Skip to content

Run Emilia Tunnels with Kaspersky

Use this guide when Kaspersky blocks, quarantines, or removes Emilia Tunnels on a Windows computer.

The goal is to allow only the official Emilia Tunnels executables. You should not disable Kaspersky or exclude a whole disk or system folder.

Use only the official EmiliaVision installer

Continue only if the installer came from the EmiliaVision download page or directly from EmiliaVision support. Do not restore or allow a file downloaded from another source.

Before changing Kaspersky

  1. Open the Kaspersky alert or quarantine history.
  2. Record the detection name, time, and complete affected file path. A screenshot is helpful.
  3. Confirm you can approve Windows administrator prompts.
  4. Check whether Kaspersky says its settings are managed by your organization.

If the controls are locked, ask your IT or Kaspersky administrator to make the policy change. Do not try to bypass a centrally managed policy.

Main executable to allow

The installed Windows service uses this path:

C:\Program Files\EmiliaVision\emilia-tunnels.exe

Add this exact executable as both a trusted application and a malware scan exclusion. Kaspersky treats these as separate settings: trusting application activity does not necessarily stop the executable itself from being scanned or quarantined.

If Kaspersky blocked emilia-tunnels.exe inside the extracted installer folder before installation completed, select only that exact file as an additional exception. Do not exclude the Downloads folder.

Step 1: Add a trusted application

Kaspersky menu names may differ slightly by version.

On a locally managed computer

  1. Open Kaspersky Endpoint Security and select Settings.
  2. Open General settings → Exclusions and types of detected objects.
  3. Open Specify trusted applications.

  4. Add:

    C:\Program Files\EmiliaVision\emilia-tunnels.exe

  5. Use the full process path as the trust criterion.

  6. Enable Do not monitor application activity and save the change.

Do not disable every monitoring option. Start with the minimum setting above.

In Kaspersky Security Center

The Kaspersky administrator should open the active Endpoint Security policy and go to:

Application settings → Trusted Zone → Applications

Add the same exact executable path and apply the policy to the affected computer.

Step 2: Add a malware scan exclusion

On a locally managed computer

  1. Return to General settings → Exclusions and types of detected objects.
  2. Open Manage exclusions.

  3. Add an active file exclusion for:

    C:\Program Files\EmiliaVision\emilia-tunnels.exe

  4. Save the change.

In Kaspersky Security Center

In the active Endpoint Security policy, go to:

Application settings → Trusted Zone → Malware Scan exclusions

Add the same exact file path and apply the policy.

Step 3: Check Application Control only when reported

This step is needed only if the Kaspersky event specifically says Application Control blocked Emilia Tunnels.

Ask the Kaspersky administrator to create an Allow rule for:

C:\Program Files\EmiliaVision\emilia-tunnels.exe

The rule must apply to the Windows service account or applicable users. Prefer the administrator-controlled path instead of a fixed hash-only rule because the executable hash changes when Emilia Tunnels updates.

If Kaspersky names another Emilia executable

Only add the executable named in the Kaspersky detection. Emilia Tunnels may use these approved sidecars:

C:\Program Files\EmiliaVision\emilia-iroh.exe
C:\Program Files\EmiliaVision\emilia-tunnels-fulcrum.exe
C:\Program Files\EmiliaVision\emilia-printer-bridge.exe

If the alert names another path, preserve the alert and contact EmiliaVision support instead of excluding a larger folder.

Retry and verify

  1. If Kaspersky removed the executable, run the official install-emilia-tunnels.cmd again as administrator after the exceptions are active.
  2. Press Win+R, enter services.msc, and press Enter.
  3. Find Emilia Tunnels.
  4. Confirm its status is Running and its startup type is Automatic.
  5. Keep the computer powered on and connected to the internet.

If the service stops again or the executable disappears, do not repeatedly clean and reinstall it. Save the new Kaspersky detection details and contact support.

Do not do this

  • Do not permanently disable Kaspersky.
  • Do not disable Windows Firewall.
  • Do not exclude C:\, C:\Program Files, C:\ProgramData, C:\Windows\Temp, or the entire Downloads folder.
  • Do not allow a file from an unofficial source.
  • Do not change a centrally managed Kaspersky policy without its administrator.

Official Kaspersky references

Support