Community

Articles in this section

See more

ESET Protect Cloud

  • Updated
Follow

Applies to:  Windows Agent 10.x
Article No: 19149946842135

To allow downloading and installing the Veriato Windows Agent, follow the steps below before you begin. Your ESET product may differ from the one shown here. We recommend consulting the ESET KnowledgeBase for your product version for more accurate steps. However, do use the recommended exclusions below. See Antivirus Exclusions for Windows for a complete list of files, and if you still have trouble, contact Support.

Attempt to download the agent

On a workstation where ESET is installed, access the console app and use Admin | Download Agents wizard to download the Windows agent. This step will allow you to retrieve the file hash in the next step.

  • There may be a browser warning.
  • An ESET message warns that a "Threat" file was removed.
  • Follow the steps below before downloading the installer file again.

image.png

Retrieve a file hash from the workstation 

You will use the hash as an exclusion for the installer.

  1. Open the ESET Endpoint Security workstation console.
    You will find ESET in the Windows taskbar.
  2. From the menu, select Tools > Log files.
    You will see that the installer file has been detected as a "trojan."
    Click on the entry for the removed file.
    Find and copy the hash for the detected file. Paste it into Notepad to use in the steps below.

image1.png

Download four exclusion lists

Importing a list conveniently adds the exclusions you need to the correct area of ESET. These lists are attached at the end of this article.

  • Performance_Exclusions.txt
  • HIPS_Exclusions.txt
  • Exclusions.txt
  • Processes_Exclusions.txt

Import exclusions into ESET Protect Cloud

  1. Login to ESET Protect Cloud portal
    To set exclusions, open a browser and login to your ESET portal. 
  2. Select Policies from the side menu.
    On the Policies page, hover over the policy that applies to the devices where you need to add exclusions. Click on three dots displayed on hovering.
  3. Select the Edit option to open the Edit Policy page.
    Click on the Settings option.

image2.png

  1. Select Detection Engine.
    A menu presents options. You will need to add: Performance Exclusions, HIPS Exclusions, Processes Exclusions, and More > Exclusions
  2. Import the Performance exclusions.
    • Under Detection Engine, select Exclusions > Performance exclusions. Click Edit. 
    • On the Performance Exclusions panel, click Import.
    • Navigate to and select your downloaded Performance_Exclusions.txt file.
    • The Exclude path list should be populated with the imported paths as shown below. Click Save.

image3.png

  1. Import the HIPS exclusions.
    • Under Detection Engine, select HIPS.
    • In the right panel, under Host Intrusion Prevention, find Deep Behavioral Inspection.
    • Next to Exclusions, click Edit.

image4a.png

  • On the Exclusions panel, click the Import button.
  • Navigate to and select the provided HIPS_Exclusions.txt file.
  • Click Save.

image5a.png

  1. Import the Processes Exclusions.
    • From Settings, select Protections.
    • Select Real-time file system protection.

image5b.png

  • Next to Processes Exclusions click Edit.
  • On the Exclusions panel, click the Import button.
  • Import the exclusions from the Processes_Exclusions.txt file.
  • Click Save.
  • Next, select Assign and choose the workstation(s) where you plan to install the agent.
  • Click Finish.
  1. Import the final Exclusions file.
    • At the bottom of the ESET sidebar, select the ... menu item and choose Exclusions. 
    • Click Import. Import the exclusions from the provided Exclusions.txt file. The imported files should appear as shown below.

image6a.png

Add the hash you saved as an exclusion

  1. Select More > Submitted Files.
    • Use Search to find the hash you copied and saved from ESET above.

image7a.png

image8a.png

  • Hover over the file and click on the three dots that appear.

image8b.png

  1. Select Create an Exclusion.
    The New Exclusion panel appears. You are creating an exclusion for the Windows installer by its file hash.
    image9a.png
    Click Finish to save the exclusion. 
  2. Return to Exclusions.
    The hash exclusion is displayed under the file exclusions.
    image9b.png

Download and install the agent

You should be able to successfully download the installer file and proceed with the installation on the workstation. When the ESET policy is applied to all workstations using ESET Endpoint Security, your network deployment should be successful. 

image10.png

 

Exclusion Lists

The lists are attached below. If you prefer, copy and paste from these lists.

Performance Exclusions

# {"product":"endpoint","version":"10.1","path":"Settings.ExclusionsManagement.PerformanceExclusions","columns":["Path","Description"]}
C:\Windows\System32\Winipdat\*,
C:\Windows\Syswow64\Winipdat\*,
C:\Windows\Winipbin-install\*,
C:\Windows\Winipbin\*,
VisionInstaller.exe,
VisionInstaller.msi,
SPSetupWin.exe,
Uninstall64.exe,
Uninstall32.exe,
C:\Windows\SysWow64\uninstall.exe

 

Processes Exclusions

# {"product":"endpoint","version":"10.1","path":"plugins.01000101.settings.ExcludedProcesses"}
C:\Windows\winipbin\wlcnthr.exe
C:\Windows\winipbin\mrstch.exe
C:\Windows\winipbin\mxcrsc32.exe
C:\windows\winipbin-install\SPSetupWin.exe
C:\windows\winipbin-install\SPSetup64.exe
C:\windows\winipbin-install\SPSetup.exe
C:\windows\winipbin-install\Admin.exe
C:\Windows\SysWow64\uninstall.exe

 

HIPS Exclusions

# {"product":"endpoint","version":"10.1","path":"plugins.01000001.deepBehavioralInspection.exclusions","columns":["target","type"]}
c:\windows\system32\winipdat\*.*,1
c:\windows\syswow64\winipdat\*.*,1
c:\windows\winipbin-install\*.*,1
c:\windows\winipbin\*.*,1
VisionInstaller.exe,1
VisionInstaller.msi,1
SPSetupWin.exe,1
Uninstaller.zip
Uninstall64.exe
Uninstall32.exe
C:\Windows\SysWow64\uninstall.exe

 

Final Exclusions (Exclusions.txt)

# {"product":"home","version":"16.2.15","path":"Settings.ExclusionsManagement.DetectionExclusions","columns":["Id","Path","ThreatName","Description","FileHash"]}
3476cc6f-a39f-4839-943c-b724000000a2,,@NAME=Win32/Monitor.Veriato.R,,
63965409-0395-45d9-bb18-4230000000a3,,@NAME=Win32/Monitor.Veriato.G,,
9d7f478e-ac6e-4abe-877e-47da000000a4,,@NAME=Win32/Monitor.Veriato.F,,
3b49e9e1-6acb-44fd-bbd1-95a7000000a5,,@NAME=Win32/Monitor.Veriato.S,,
022e67be-4a4e-4c9b-b527-dee3000000a6,,@NAME=Win64/Monitor.Veriato.B,,
dac2d9e4-c5d3-421d-82e3-cdf8000000a7,,@NAME=Win64/Monitor.Veriato.E.gen,,
180997dc-5db8-4e06-aa5e-8bce000000a8,,@NAME=Win64/Monitor.Veriato.F,,
ea202a43-ae6b-443a-b39f-f89a000000a9,,@NAME=BH/MonitorVeriato.1@TYPE=ApplicUnwnt,,
64316737-2cb7-4968-8be4-81bf000000ae,VisionInstaller.exe,,,
479aee27-c922-4b43-850a-a958000000af,VisionInstaller.msi,,,
c0cdef1b-1fe9-4b02-8268-e3c0000000b0,SPSetupWin.exe,,,

 

Updated: 01/04/2024 

Powered by Zendesk