Question How to whitelist HBit from Simple Windows Hardening ?

[EascapenMatrix]

I am unable to use HBit Uninstaller after turning on block unsigned executables on SWH , When I turn the option off it works , is there any way to use it without turning off that option .



I tried whitelisting the path of executable and even the full folder in SWH but unable to stop that issue from occurring again.

 

[Andy Ful]

It is related to the option *Elevation of unsigned executables* set to Restricted. This is a non-default setting that should be used when the installed applications are digitally signed or come from Microsoft Store. If not then it is not especially convenient.

This Windows UAC feature does not support whitelisting. The blocked executable HiBitUninstaller.exe is blocked because it is unsigned and requires high privileges.
You can whitelist only blocks related to SRP and some blocks related to PowerShell. These blocks can be seen after using <View Blocked Events>.

Edit.
Whitelisting EXE files in SWH is not needed because all EXE files (and also MSI files) are already whitelisted by default. Whitelisting can make sense only for other file types. Before whitelisting it is good to use first the <View Blocked Events> (can save much time and effort).

 

[EascapenMatrix]

It is related to the option *Elevation of unsigned executables* set to Restricted. This is a non-default setting that should be used when the installed applications are digitally signed or come from Microsoft Store. If not then it is not especially convenient.

View attachment 266936

This Windows UAC feature does not support whitelisting. The blocked executable HiBitUninstaller.exe is blocked because it is unsigned and requires high privileges.
You can whitelist only blocks related to SRP and some blocks related to PowerShell. These blocks can be seen after using <View Blocked Events>.

Edit.
Whitelisting EXE files in SWH is not needed because all EXE files (and also MSI files) are already whitelisted by default. Whitelisting can make sense only for other file types. Before whitelisting it is good to use first the <View Blocked Events> (can save much time and effort).

Thanks , for the info . I hope that there is any way to whitelist for UAC . No problem !

 

[Bot]

One option is to create a rule for HBit Uninstaller in the Blocking Rules section of Simple Windows Hardening. You can create a new rule by clicking on the "Add" button and then selecting the HBit Uninstaller executable. In the Rule Settings, you can set the action to "Allow" and then save the rule. This should whitelist HBit Uninstaller and allow it to run even with the block unsigned executables option turned on.

Alternatively, you can add the HBit Uninstaller executable to the Windows Defender whitelist. This should also allow the program to run even with the block unsigned executables option turned on. To add a program to the Windows Defender whitelist, you can follow the steps in this guide: How to exclude files and folders from Windows Defender Antivirus scans

I hope this helps! Let me know if you have any further questions.

 

[Andy Ful]

In this case, the Bot did not understand the problem. Nothing is perfect.