Enable/Disable Resident Shield by Agent Procedure

You can disable/enable Resident Shield using the following Execute Shell Command in an agent procedure. In the agent working directory, run:

C:\kworking\kes>KasAVCmd -setFileMonitorEnable 0   ;disables Resident Shield

C:\kworking\kes>KasAVCmd -setFileMonitorEnable 1   ;enables Resident Shield

Script Name: KES_Enable Resident Shield

Script Description: Enables Resident Shield temporarily (until next scan or reboot...unless it is enabled by default and is being re-enabled after being temporarily disabled)

IF True 

THEN

   Get Variable

     Parameter 1 : 10

     Parameter 2 : 

     Parameter 3 : agenttemp

         OS Type : 0

   Execute File

     Parameter 1 : #agenttemp#\kes\KasAVCmd.exe

     Parameter 2 : -setFileMonitorEnable 1

     Parameter 3 : 3

         OS Type : 0

ELSE

Script Name: KES_Disable Resident Shield

Script Description: Disables Resident Shield temporarily (until next scan or reboot)

IF True 

THEN

   Get Variable

     Parameter 1 : 10

     Parameter 2 : 

     Parameter 3 : agenttemp

         OS Type : 0

   Execute File

     Parameter 1 : #agenttemp#\kes\KasAVCmd.exe

     Parameter 2 : -setFileMonitorEnable 0

     Parameter 3 : 3

         OS Type : 0

ELSE

Topic 5355: Send Feedback. Download a PDF of this online book from the first topic in the table of contents. Print this topic.