terminate process task for the file and try again.