Reply to thread

Message

<blockquote data-quote="Thales" data-source="post: 988869" data-attributes="member: 67896">Little changes on my system (in gpedit)Configured ASR rules manually (set to 1/Block)[SPOILER=&quot;Rules&quot;]Block executable content from email client and webmailBlock all Office applications from creating child processesBlock Office applications from creating executable contentBlock Office applications from injecting code into other processesBlock JavaScript or VBScript from launching downloaded executable contentBlock execution of potentially obfuscated scriptsBlock Win32 API calls from Office macroBlock executable files from running unless they meet a prevalence, age, or trusted list criterionUse advanced protection against ransomwareBlock credential stealing from the Windows local security authority subsystem (lsass.exe)Block process creations originating from PSExec and WMI commandsBlock untrusted and unsigned processes that run from USBBlock Office communication application from creating child processesBlock Adobe Reader from creating child processes[/SPOILER]Turn off real time protection is DisabledAllows to configure remote access to computers by using Remote Desktop Services. DisabledAllow log on through Remote Desktop Services EmptyPrevent users from modifying app and browser settings Enabled</blockquote>

[QUOTE="Thales, post: 988869, member: 67896"] Little changes on my system (in gpedit) Configured ASR rules manually (set to 1/Block) [SPOILER="Rules"]Block executable content from email client and webmail Block all Office applications from creating child processes Block Office applications from creating executable content Block Office applications from injecting code into other processes Block JavaScript or VBScript from launching downloaded executable content Block execution of potentially obfuscated scripts Block Win32 API calls from Office macro Block executable files from running unless they meet a prevalence, age, or trusted list criterion Use advanced protection against ransomware Block credential stealing from the Windows local security authority subsystem (lsass.exe) Block process creations originating from PSExec and WMI commands Block untrusted and unsigned processes that run from USB Block Office communication application from creating child processes Block Adobe Reader from creating child processes[/SPOILER] [B]Turn off real time protection is [/B]Disabled [B]Allows to configure remote access to computers by using Remote Desktop Services.[/B] Disabled [B]Allow log on through Remote Desktop Services[/B] Empty [B]Prevent users from modifying app and browser settings [/B]Enabled [/QUOTE]

Verification