Kaspersky
Question

Task Scheduler tasks are deleted when run [MOVED]

  • 24 May 2021
  • 3 replies
  • 62 views

Kaspersky Endpoint is identifying scheduled task as a Trojan.Multi.GenAutorunTask.b. I’ve tried adding exceptions for the task folder and even Trojan.Multi.GenAutorunTask.b but to no avail. Can anyone help me?


This topic has been closed for comments

3 replies

I had to change the way I called the URL in the scheduled task. 

 

If i used Powershell as the app called and CURL followed my the URL as the arguments it stopped deleting them.

same problem here, any solution suggested?

Event: Blocked
Application: Kaspersky Endpoint Security
User: ###\####
User type: Active user
Component: Exploit Prevention
Result description: Blocked
Type: Trojan program
Name: Trojan.Multi.GenAutorunTask.b
Threat level: High
Object type: File
Object name: System Memory
Reason: Dangerous action
Databases release date: Today, 5/24/2021 10:04:00 AM