Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Software
Security Apps
Microsoft Defender
ASR Rule: Block executable files from running unless they meet a prevalence, age, or trusted list criteria
Message
<blockquote data-quote="Andy Ful" data-source="post: 843021" data-attributes="member: 32260"><p>I tried the new version (published 30.10.2019) and it is currently accepted by this ASR rule. I also changed some bytes of the executable and after this, it was blocked by ASR. I hope that your issue with the previous version was an accident (maybe M$ guys overlooked it). <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite109" alt=":)" title="Smile :)" loading="lazy" data-shortname=":)" /></p><p></p><p>Edit.</p><p>The version published 12.09.2019 is still blocked by ASR. It seems that either some versions have very low prevalence and some not, or the developer submits some versions to Microsoft (from time to time). Another problem can follow from the frequently pushed new versions (two times a month, without submitting to MS) - the files are not signed and not popular, so they cannot get a sufficient prevalence at all.</p></blockquote><p></p>
[QUOTE="Andy Ful, post: 843021, member: 32260"] I tried the new version (published 30.10.2019) and it is currently accepted by this ASR rule. I also changed some bytes of the executable and after this, it was blocked by ASR. I hope that your issue with the previous version was an accident (maybe M$ guys overlooked it). :) Edit. The version published 12.09.2019 is still blocked by ASR. It seems that either some versions have very low prevalence and some not, or the developer submits some versions to Microsoft (from time to time). Another problem can follow from the frequently pushed new versions (two times a month, without submitting to MS) - the files are not signed and not popular, so they cannot get a sufficient prevalence at all. [/QUOTE]
Insert quotes…
Verification
Post reply
Top