Application Startup Control functionality limitations

Operation of the Application Startup Control component is limited in the following cases:

• When the application version is upgraded, importing Application Startup Control component settings is not supported.

  To restore the functionality of Application Startup Control, you must reconfigure the settings of the component.

• If there is no connection with KSN servers, Kaspersky Endpoint Security receives information about the reputation of applications and their modules only from local databases. If the local databases do not contain information about the application, the application will not be categorized into a trust group.

  The categorization of applications when there is a connection with KSN servers may differ from their categorization when there is no connection with KSN.

• At the Kaspersky Security Center database, information on 150,000 processed files may be stored. Once this number of records has been achieved, new files will not be processed. To resume inventory operations, you must delete the files that were previously inventoried in the Kaspersky Security Center database from the computer on which Kaspersky Endpoint Security is installed.
• The component does not control the startup of scripts unless the script is sent to the interpreter via the command line.

  If the startup of an interpreter is allowed by Application Startup Control rules, the component will not block a script started from this interpreter.

• The component does not control the startup of scripts from interpreters that are not supported by Kaspersky Endpoint Security.

  Kaspersky Endpoint Security supports the following interpreters:

  • Java
  • PowerShell

  The following types of interpreters are supported:

  • { cCmdLineParser::itCmd, _T("%ComSpec%") };
  • { cCmdLineParser::itReg, _T("%SystemRoot%\\system32\\reg.exe") };
  • { cCmdLineParser::itRegedit, _T("%SystemRoot%\\system32\\regedit.exe") };
  • { cCmdLineParser::itRegedit, _T("%SystemRoot%\\regedit.exe") };
  • { cCmdLineParser::itRegedit, _T("%SystemRoot%\\system32\\regedt32.exe") };
  • { cCmdLineParser::itCWScript, _T("%SystemRoot%\\system32\\cscript.exe") };
  • { cCmdLineParser::itCWScript, _T("%SystemRoot%\\system32\\wscript.exe") };
  • { cCmdLineParser::itMsiexec, _T("%SystemRoot%\\system32\\msiexec.exe") };
  • { cCmdLineParser::itMmc, _T("%SystemRoot%\\system32\\mmc.exe") };
  • { cCmdLineParser::itMshta, _T("%SystemRoot%\\system32\\mshta.exe") };
  • { cCmdLineParser::itRundll, _T("%SystemRoot%\\system32\\rundll32.exe") };
  • { cCmdLineParser::itMetro, _T("%SystemRoot%\\system32\\wwahost.exe") };
  • { cCmdLineParser::itCmd, _T("%SystemRoot%\\syswow64\\cmd.exe") };
  • { cCmdLineParser::itReg, _T("%SystemRoot%\\syswow64\\reg.exe") };
  • { cCmdLineParser::itRegedit, _T("%SystemRoot%\\syswow64\\regedit.exe") };
  • { cCmdLineParser::itRegedit, _T("%SystemRoot%\\syswow64\\regedt32.exe") };
  • { cCmdLineParser::itCWScript, _T("%SystemRoot%\\syswow64\\cscript.exe") };
  • { cCmdLineParser::itCWScript, _T("%SystemRoot%\\syswow64\\wscript.exe") };
  • { cCmdLineParser::itMsiexec, _T("%SystemRoot%\\syswow64\\msiexec.exe") };
  • { cCmdLineParser::itMmc, _T("%SystemRoot%\\syswow64\\mmc.exe") };
  • { cCmdLineParser::itMshta, _T("%SystemRoot%\\syswow64\\mshta.exe") };
  • { cCmdLineParser::itRundll, _T("%SystemRoot%\\syswow64\\rundll32.exe") };
  • { cCmdLineParser::itMetro, _T("%SystemRoot%\\syswow64\\wwahost.exe") }.

Page top