Reply to thread

Message

<blockquote data-quote="wat0114" data-source="post: 969758" data-attributes="member: 91306">I can relate to what Kees is getting at, because I remember being puzzled about this here:[URL unfurl=&quot;true&quot;]https://malwaretips.com/threads/hard_configurator-windows-hardening-configurator.66416/post-957044[/URL]...and you responded soon after here:[URL unfurl=&quot;true&quot;]https://malwaretips.com/threads/hard_configurator-windows-hardening-configurator.66416/post-957068[/URL]...and your explanation made sense to me then, and still does today. I used to block those types of user directories when I ran SRP alone without H_C, but then so many complex and granular rules are required that most people don&#039;t have the time nor patience to deal with, such as:<table style='width: 100%'><tr><td>C:\Users\user\AppData\Local\PCHealthCheck\PCHealthCheck.exe
</td></tr><tr><td>C:\Users\user\AppData\Local\Temp\*-*-*-*-*\dismhost.exe
</td></tr><tr><td>C:\Users\user\AppData\Local\Temp\*-*-*-*\*.dll
</td></tr><tr><td>C:\Users\user\AppData\Local\Temp\*.tmp\GoogleUpdate.exe
</td></tr><tr><td>C:\Users\user\AppData\Local\Temp\*.tmp\System.dll
</td></tr><tr><td>C:\Users\user\AppData\Local\Temp\n*.tmp\nsRandom.dll
</td></tr></table>...and of course as you explained, for the Home user these types of restrictions are not needed.</blockquote>

[QUOTE="wat0114, post: 969758, member: 91306"] I can relate to what Kees is getting at, because I remember being puzzled about this here: [URL unfurl="true"]https://malwaretips.com/threads/hard_configurator-windows-hardening-configurator.66416/post-957044[/URL] ...and you responded soon after here: [URL unfurl="true"]https://malwaretips.com/threads/hard_configurator-windows-hardening-configurator.66416/post-957068[/URL] ...and your explanation made sense to me then, and still does today. I used to block those types of user directories when I ran SRP alone without H_C, but then so many complex and granular rules are required that most people don't have the time nor patience to deal with, such as: [TABLE] [TR] [TD][LEFT]C:\Users\user\AppData\Local\PCHealthCheck\PCHealthCheck.exe[/LEFT][/TD] [/TR] [TR] [TD][LEFT]C:\Users\user\AppData\Local\Temp\*-*-*-*-*\dismhost.exe[/LEFT][/TD] [/TR] [TR] [TD][LEFT]C:\Users\user\AppData\Local\Temp\*-*-*-*\*.dll[/LEFT][/TD] [/TR] [TR] [TD][LEFT]C:\Users\user\AppData\Local\Temp\*.tmp\GoogleUpdate.exe[/LEFT][/TD] [/TR] [TR] [TD][LEFT]C:\Users\user\AppData\Local\Temp\*.tmp\System.dll[/LEFT][/TD] [/TR] [TR] [TD][LEFT]C:\Users\user\AppData\Local\Temp\n*.tmp\nsRandom.dll[/LEFT][/TD] [/TR] [/TABLE] ...and of course as you explained, for the Home user these types of restrictions are not needed. [/QUOTE]

Verification