My performance-oriented security config

[MidniteRider]

UAC: Medium
HOSTS file: MVPS
Windows Firewall: On
Windows SmartScreen: On
File checking: VirusTotal | Comodo Instant Malware Analysis
Additional protection: Windows Update | Common Sense Internet Security 2014
Tweaks: AutoRun disabled | EXEs running from Downloads folder or WinRAR temp folder are blocked

 

[MalwareVirus]

"EXEs running from Downloads folder or WinRAR temp folder are blocked"
what way, you are doing it ?

 

[MidniteRider]

"EXEs running from Downloads folder or WinRAR temp folder are blocked"
what way, you are doing it ?

Control Panel > Administrative Tools > Local Security Policy > Software Restriction Policies

 

[MalwareVirus]

SRP is good
Thanks for share

 

[I'm Me]

So what do you do when you want to download a program? Do you just go back in and unblock it?

 

[MidniteRider]

So what do you do when you want to download a program? Do you just go back in and unblock it?

I download it, move it somewhere else (Desktop, for example) and run it. Programs are blocked from running, not downloading.

 

[Ink]

Have you got a guide for the SRP part?

I recall trying a similar method, but downloads ran (ie. executed) successfully through one browser, but not the other - I can't remember what it was though.

 

[MidniteRider]

Have you got a guide for the SRP part?

I recall trying a similar method, but downloads ran successfully through one browser, but not the other - I can't remember what it was though.

Get to SRP, go to "Additional Rules", right click > New Path Rule
That's how I did it.
If you wanna block the same stuff I blocked, create rules for:
C:\Users\-- your user --\Downloads
C:\Users\-- your user --\AppData\Local\Temp\Rar*