Applies to: Windows Agent 10.x
Article No: 19149946842135
To allow downloading and installing the Veriato Windows Agent, follow the steps below before you begin. Your ESET product may differ from the one shown here. We recommend consulting the ESET KnowledgeBase for your product version for more accurate steps. However, do use the recommended exclusions below. See Antivirus Exclusions for Windows for a complete list of files, and if you still have trouble, contact Support.
Attempt to download the agent
On a workstation where ESET is installed, access the console app and use Admin | Download Agents wizard to download the Windows agent. This step will allow you to retrieve the file hash in the next step.
- There may be a browser warning.
- An ESET message warns that a "Threat" file was removed.
- Follow the steps below before downloading the installer file again.
Retrieve a file hash from the workstation
You will use the hash as an exclusion for the installer.
- Open the ESET Endpoint Security workstation console.
You will find ESET in the Windows taskbar. - From the menu, select Tools > Log files.
You will see that the installer file has been detected as a "trojan."
Click on the entry for the removed file.
Find and copy the hash for the detected file. Paste it into Notepad to use in the steps below.
Download four exclusion lists
Importing a list conveniently adds the exclusions you need to the correct area of ESET. These lists are attached at the end of this article.
- Performance_Exclusions.txt
- HIPS_Exclusions.txt
- Exclusions.txt
- Processes_Exclusions.txt
Import exclusions into ESET Protect Cloud
- Login to ESET Protect Cloud portal
To set exclusions, open a browser and login to your ESET portal. - Select Policies from the side menu.
On the Policies page, hover over the policy that applies to the devices where you need to add exclusions. Click on three dots displayed on hovering. - Select the Edit option to open the Edit Policy page.
Click on the Settings option.
- Select Detection Engine.
A menu presents options. You will need to add: Performance Exclusions, HIPS Exclusions, Processes Exclusions, and More > Exclusions - Import the Performance exclusions.
- Under Detection Engine, select Exclusions > Performance exclusions. Click Edit.
- On the Performance Exclusions panel, click Import.
- Navigate to and select your downloaded Performance_Exclusions.txt file.
- The Exclude path list should be populated with the imported paths as shown below. Click Save.
- Import the HIPS exclusions.
- Under Detection Engine, select HIPS.
- In the right panel, under Host Intrusion Prevention, find Deep Behavioral Inspection.
- Next to Exclusions, click Edit.
- On the Exclusions panel, click the Import button.
- Navigate to and select the provided HIPS_Exclusions.txt file.
- Click Save.
- Import the Processes Exclusions.
- From Settings, select Protections.
- Select Real-time file system protection.
- Next to Processes Exclusions click Edit.
- On the Exclusions panel, click the Import button.
- Import the exclusions from the Processes_Exclusions.txt file.
- Click Save.
- Next, select Assign and choose the workstation(s) where you plan to install the agent.
- Click Finish.
- Import the final Exclusions file.
- At the bottom of the ESET sidebar, select the ... menu item and choose Exclusions.
- Click Import. Import the exclusions from the provided Exclusions.txt file. The imported files should appear as shown below.
Add the hash you saved as an exclusion
- Select More > Submitted Files.
- Use Search to find the hash you copied and saved from ESET above.
- Hover over the file and click on the three dots that appear.
- Select Create an Exclusion.
The New Exclusion panel appears. You are creating an exclusion for the Windows installer by its file hash.
Click Finish to save the exclusion. - Return to Exclusions.
The hash exclusion is displayed under the file exclusions.
Download and install the agent
You should be able to successfully download the installer file and proceed with the installation on the workstation. When the ESET policy is applied to all workstations using ESET Endpoint Security, your network deployment should be successful.
Exclusion Lists
The lists are attached below. If you prefer, copy and paste from these lists.
Performance Exclusions
# {"product":"endpoint","version":"10.1","path":"Settings.ExclusionsManagement.PerformanceExclusions","columns":["Path","Description"]}
C:\Windows\System32\Winipdat\*,
C:\Windows\Syswow64\Winipdat\*,
C:\Windows\Winipbin-install\*,
C:\Windows\Winipbin\*,
VisionInstaller.exe,
VisionInstaller.msi,
SPSetupWin.exe,
Uninstall64.exe,
Uninstall32.exe,
C:\Windows\SysWow64\uninstall.exe
Processes Exclusions
# {"product":"endpoint","version":"10.1","path":"plugins.01000101.settings.ExcludedProcesses"}
C:\Windows\winipbin\wlcnthr.exe
C:\Windows\winipbin\mrstch.exe
C:\Windows\winipbin\mxcrsc32.exe
C:\windows\winipbin-install\SPSetupWin.exe
C:\windows\winipbin-install\SPSetup64.exe
C:\windows\winipbin-install\SPSetup.exe
C:\windows\winipbin-install\Admin.exe
C:\Windows\SysWow64\uninstall.exe
HIPS Exclusions
# {"product":"endpoint","version":"10.1","path":"plugins.01000001.deepBehavioralInspection.exclusions","columns":["target","type"]}
c:\windows\system32\winipdat\*.*,1
c:\windows\syswow64\winipdat\*.*,1
c:\windows\winipbin-install\*.*,1
c:\windows\winipbin\*.*,1
VisionInstaller.exe,1
VisionInstaller.msi,1
SPSetupWin.exe,1
Uninstaller.zip
Uninstall64.exe
Uninstall32.exe
C:\Windows\SysWow64\uninstall.exe
Final Exclusions (Exclusions.txt)
# {"product":"home","version":"16.2.15","path":"Settings.ExclusionsManagement.DetectionExclusions","columns":["Id","Path","ThreatName","Description","FileHash"]}
3476cc6f-a39f-4839-943c-b724000000a2,,@NAME=Win32/Monitor.Veriato.R,,
63965409-0395-45d9-bb18-4230000000a3,,@NAME=Win32/Monitor.Veriato.G,,
9d7f478e-ac6e-4abe-877e-47da000000a4,,@NAME=Win32/Monitor.Veriato.F,,
3b49e9e1-6acb-44fd-bbd1-95a7000000a5,,@NAME=Win32/Monitor.Veriato.S,,
022e67be-4a4e-4c9b-b527-dee3000000a6,,@NAME=Win64/Monitor.Veriato.B,,
dac2d9e4-c5d3-421d-82e3-cdf8000000a7,,@NAME=Win64/Monitor.Veriato.E.gen,,
180997dc-5db8-4e06-aa5e-8bce000000a8,,@NAME=Win64/Monitor.Veriato.F,,
ea202a43-ae6b-443a-b39f-f89a000000a9,,@NAME=BH/MonitorVeriato.1@TYPE=ApplicUnwnt,,
64316737-2cb7-4968-8be4-81bf000000ae,VisionInstaller.exe,,,
479aee27-c922-4b43-850a-a958000000af,VisionInstaller.msi,,,
c0cdef1b-1fe9-4b02-8268-e3c0000000b0,SPSetupWin.exe,,,
Updated: 01/04/2024