Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 842064" data-attributes="member: 32260">You can do it, but in most cases, it would not work because some executables will be unpacked and run from the user temporary folder. Furthermore, it is not necessary. The new updater will be allowed by Microsoft tomorrow when it will gain more prevalence.<img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite130" alt="(y)" title="Thumbs up&nbsp; &nbsp; (y)" loading="lazy" data-shortname="(y)" /><img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite135" alt=":giggle:" title="Giggle&nbsp; &nbsp; :giggle:" loading="lazy" data-shortname=":giggle:" />Yes, this ASR rule is activated in MAX Protection Level.:emoji_ok_hand:Disable WD, run the updater, enable WD, restart Windows.Restarting Windows is necessary to make ASR rules work properly.<img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite130" alt="(y)" title="Thumbs up&nbsp; &nbsp; (y)" loading="lazy" data-shortname="(y)" /></blockquote>

[QUOTE="Andy Ful, post: 842064, member: 32260"] You can do it, but in most cases, it would not work because some executables will be unpacked and run from the user temporary folder. Furthermore, it is not necessary. The new updater will be allowed by Microsoft tomorrow when it will gain more prevalence.(y):giggle: Yes, this ASR rule is activated in MAX Protection Level.:emoji_ok_hand: Disable WD, run the updater, enable WD, [B][COLOR=rgb(184, 49, 47)]restart Windows[/COLOR][/B]. Restarting Windows is necessary to make ASR rules work properly.(y) [/QUOTE]

Verification