To stay updated on your favorite discussions, please create an account or log in. Then, click the Bookmark icon to subscribe and receive notifications.

Howto Tell F-Secure to block certain file extensions- if they be written?

Options
Bla
Bla W/ Alumni Posts: 3 Security Scout

Hallo,

i will Tell F-Secure to block, not allow to write certain file extensions.

Is there a way to do it?

This Couleur be a step in securin against ransomware.

sincerly 

Peter 

 

Comments

  • Vad
    Vad W/ Alumni Posts: 1,069 Cybercrime Crusader
    Options

    Hello Bla,

     

    It is possible to update the list of file extensions for real-time scanning for viruses.

    But it's not possible to prevent creating or writing to file with specific extension, if the virus is not detected in it.

     

    Best regards,

    Vad

  • MJ-perComp
    MJ-perComp W/ Alumni Posts: 669 Firewall Master
    Options

    Hi,

    while generally your wish to keep certain files/modifications away from your files is ok, please keep in mind that writing a file, even with malware is not the dangerous part. Not even reading the content of a file is dangerous. Only executing a dagerous procedure in the content is the action you do not want.

    And that exactly is what F-Secure is doing, if you have not excluded any object, any extention or disabled some module. In other words please do not try that.

     

    What you need is to disallow the logged on user to execute the potential dangerous filetype, but that is not a task for an Anti-Malware. Use standard Windows features to do that. Still some programs would even execute a file if the extention is wrong.

    I do not have a good idea how come around the problem if you generally want the user to execute a special VBS but not any VBS unless you sign each wanted VBS and deny all unsigned.

This discussion has been closed.