Howto Tell F-Secure to block certain file extensions- if they be written?

Bla

Hallo,

i will Tell F-Secure to block, not allow to write certain file extensions.

Is there a way to do it?

This Couleur be a step in securin against ransomware.

sincerly 

Peter 

 

Vad

Hello Bla,

 

It is possible to update the list of file extensions for real-time scanning for viruses.

But it's not possible to prevent creating or writing to file with specific extension, if the virus is not detected in it.

 

Best regards,

Vad

MJ-perComp

Hi,

while generally your wish to keep certain files/modifications away from your files is ok, please keep in mind that writing a file, even with malware is not the dangerous part. Not even reading the content of a file is dangerous. Only executing a dagerous procedure in the content is the action you do not want.

And that exactly is what F-Secure is doing, if you have not excluded any object, any extention or disabled some module. In other words please do not try that.

 

What you need is to disallow the logged on user to execute the potential dangerous filetype, but that is not a task for an Anti-Malware. Use standard Windows features to do that. Still some programs would even execute a file if the extention is wrong.

I do not have a good idea how come around the problem if you generally want the user to execute a special VBS but not any VBS unless you sign each wanted VBS and deny all unsigned.