If Belkasoft product is blocked by antivirus

The product is most likely being blocked by your antivirus if

  • It does not show up, even if the process is present in Task Manager, when run
  • It crashes immediately after start
  • It issues the error that it is being blocked by an antivirus
  • All analysis tasks fail, when started

Windows Defender

If you have Windows Defender, it may prevent the product from successful start even if it is not running (for example, when another antivirus is installed). In this case, the product silently closes and your main antivirus does not give you any meaningful log information. If the product is blocked by Windows Defender or your antivirus program, please add the following items to the exclusions list:

  1. The Belkasoft X product folder.
  2. The 'App' subfolder within the product folder.
  3. All executable files inside the 'App' subfolder.

If Defender or the antivirus program has moved or deleted files from the product folder, please reinstall Belkasoft X to a previously whitelisted folder.

In some cases, files from the installation package can be removed by Defender/antivirus during the archive unpacking stage. To prevent this, whitelist the Belkasoft X installation package before unpacking. Then, unpack it and reinstall Belkasoft X to a whitelisted folder.

Avast or similar antivirus

In the screenshots below you can see how to tune your antivirus to allow Belkasoft to start and work smoothly. This example shows settings for Avast antivirus:

Step 1: Open menu

Step2: Open settings

Step 3: Add Belkasoft product to exclusions

Sophos

For the Sophos antivirus, turn off "Dynamic shellcode protection" (requires administrator rights).

Comodo EDR

If you have Comodo Endpoint Detection and Response (Comodo EDR) installed, you may need to uninstall or disable its Endpoint Manager.

If Belkasoft is blocked by Windows 10

Windows 10 can show you the unknown application warning. In order to run Belkasoft product anyway, click 'More info' and then 'Run anyway' button as shown below: