Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Inactive Support Threads
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Security
Guides - Privacy & Security Tips
Easy Application Control on Windows
Message
<blockquote data-quote="Andy Ful" data-source="post: 1085631" data-attributes="member: 32260"><p><strong><span style="font-size: 18px"><strong>App Install Control - </strong>Easy Application Control on Windows</span></strong></p><p>Post updated/corrected 21.06.2024</p><p></p><p><strong><span style="color: rgb(184, 49, 47)">On Windows 11, App Install Control works when SAC is in Evaluate Mode or OFF.</span></strong></p><ol> <li data-xf-list-type="ol">Can be easily applied in a few seconds (on Windows 11 the Smart App Control must be set to OFF).</li> <li data-xf-list-type="ol">Blocks files originating from the Internet Zone (files downloaded from the Internet - files with MotW).<br /> Default Block List includes over 100 file types (executables, scripts, scriptlets, shortcuts, etc.).</li> <li data-xf-list-type="ol">Allows popular documents, media files, and other files usually downloaded by home users (except application installers).</li> <li data-xf-list-type="ol">Does not affect already installed applications and software auto-updates.</li> <li data-xf-list-type="ol">Cannot break anything (installed software, Windows Updates, etc.).</li> <li data-xf-list-type="ol">No whitelisting, but the blocked file can be easily unblocked from the right-click Explorer context menu.</li> <li data-xf-list-type="ol">Allows application installations from Microsoft Store and gaming platforms (Steam, Epic Games, etc.).</li> <li data-xf-list-type="ol"><span style="color: rgb(184, 49, 47)"><strong>Does not protect from malware distributed via removable drives shared with other people.</strong></span></li> </ol><p></p><p><strong>Default list of blocked file types (Windows 11):</strong></p><p>.ade, .adp, .app, .appref-ms, .asp, .bas, .bat, .cer, .chm, .cmd, .cnt, .com, .cpl, .crt, .csh, .der, .exe, .fxp, .gadget, .grp, .hlp, .hpj, .hta, .img, .inf, .ins, .iso, .isp, .its, .js, .jse, .ksh, .lnk, .mad, .maf, .mag, .mam, .maq, .mar, .mas, .mat, .mau, .mav, .maw, .mcf, .mda, .mdb, .mde, .mdt, .mdw, .mdz, .msc, .msh, .msh1, .msh1xml, .msh2, .msh2xml, .mshxml, .msi, .msp, .mst, .msu, .ops, .pcd, .pif, .pl, .plg, .prf, .prg, .printerexport, .ps1, .ps1xml, .ps2, .ps2xml, .psc1, .psc2, .psd1, .psm1, .pst, .reg, .scf, .scr, .sct, .shb, .shs, .slk, .theme, .tmp, .vb, .vbp, .vbs, .vhd, .vhdx, .vsmacros, .vsw, .webpnp, .website, .ws, .wsc, .wsf, .wsh, .xnk</p><p></p><p>Those files are probably related to the IE Unsafe File List:</p><p>[URL unfurl="false"]https://learn.microsoft.com/en-us/troubleshoot/developer/browsers/security-privacy/information-about-the-unsafe-file-list[/URL]</p><p></p><p>It is possible to extend the Block List to include other filetypes by editing the Registry key:</p><p><strong><span style="color: rgb(41, 105, 176)">Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\CodeIdentifiers</span></strong></p><p>Details can be found in the post:</p><p>[URL unfurl="false"]https://malwaretips.com/threads/easy-application-control-on-windows.130803/post-1085791[/URL]</p><p></p><p>It would be recommended to add:</p><p> .accda, .accdu, .cab, .csv, .diagcab, .dqy, .ecf, .elf, .fon, .ime, .iqy, .jar, .mdf, .mdn, .oqy, .pa, .ppa, .ppam, .rqy, .rtf, .settingcontent-ms, .wll, .wwl, .xla, .xll, .xlm</p><p></p><p></p><p>[ATTACH=full]283170[/ATTACH]</p><p></p><p></p><p></p><p><strong><span style="font-size: 18px">How to tweak it.</span></strong></p><p></p><p>[ATTACH=full]283169[/ATTACH]</p><p></p><p></p><p><strong><span style="font-size: 18px">How to unblock the file.</span></strong></p><p></p><p>[ATTACH=full]283168[/ATTACH]</p><p></p><p><strong>Easy Application Control can cover almost all initial attack vectors at home if one uses Microsoft Defender + ConfigureDefender, Windows built-in applications (archiver, email-client, etc.), and MS Office. See also:</strong></p><p>[URL unfurl="false"]https://malwaretips.com/threads/easy-application-control-on-windows.130803/post-1085906[/URL]</p></blockquote><p></p>
[QUOTE="Andy Ful, post: 1085631, member: 32260"] [B][SIZE=5][B]App Install Control - [/B]Easy Application Control on Windows[/SIZE][/B] Post updated/corrected 21.06.2024 [B][COLOR=rgb(184, 49, 47)]On Windows 11, App Install Control works when SAC is in Evaluate Mode or OFF.[/COLOR][/B] [LIST=1] [*]Can be easily applied in a few seconds (on Windows 11 the Smart App Control must be set to OFF). [*]Blocks files originating from the Internet Zone (files downloaded from the Internet - files with MotW). Default Block List includes over 100 file types (executables, scripts, scriptlets, shortcuts, etc.). [*]Allows popular documents, media files, and other files usually downloaded by home users (except application installers). [*]Does not affect already installed applications and software auto-updates. [*]Cannot break anything (installed software, Windows Updates, etc.). [*]No whitelisting, but the blocked file can be easily unblocked from the right-click Explorer context menu. [*]Allows application installations from Microsoft Store and gaming platforms (Steam, Epic Games, etc.). [*][COLOR=rgb(184, 49, 47)][B]Does not protect from malware distributed via removable drives shared with other people.[/B][/COLOR] [/LIST] [B]Default list of blocked file types (Windows 11):[/B] .ade, .adp, .app, .appref-ms, .asp, .bas, .bat, .cer, .chm, .cmd, .cnt, .com, .cpl, .crt, .csh, .der, .exe, .fxp, .gadget, .grp, .hlp, .hpj, .hta, .img, .inf, .ins, .iso, .isp, .its, .js, .jse, .ksh, .lnk, .mad, .maf, .mag, .mam, .maq, .mar, .mas, .mat, .mau, .mav, .maw, .mcf, .mda, .mdb, .mde, .mdt, .mdw, .mdz, .msc, .msh, .msh1, .msh1xml, .msh2, .msh2xml, .mshxml, .msi, .msp, .mst, .msu, .ops, .pcd, .pif, .pl, .plg, .prf, .prg, .printerexport, .ps1, .ps1xml, .ps2, .ps2xml, .psc1, .psc2, .psd1, .psm1, .pst, .reg, .scf, .scr, .sct, .shb, .shs, .slk, .theme, .tmp, .vb, .vbp, .vbs, .vhd, .vhdx, .vsmacros, .vsw, .webpnp, .website, .ws, .wsc, .wsf, .wsh, .xnk Those files are probably related to the IE Unsafe File List: [URL unfurl="false"]https://learn.microsoft.com/en-us/troubleshoot/developer/browsers/security-privacy/information-about-the-unsafe-file-list[/URL] It is possible to extend the Block List to include other filetypes by editing the Registry key: [B][COLOR=rgb(41, 105, 176)]Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\CodeIdentifiers[/COLOR][/B] Details can be found in the post: [URL unfurl="false"]https://malwaretips.com/threads/easy-application-control-on-windows.130803/post-1085791[/URL] It would be recommended to add: .accda, .accdu, .cab, .csv, .diagcab, .dqy, .ecf, .elf, .fon, .ime, .iqy, .jar, .mdf, .mdn, .oqy, .pa, .ppa, .ppam, .rqy, .rtf, .settingcontent-ms, .wll, .wwl, .xla, .xll, .xlm [ATTACH type="full" alt="1714683003112.png"]283170[/ATTACH] [B][SIZE=5]How to tweak it.[/SIZE][/B] [ATTACH type="full" alt="1714682278207.png"]283169[/ATTACH] [B][SIZE=5]How to unblock the file.[/SIZE][/B] [ATTACH type="full" alt="1714682221934.png"]283168[/ATTACH] [B]Easy Application Control can cover almost all initial attack vectors at home if one uses Microsoft Defender + ConfigureDefender, Windows built-in applications (archiver, email-client, etc.), and MS Office. See also:[/B] [URL unfurl="false"]https://malwaretips.com/threads/easy-application-control-on-windows.130803/post-1085906[/URL] [/QUOTE]
Insert quotes…
Verification
Post reply
Top
