Excluding Ekran System Processes from Antivirus Software
Some antivirus programs detect executable files as unknown, and therefore block them by default. To avoid this, Ekran System works with antivirus vendors to permanently allow Ekran System Client executable files. If you have encountered blocking by your antivirus software during installation of the Ekran System Windows Client, please follow these guidelines.
If your antivirus software supports the whitelisting of an entire directory including all its executable files, it is recommended to whitelist the root installation folder, as follows:
• For machines on which the Ekran System Client is installed, the default root installation folder is: C:\Program Files\Ekran System\Ekran System\Client
• For machines on which the Ekran System Application Server is installed, the default root installation folder is: C:\Program Files\Ekran System\Ekran System
Ekran System applications:
• DbSetupToolUI.exe
• ServerTray.exe
• TrayNotificationsUpdate.exe
• agent.exe
• ghosttunnel.exe
Ekran System services:
• EkranClient.exe (or as renamed)
• EkranClientSession.exe (or as renamed)
• EkranConroller.exe (or as renamed)
• EkranServer.exe
Ekran System .dll files:
• C:\Program Files\Ekran System\Ekran System\Client\ESKeyHelper_x.x.x.dll
• C:\Program Files\Ekran System\Ekran System\Client\SoundCaptureHook_x.x.x.dll
• C:\Program Files\Ekran System\Ekran System\Client\FileUploadHook_x.x.x.dll
SQL Server:
• SQL Server executable:
- %ProgramFiles%\Microsoft SQL Server\MSSQL<SQLVersion>.<Instance Name>\MSSQL\Binn\SQLServr.exe
• SQL Server data files:
- *.mdf
- *.ldf
- *.ndf
• SQL Server backup files:
- *.bak
- *.trn
• Full-Text catalog files:
- Default instance:
%Program Files%\Microsoft SQL Server\MSSQL\FTDATA
- Named instance:
%Program Files%\Microsoft SQL Server\MSSQL$instancename\FTDATA
• Trace files:
- *.trc - these files can be generated either when you configure profiler tracing manually or when you enable C2 auditing for the server.
• SQL audit files (for SQL Server 2008 version or later):
- *.sqlaudit
• SQL query files:
- *.sql
Microsoft IIS and ASP.NET:
• %SystemRoot%\Microsoft.NET\Framework\v2.0.50727\CONFIG
• %SystemRoot%\Microsoft.NET\Framework64\v2.0.50727\CONFIG
• %SystemRoot%\Microsoft.NET\Framework\v4.0.30319\Config
• %SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\Config
• %SystemRoot%\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files
• %SystemRoot%\Microsoft.NET\Framework64\v2.0.50727\Temporary ASP.NET Files
• %SystemRoot%\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files
• %SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files
• %SystemDrive%\Windows\System32\inetsrv\config
• %systemroot%\system32\inetsrv\w3wp.exe
• %systemroot%\SysWOW64\inetsrv\w3wp.exe
Ekran System log files:
• C:\Program Files\Ekran System\Ekran System\ServerLogs
• C:\Program Files\Ekran System\Ekran System\ClientLogs
• C:\Users\Administrator\AppData\Local\Ekran System\PamConnectionManager.exe
• C:\Users\EKRANManagementTool\AppData\Local\ManagementTool.txt