Excluding Ekran System Processes from Antivirus Software

Some antivirus programs detect executable files as unknown, and therefore block them by default. To avoid this, Ekran System works with antivirus vendors to permanently allow Ekran System Client executable files. If you have encountered blocking by your antivirus software during installation of the Ekran System Windows Client, please follow these guidelines.

Antivirus Software Supporting Whitelisting

If your antivirus software supports the whitelisting of an entire directory including all its executable files, it is recommended to whitelist the root installation folder, as follows:

For machines on which the Ekran System Client is installed, the default root installation folder is: C:\Program Files\Ekran System\Ekran System\Client

For machines on which the Ekran System Application Server is installed, the default root installation folder is: C:\Program Files\Ekran System\Ekran System

Ekran System applications:





Ekran System services:

EkranClient.exe (or as renamed)

EkranClientSession.exe (or as renamed)

EkranConroller.exe (or as renamed)


Ekran System .dll files:

C:\Program Files\Ekran System\Ekran System\Client\ESKeyHelper_x.x.x.dll

C:\Program Files\Ekran System\Ekran System\Client\SoundCaptureHook_x.x.x.dll

C:\Program Files\Ekran System\Ekran System\Client\FileUploadHook_x.x.x.dll

SQL Server:

SQL Server executable:

%ProgramFiles%\Microsoft SQL Server\MSSQL<SQLVersion>.<Instance Name>\MSSQL\Binn\SQLServr.exe

SQL Server data files:

- *.mdf

- *.ldf

- *.ndf

SQL Server backup files:

- *.bak

- *.trn

Full-Text catalog files:

Default instance:

%Program Files%\Microsoft SQL Server\MSSQL\FTDATA

Named instance:

%Program Files%\Microsoft SQL Server\MSSQL$instancename\FTDATA

Trace files:

- *.trc - these files can be generated either when you configure profiler tracing manually or when you enable C2 auditing for the server.

SQL audit files (for SQL Server 2008 version or later):


SQL query files:


Microsoft IIS and ASP.NET:





%SystemRoot%\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files

%SystemRoot%\Microsoft.NET\Framework64\v2.0.50727\Temporary ASP.NET Files

%SystemRoot%\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files

%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files




Ekran System log files:

C:\Program Files\Ekran System\Ekran System\ServerLogs

C:\Program Files\Ekran System\Ekran System\ClientLogs

C:\Users\Administrator\AppData\Local\Ekran System\PamConnectionManager.exe