Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 829985" data-attributes="member: 32260">From what I have seen on MT, some forum members apply WD + H_C,&nbsp; or KIS / ESET.You can also use Excubits Bouncer. If you want to keep WD, and use H_C only for blocking LOLBins, then :<ol>
<li data-xf-list-type="ol">Install H_C</li>
<li data-xf-list-type="ol">Press &lt;Load Profile&gt; and choose All_OFF.hdc</li>
<li data-xf-list-type="ol">Press &lt;(Re)Install SRP&gt;</li>
<li data-xf-list-type="ol">Press &lt;Block Sponsors&gt; &lt;Select All&gt;</li>
<li data-xf-list-type="ol">Apply changes.</li>
</ol>The above SRP setup on Windows 64-bit will block over 170 LOLBins (and nothing else) when being run with standard rights.CMD &amp; Powershell and any needed administrative tool can be run by you from elevated shell to do admin tasks. I usually use elevated Total Commander for that. <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite130" alt="(y)" title="Thumbs up&nbsp; &nbsp; (y)" loading="lazy" data-shortname="(y)" /></blockquote>

[QUOTE="Andy Ful, post: 829985, member: 32260"] From what I have seen on MT, some forum members apply WD + H_C, or KIS / ESET. You can also use Excubits Bouncer. If you want to keep WD, and use H_C only for blocking LOLBins, then : [LIST=1] [*]Install H_C [*]Press <Load Profile> and choose All_OFF.hdc [*]Press <(Re)Install SRP> [*]Press <Block Sponsors> <Select All> [*]Apply changes. [/LIST] The above SRP setup on Windows 64-bit will block over 170 LOLBins (and nothing else) when being run with standard rights. CMD & Powershell and any needed administrative tool can be run by you from elevated shell to do admin tasks. I usually use elevated Total Commander for that. (y) [/QUOTE]

Verification