Reply to thread

Message

<blockquote data-quote="Deleted member 178" data-source="post: 605214">Yes i want to see a test against Win10 native security.Part 1 - SUA with UAC At max- Smartscreen set to warn block- allow softwares from Appstore only- malware must be downloaded in the test system, not imported from other sources (that must be shown during the test).- click &quot;no&quot; to any prompts.Part 2 Using this reg tweak (implemented on Admin Account)Blocking Unsigned Elevation :90% of malware are unsigned and will request an elevation from UAC, this trick will block the request.Create a registry file with this lines :[CODE]Windows Registry Editor Version 5.00[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]&quot;ValidateAdminCodeSignatures&quot;=dword:00000001[/CODE]If successfully implemented, the next unsigned process/program; won&#039;t be allow to execute, and you will have a error box.To re-enabled unsigned elevation , use the same line but with &quot;dword:00000000&quot;</blockquote>

[QUOTE="Deleted member 178, post: 605214"] Yes i want to see a test against Win10 native security. [B]Part 1 [/B] - SUA with UAC At max - Smartscreen set to warn block - allow softwares from Appstore only - malware must be downloaded in the test system, not imported from other sources (that must be shown during the test). - click "no" to any prompts. [B]Part 2 [/B] Using this reg tweak (implemented on Admin Account) [B]Blocking Unsigned Elevation :[/B] 90% of malware are unsigned and will request an elevation from UAC, this trick will block the request. Create a registry file with this lines : [CODE]Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] "ValidateAdminCodeSignatures"=dword:00000001[/CODE] If successfully implemented, the next unsigned process/program; won't be allow to execute, and you will have a error box. To re-enabled unsigned elevation , use the same line but with "dword:00000000" [/QUOTE]

Verification