Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 791562" data-attributes="member: 32260">H_C is very similar to CF with autosandbox set to Block (no HIPS). But, H_C does not block administrative processes, like Windows updates or system scheduled tasks, and uses forced SmartScreen (instead of File Lookup).CF can be used in organizations and businesses, because it is stronger against the attacks originated from the local network, especially when those attacks are already elevated.The advantage of using H_C can be important only in the home environment, because the home users usually do not need the features related to the local network, like SMB protocols, Remote Desktop, Remote Assistance, Remote Shell, Remote Registry, admin scripting, etc. If those features are blocked, then the attack from the local network is hardly possible.It follows from the above, that in the home environment with H_C settings, the attack via already elevated malware is highly improbable. Any malware must be then originated by the user, so has to initially run not elevated (on Windows Vista and higher versions). Hard_Configurator is made to block such processes (so they cannot also bypass UAC), by using default-deny settings.</blockquote>

[QUOTE="Andy Ful, post: 791562, member: 32260"] H_C is very similar to CF with autosandbox set to Block (no HIPS). But, H_C does not block administrative processes, like Windows updates or system scheduled tasks, and uses forced SmartScreen (instead of File Lookup). CF can be used in organizations and businesses, because it is stronger against the attacks originated from the local network, especially when those attacks are already elevated. The advantage of using H_C can be important only in the home environment, because the home users usually do not need the features related to the local network, like SMB protocols, Remote Desktop, Remote Assistance, Remote Shell, Remote Registry, admin scripting, etc. If those features are blocked, then the attack from the local network is hardly possible. It follows from the above, that in the home environment with H_C settings, the attack via already elevated malware is highly improbable. Any malware must be then originated by the user, so has to initially run not elevated (on Windows Vista and higher versions). Hard_Configurator is made to block such processes (so they cannot also bypass UAC), by using default-deny settings. [/QUOTE]

Verification