¿Puede mcafee8.0i guardar el archivo de configuración?
Está bien~~
No es algo bueno. Tenga en cuenta que no lo escribí yo, sino White Crow.
Crea un nuevo archivo de texto
Editor del Registro de Windows versión 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\Shared Components\On Access Scanner\BehaviourBlocking]
"PortBlockReportMinutes"=dword: 00000001
"bLimitSize_Ent"=dword:00000001
"ShareBlockReport"=dword:00000001
"LogFileFormat_Ent"=dword:00000001
"FileBlockEnabled_8"=dword: 00000001
"FileBlockEnabled_1"=dword:00000001
"VSIDBlockOnNonVirus"=dword:00000000
"FileBlockEnabled_28"=dword:00000001
"EnterceptShowMessages"=dword:00000000
"FileBlockEnabled_26"=dword:00000001
"bLogToFile"=dword:00000001
"FileBlockEnabled_4 "=dword:00000001
"FileBlockEnabled_13"=dword:00000001
"FileBlockEnabled_19"=dword:00000001
"FileBlockEnabled_12"=dword:00000001
"FileBlockEnabled_18 "=dword:00000001
"FileBlockEnabled_0"=dword:00000001
"bLogToFile_Ent"=dword:00000001
"FileBlockEnabled_2"= dword:00000001
"FileBlockEnabled_11"=dword:00000001
"FileBlockEnabled_10"=dword:00000001
"VSIDMessage"=""
"FileBlockEnabled_23"=dword :00000001
"FileBlockEnabled_17"=dword:00000001
"FileBlockEnabled_9"=dword:00000001
"VSIDSendMessage"=dword:00000000
"PortBlockReport"=dword:00000001
"szLogFileName"="%VSEDEFLOGDIR%\\AccessProtectionLog.txt"
"FileBlockEnabled_3"=dword:00000001
"FileBlockEnabled_20"=dword:00000001
"Fi
leBlockEnabled_27"=dword:00000001
"FileBlockEnabled_30"=dword:00000000
"FileBlockEnabled_25"=dword:00000001
"dwMaxLogSizeMB"=dword:00000001 p> p>
"FileBlockEnabled_22"=dword:00000001
"FileBlockEnabled_5"=dword:00000001
"FileBlockEnabled_16"=dword:00000001
" bLimitSize" =dword:00000001
"VSIDBlock"=dword:00000001
"dwMaxLogSizeMB_Ent"=dword:00000001
"ShareBlockMode"=dword:00000002 p>
"LogFileFormat"=dword:00000001
"FileBlockEnabled_15"=dword:00000001
"PortBlockProcessExclusionList"=hex(7):46,00,72,00, 61, 00,6d,00,65,00,77,00,6f,\
00,72,00,6b,00,53,00,65,00,72,00,76, 00, 69,00,63,00,65,00,2e,00,65,00,78,00,\
65,00,00,00,41,00,67,00, 65, 00,6e,00,74,00,6e,00,74,00,2e,00,65,00,78,00,65,\
00,00,00,00, 00
"VSIDBlockTimeout"=dword:0000000a
"FileBlockEnabled_14"=dword:00000001
"EnterceptMode"=dword:00000001
"FileBlockEnabled_29 "=dword:00000001
"FileBlockEnabled_6"=dword:00000001
"szLogFileName_Ent"="%VSEDEFLOGDIR%\\BufferOverflowProtectionLog.txt"
" FileBlockEnabled_24" =dword:00000001
"FileBlockEnabled_7"=dword:00000001
"EnterceptEnabled"=dword:00000001
"FileBlockEnabled_21"=dword:00000001 p>
"FileBlockEnabled_31"=dword:00000001
"FileBlockEnabled_32"=dword:00000001
"FileBlockEnabled_33"=dword:00000001
"FileBlockEnabled_34" =dword :00000001
"FileBlockEnabled_35"=dword:00000001
"FileBlockEnabled_36"=dword:00000001
p>
"FileBlockEnabled_37"=dword:00000001
"FileBlockEnabled_38"=dword:00000001
"FileBlockEnabled_39"=dword:00000001
"FileBlockEnabled_40" =dword:00000001
"FileBlockEnabled_41"=dword:00000001
"FileBlockEnabled_42"=dword:00000001
"FileBlockEnabled_43"=dword:00000001
"FileBlockEnabled_44"=dword:00000001
"FileBlockEnabled_45"=dword:00000001
"FileBlockEnabled_46"=dword:00000001
"FileBlockEnabled_47"=dword :00000001
"FileBlockEnabled_48"=dword:00000001
"FileBlockEnabled_49"=dword:00000001
"FileBlockEnabled_50"=dword:00000001
"FileBlockEnabled_51"=dword:00000001
"FileBlockEnabled_52"=dword:00000001
"FileBlockEnabled_53"=dword:00000001
"FileBlockEnabled_54"=dword:00000001
"FileBlockEnabled_55"=dword:00000001
"FileBlockEnabled_56"=dword:00000001
"FileBlockEnabled_57"=dword:00000001
" FileBlockEnabled_58"=dword:00000001
"FileBlockEnabled_59"=dword:00000001
"FileBlockEnabled_60"=dword:00000001
"FileBlockEnabled_61"=dword:00000001 p> p>
"FileBlockEnabled_62"=dword:00000001
"FileBlockEnabled_63"=dword:00000001
"FileBlockEnabled_64"=dword:00000001
" FileBlockEnabled_65" =dword:00000001
"FileBlockEnabled_66"=dword:00000001
"FileBlockEnabled_67"=dword:00000001
"FileBlockEnabled_68"=dword:00000001 p>
"FileBlockEnabled_69"=dword:00000001
"FileBlockEnabled_70"=dword:00000001
"FileBlockEnabled_71"=dword:00000
001
"FileBlockEnabled_72"=dword:00000001
"FileBlockEnabled_73"=dword:00000001
"FileBlockEnabled_74"=dword:00000001
"FileBlockEnabled_75"=dword:00000001
"FileBlockEnabled_76"=dword:00000001
"FileBlockEnabled_77"=dword:00000001
"FileBlockEnabled_78"=dword:00000001
"FileBlockEnabled_79"=dword:00000001
"FileBlockEnabled_80"=dword:00000000
"FileBlockEnabled_81"=dword:00000001
"FileBlockEnabled_82 "=dword:00000001
"FileBlockEnabled_83"=dword:00000001
"FileBlockEnabled_84"=dword:00000001
"FileBlockEnabled_85"=dword:00000001
"FileBlockEnabled_86"=dword:00000001
"FileBlockEnabled_87"=dword:00000001
"FileBlockEnabled_88"=dword:00000000
"FileBlockEnabled_89"= dword:00000001
"FileBlockEnabled_90"=dword:00000001
"FileBlockEnabled_91"=dword:00000001
"FileBlockEnabled_92"=dword:00000001
"FileBlockEnabled_93"=dword:00000001
"FileBlockEnabled_94"=dword:00000001
"FileBlockEnabled_95"=dword:00000001
"FileBlockEnabled_96"=dword: 00000001
"FileBlockEnabled_97"=dword:00000001
"PortBlockEnabled_0"=dword:00000001
"PortBlockName_0"="Prohíbe gusanos que envían grandes cantidades de correo desde enviando correos "
"PortBlockDirection_0"=dword:00000001
"PortBlockRange_0"="25"
"PortBlockWhiteList_0"="foxmail.exe"
"PortBlockEnabled_1"=dword:00000001
"PortBlockName_1"="Desactivar comunicación IRC saliente"
"PortBlockDirection_1"=dword:00000001
" PortBlockRange_1 "="6666-6669"
"PortBlo
ckWhiteList_1"=""
"PortBlockEnabled_2"=dword:00000001
"PortBlockName_2"="Desactivar comunicación IRC entrante"
"PortBlockDirection_2"=dword: 00000000
"PortBlockRange_2"="6666-6669"
"PortBlockWhiteList_2"=""
"PortBlockEnabled_3"=dword:00000000
"PortBlockName_3"="Está prohibida la descarga desde la World Wide Web"
"PortBlockDirection_3"=dword:00000001
"PortBlockRange_3"="80"
" PortBlockWhiteList_3" ="thunder5.exe,TTraveler.exe,qq.exe,qqpet.exe,IEXPLORE.EXE,paipaiclient.exe,dexplore.exe,HDRoom.exe,msnmsgr.exe,tbstudio.exe,aupdrun.exe,outpost. exe, QQDownload.exe,MSNmsgr.exe,WINWORD.EXE"
"PortBlockEnabled_4"=dword:00000000
"PortBlockName_4"="Desactivar comunicación entrante FTP (evita la propagación de virus como Nimda )"
"PortBlockDirection_4"=dword:00000000
"PortBlockRange_4"="20-21"
"PortBlockWhiteList_4"="flashfxp.exe ,cuteftppro. exe,thunder5.exe"
"PortBlockEnabled_5"=dword:00000001
"PortBlockName_5"="Deshabilitar la comunicación saliente FTP (evitar que los virus descarguen archivos)"
"PortBlockDirection_5"=dword:00000001
"PortBlockRange_5"="20-21"
"PortBlockWhiteList_5"="flashfxp.exe,cuteftppro.exe,thunder5.exe ,HEOnline. exe"
"PortBlockEnabled_6"=dword:00000001
"PortBlockName_6"="Bloquear el puerto Telnet 23 para que no se conecte al host local"
" PortBlockDirection_6"=dword:00000000
"PortBlockRange_6"="23"
"PortBlockWhiteList_6"=""
"PortBlockEnabled_7"=dword:00000001
"PortBlockName_7 "="Bloquear la conexión SA predeterminada de SQL al host local"
"PortBlockDirection_7"=dword:00000000
"PortBlockRange_7"="1433"
"PortBlockWhiteList_7 "=""
"PortBlockEnabled_8"=dwo
rd:00000001
"PortBlockName_8"="Bloquear la conexión del terminal remoto 3389 al host local"
"PortBlockDirection_8"=dword:00000000
"PortBlockRange_8" ="3389 "
"PortBlockWhiteList_8"=""
"PortBlockEnabled_9"=dword:00000001
"PortBlockName_9"="Conexión de control remoto del bloque 4778 a local host"
p>
"PortBlockDirection_9"=dword:00000000
"PortBlockRange_9"="4778"
"PortBlockWhiteList_9"="" p>
"PortBlockEnabled_10"= dword:00000001
"PortBlockName_10"="Bloquear conexiones de control remoto 4889-4899 al host local"
"PortBlockDirection_10"=dword:00000000
"PortBlockRange_10"= "4889-4899"
"PortBlockWhiteList_10"=""
"PortBlockEnabled_11"=dword:00000001
" PortBlockName_11"="Evitar que el puerto 456 se abra y explote "
"PortBlockDirection_11"=dword:00000000
"PortBlockRange_11"="456"
"PortBlockWhiteList_11 "=""
" PortBlockEnabled_12"=dword:00000001
"PortBlockName_12"="Evitar que el puerto 555 se abra y explote"
"PortBlockDirection_12"= dword:00000000
"PortBlockRange_12"= "555"
"PortBlockWhiteList_12"=""
"PortBlockEnabled_13"=dword:00000001
"PortBlockName_13"="Evitar que el puerto 556 sea abierto y explotado"
"PortBlockDirection_13"=dword:00000000
"PortBlockRange_13"="556"
"PortBlockWhiteList_13"=""
"PortBlockEnabled_14" =dword:00000001
"PortBlockName_14"="Evitar que el puerto 666 se abra y explote"
"PortBlockDirection_14 "=dword:00000000
"PortBlockRange_14"="666 "
"PortBlockWhiteList_14"=""
"PortBlockEnabled_15"=dword:00000001
"PortBlockName_15"="Evitar que el puerto 1010 se abra y explote"
"PortBlockDirection_15"=dword:00000000
"PortBlockRan
ge_15"="1010"
"PortBlockWhiteList_15"=""
"PortBlockEnabled_16"=dword:00000001
"PortBlockName_16"="Habilitación de bloqueo del proxy 1080 puerto "
"PortBlockDirection_16"=dword:00000000
"PortBlockRange_16"="1080"
"PortBlockWhiteList_16"=""
" PortBlockEnabled_17"=dword:00000001
"PortBlockName_17"="Bloquear habilitación del puerto proxy 8080"
"PortBlockDirection_17"=dword:00000000
"PortBlockRange_17" =" 8080"
"PortBlockWhiteList_17"=""
"PortBlockEnabled_18"=dword:00000001
"PortBlockName_18"="Evita que los puertos 2000-2001 sean abierto y explotado"
"PortBlockDirection_18"=dword:00000000
"PortBlockRange_18"="2000-2001"
"PortBlockWhiteList_18"="qq.exe, qqpet.exe"
"PortBlockEnabled_19"=dword:00000001
"PortBlockName_19"="Evitar que los puertos 7306-7308 se abran y exploten"
"PortBlockDirection_19 "=dword:00000000
"PortBlockRange_19"="7306-7308"
"PortBlockWhiteList_19"=""
"PortBlockEnabled_20"=dword:00000001 p>
" PortBlockName_20"="Evitar que el puerto 7626 sea abierto y explotado"
"PortBlockDirection_20"=dword:00000000
"PortBlockRange_20"="7626"
"PortBlockWhiteList_20"= ""
"PortBlockEnabled_21"=dword:00000001
"PortBlockName_21"="Evita que el puerto 8000 se abra y explote"
"PortBlockDirection_21"=dword:00000000
"PortBlockRange_21"="8000"
"PortBlockWhiteList_21"=""
"PortBlockEnabled_22"=dword:00000001
"PortBlockName_22" ="Evitar que el puerto 11000 sea abierto y explotado"
"PortBlockDirection_22"=dword:00000000
"PortBlockRange_22"="11000"
"PortBlockWhiteList_22"=""
"PortBlockEnabled_23"=dword:00000001<
/p>
"PortBlockName_23"="Evitar que el puerto 11223 se abra y explote"
"PortBlockDirection_23"=dword:00000000
"PortBlockRange_23"="11223" p>
"PortBlockWhiteList_23"=""
"PortBlockEnabled_24"=dword:00000001
"PortBlockName_24"="Evita que el puerto 12223 se abra y explote"
" PortBlockDirection_24"=dword:00000000
"PortBlockRange_24"="12223"
"PortBlockWhiteList_24"=""
"PortBlockEnabled_25"=dword: 00000001
"PortBlockName_25"="Evita que los puertos 12345-12346 se abran y exploten"
"PortBlockDirection_25"=dword:00000000
"PortBlockRange_25"=" 12345-12346" p>
"PortBlockWhiteList_25"=""
"PortBlockEnabled_26"=dword:00000001
"PortBlockName_26"="Evita que se abra el puerto 12631 y explotado"
"PortBlockDirection_26"=dword:00000000
"PortBlockRange_26"="12631"
"PortBlockWhiteList_26"=""
"PortBlockEnabled_27"=dword:00000001
"PortBlockName_27"="Evitar que se abra y explote el puerto 20034"
"PortBlockDirection_27"=dword:00000000
" PortBlockRange_27"="20034"
"PortBlockWhiteList_27"=""
"PortBlockEnabled_28"=dword:00000001
"PortBlockName_28"="Evita que el puerto 21554 sea abierto y explotado"
" PortBlockDirection_28"=dword:00000000
"PortBlockRange_28"="21554"
"PortBlockWhiteList_28"=""
"PortBlockEnabled_29"=dword:00000001
"PortBlockName_29"="Evitar que se abra y explote el puerto 31339"
"PortBlockDirection_29"=dword:00000000
"PortBlockRange_29"="31339"
"PortBlockWhiteList_29"=""
"PortBlockEnabled_30"=dword:00000001
"PortBlockName_30"="Prevenir puerto 27374 de ser abierto y explotado"
"PortBlockDirection_30" =dword:00000000
"PortBlo
ckRange_30"="27374"
"PortBlockWhiteList_30"=""
"PortBlockEnabled_31"=dword:00000001
"PortBlockName_31"="Evita que el puerto 30029 sea abierto Utilice "
"PortBlockDirection_31"=dword:00000000
"PortBlockRange_31"="30029"
"PortBlockWhiteList_31"=""
"PortBlockEnabled_32"=dword:00000001
"PortBlockName_32"="Evitar que se abra y explote el puerto 31787"
"PortBlockDirection_32"=dword:00000000
"PortBlockRange_32" ="31787"
"PortBlockWhiteList_32"=""
"PortBlockEnabled_33"=dword:00000001
"PortBlockName_33"="Evitar que el puerto 33911 siendo abierto y explotado"
"PortBlockDirection_33"=dword:00000000
"PortBlockRange_33"="33911"
"PortBlockWhiteList_33"=""
"PortBlockEnabled_34 "=dword:00000001
"PortBlockName_34"="Evitar que se abra y explote el puerto 34324"
"PortBlockDirection_34"=dword:00000000
"PortBlockRange_34"=" 34324"
"PortBlockWhiteList_34"=""
"PortBlockEnabled_35"=dword:00000001
"PortBlockName_35"="Impedir puerto 40412 sea abierto y explotado" p>
"PortBlockDirection_35"=dword:00000000
"PortBlockRange_35"="40412"
"PortBlockWhiteList_35"="" p>
"PortBlockEnabled_36"= dword:00000001
"PortBlockName_36"="Evitar que los puertos 40421-40423 se abran y exploten"
"PortBlockDirection_36"=dword:00000000
"PortBlockRange_36"=" 40421-40423"
"PortBlockWhiteList_36"=""
"PortBlockEnabled_37"=dword:00000001
" PortBlockName_37"="Evitar que el puerto 47878 se abra y explote"
"PortBlockDirection_37"=dword:00000000
"PortBlockRange_37"="47878"
"PortBlockWhiteList_37 "=""
"PortBlockEnabled_38 "=dword:00000001
"PortBlockName_38"="Evitar que el puerto 53001 se abra y explote"
"PortBlockDirection_38"=dword:00000000
"PortBlockRange_38"="53001"
" PortBlockWhiteList_38" =""
"PortBlockEnabled_39"=dword:00000001
"PortBlockName_39"="Evitar que el puerto 61466 se abra y explote"
"PortBlockDirection_39" =dword:00000000
"PortBlockRange_39"="61466"
"PortBlockWhiteList_39"=""
"PortBlockEnabled_40"=dword:00000001
"PortBlockName_40 "="Evitar que el puerto 65000 sea abierto y explotado"
"PortBlockDirection_40"=dword:00000000
"PortBlockRange_40"="65000"
"PortBlockWhiteList_40"=" "
"PortBlockEnabled_41"=dword:00000001
"PortBlockName_41"="Evitar que el puerto 5022 se abra y explote"
" PortBlockDirection_41"=dword:00000000
p>"PortBlockRange_41"="5022"
"PortBlockWhiteList_41"=""
"PortBlockEnabled_42"=dword:00000001
"PortBlockName_42"= "1025-1030"
"PortBlockDirection_42"=dword:00000000
"PortBlockRange_42"="1025-1030"
"PortBlockWhiteList_42"="" p>
"PortBlockEnabled_43"=dword:00000001
"PortBlockName_43"="1025-1030"
"PortBlockDirection_43"=dword :00000001
" PortBlockRange_43"="1025-1030"
"PortBlockWhiteList_43"=""
"FileBlockRuleName_0"="Desactivar Internet Explorer para que no inicie ningún elemento desde la carpeta Temp"
"FileBlockProcess_0"="iexplore.exe"
"FileBlockWildcard_0"="**\\temp*\\**"
"FileBlockWhat_0"=dword:00080000
"FileBlockReport_0"=dword:00000001
"FileBlockRuleName_1"="Evitar que Internet Explorer inicie archivos (.exe) desde la carpeta Programas descargados"
"FileBlockProcess_1"=" iexplore.exe"
>
"FileBlockWildcard_1"="**\\Archivos de programa descargados\\**\\*.exe"
"FileBlockWhat_1"=dword:00180000
"FileBlockReport_1" =dword:00000001
"FileBlockRuleName_2"="Prohibir que Outlook inicie cualquier elemento de la carpeta Temp"
"FileBlockProcess_2"="outlook.exe"
" FileBlockWildcard_2"="**\\temp*\\**"
"FileBlockWhat_2"=dword:00180000
"FileBlockReport_2"=dword:00000001
"FileBlockRuleName_3"="Evitar que Outlook Express inicie elementos de la carpeta Temp"
"FileBlockProcess_3"="msimn.exe"
"FileBlockWildcard_3"="**\\ temp* \\**"
"FileBlockWhat_3"=dword:00180000
"FileBlockReport_3"=dword:00000001
"FileBlockRuleName_4"="Deshabilitar Packager de Carpeta de archivos temporal para iniciar cualquier proyecto"
"FileBlockProcess_4"="packager.exe"
"FileBlockWildcard_4"="**\\temp*\\**"
"FileBlockWhat_4"=dword:00180000
"FileBlockReport_4"=dword:00000001
"FileBlockRuleName_5"="Prohibir a MSN iniciar cualquier proyecto desde la carpeta Temp" p>
"FileBlockProcess_5"="msn6.exe"
"FileBlockWildcard_5"="**\\temp*\\**"
"FileBlockWhat_5"=dword: 00080000
"FileBlockReport_5"=dword:00000001
"FileBlockRuleName_6"="Prohibir que WinZip32 inicie cualquier proyecto desde la carpeta Temp"
"FileBlockProcess_6"=" winzip32.exe"
"FileBlockWildcard_6"="**\\temp*\\**"
"FileBlockWhat_6"=dword:00080000
"FileBlockReport_6 "=dword:00000001
"FileBlockRuleName_7"="Prohibir que WinRAR inicie cualquier proyecto desde la carpeta Temp"
"FileBlockProcess_7"="winrar.exe"
"FileBlockWildcard_7"=" **\\temp*\\**"
"FileBlockWhat_7"=dword:00080000
"FileBlockReport_7"=dword:00000001
"ArchivoBl
ockRuleName_8"="Deshabilitar la ejecución de script desde la carpeta Temp"
"FileBlockProcess_8"="?script.exe"
"FileBlockWildcard_8"="**\\temp*\\* * "
"FileBlockWhat_8"=dword:000a0000
"FileBlockReport_8"=dword:00000001
"FileBlockRuleName_9"="Está prohibido utilizar tftp.exe porque cierto Algunos gusanos lo usan.
"
"FileBlockProcess_9"="*"
"FileBlockWildcard_9"="**\\tftp.exe"
"FileBlockWhat_9"=dword:001f0000
"FileBlockReport_9"=dword:00000001
"FileBlockRuleName_10"="Prohibir el acceso a elementos de inicio sospechosos (.exe)"
"FileBlockProcess_10"="*"
"FileBlockWildcard_10"="**\\startup\\**\\*.exe"
"FileBlockWhat_10"=dword:000f0000
"FileBlockReport_10 "=dword:00000001
"FileBlockRuleName_11"="El acceso a elementos de inicio sospechosos (.scr) está prohibido"
"FileBlockProcess_11"="*"
" FileBlockWildcard_11"="**\\startup\\**\\*.scr"
"FileBlockWhat_11"=dword:000f0000
"FileBlockReport_11"=dword:00000001 p >
"FileBlockRuleName_12"="Deshabilitar el acceso a elementos de inicio sospechosos (.hta)"
"FileBlockProcess_12"="*"
"FileBlockWildcard_12"="**\ \ startup\\**\\*.hta"
"FileBlockWhat_12"=dword:000f0000
"FileBlockReport_12"=dword:00000001
"FileBlockRuleName_13" = "No hay acceso a elementos de inicio sospechosos (.pif)"
"FileBlockProcess_13"="*"
"FileBlockWildcard_13"="**\\startup\\**\\ * .pif"
"FileBlockWhat_13"=dword:000f0000
"FileBlockReport_13"=dword:00000001
"FileBlockRuleName_14"="Deshabilitar el acceso a elementos de inicio sospechosos ( .com)"
"FileBlockProcess_14"="*"
"FileBlockWildcard_14"="**\\startup\\**\\*.com"
"FileBlockWhat_14"=dword:000f0000
"FileBlockReport_14"=dword:00000001
"FileBlockRuleName_15"="Está prohibida la modificación remota de archivos (.exe)"
"FileBlockProcess_15"="System:Remote"
"FileBlockWildcard_15"="**\\*.exe"
"FileBlockWhat_15"=dword:00040000
"FileBlockReport_15"=dword:00000001
"FileBlockRuleName_16"="Está prohibida la modificación remota de archivos (
.scr)"
"FileBlockProcess_16"="Sistema:Remoto"
"FileBlockWildcard_16"="**\\*.scr"
"FileBlockWhat_16" =dword:00040000
"FileBlockReport_16"=dword:00000001
"FileBlockRuleName_17"="Está prohibida la modificación remota de archivos (.ocx)"
"FileBlockProcess_17 "= "Sistema:Remoto"
"FileBlockWildcard_17"="**\\*.ocx"
"FileBlockWhat_17"=dword:00040000
"FileBlockReport_17 "= dword:00000001
"FileBlockRuleName_18"="La modificación remota de archivos (.dll) está prohibida"
"FileBlockProcess_18"="System:Remote"
"FileBlockWildcard_18" ="**\\*.dll"
"FileBlockWhat_18"=dword:00040000
"FileBlockReport_18"=dword:00000001
" FileBlockRuleName_19"=" Deshabilitar la creación, modificación o eliminación remota de cualquier elemento en las carpetas y subcarpetas de Windows"
"FileBlockProcess_19"="System:Remote"
"FileBlockWildcard_19"="%windir% \ \**\\*"
"FileBlockWhat_19"=dword:00150000
"FileBlockReport_19"=dword:00000001
"FileBlockRuleName_20"="Creación remota prohibido /Modificar/eliminar archivos (.ini) en carpetas y subcarpetas de Windows"
"FileBlockProcess_20"="System:Remote"
"FileBlockWildcard_20"="%windir%\ \* *\\*.ini"
"FileBlockWhat_20"=dword:00150000
"FileBlockReport_20"=dword:00000001
"FileBlockRuleName_21"="Prohibido crear de forma remota /modificar/eliminar cualquier cosa en el directorio raíz del sistema"
"FileBlockProcess_21"="System:Remote"
"FileBlockWildcard_21"="%systemdrive%\\*"
"FileBlockWhat_21"=dword:00150000
"FileBlockReport_21"=dword:00000001
"FileBlockRuleName_22"="La creación/modificación/eliminación remota de archivos (.exe) está prohibida )"
"FileBlockProcess_22"="Sistema:Remoto"
"FileBlockWildcard_22"="**\\*.exe"
FileBlockWhat_22"=dword: 00150000
"FileBlockReport_22"=dword:00000001
"FileBlockRuleName_23"="La creación/modificación/eliminación remota de archivos (.scr) está prohibida"
"FileBlockProcess_23"="Sistema :Remoto "
"FileBlockWildcard_23"="**\\*.scr"
"FileBlockWhat_23"=dword:00150000
"FileBlockReport_23"=dword: 00000001
"FileBlockRuleName_24"="Prohibir la creación/modificación/eliminación remota de archivos (.ocx)"
"FileBlockProcess_24"="System:Remote"
"FileBlockWildcard_24" ="**\\*.ocx"
"FileBlockWhat_24"=dword:00150000
"FileBlockReport_24"=dword:00000001
"FileBlockRuleName_25 "=" Prohibir la creación, modificación o eliminación remota de archivos (.pif)"
"FileBlockProcess_25"="System:Remote"
"FileBlockWildcard_25"="**\\* .pif"
"FileBlockWhat_25"=dword:00150000
"FileBlockReport_25"=dword:00000001
"FileBlockRuleName_26"="Creación remota de archivos autorun.inf está prohibido"
"FileBlockProcess_26"="System:Remote"
"FileBlockWildcard_26"="**\\autorun.inf"
"FileBlockWhat_26"= dword:00010000
"FileBlockReport_26"=dword:00000001
"FileBlockRuleName_27"="Prohibir la creación de nuevos archivos (.bat) en carpetas de Windows"
" FileBlockProcess_27"="* "
"FileBlockWildcard_27"="%windir%\\*.bat"
"FileBlockWhat_27"=dword:00050000
"FileBlockReport_27 "=dword:00000001
"FileBlockRuleName_28"="Prohibir la creación de nuevos archivos (.exe) en carpetas de Windows"
"FileBlockProcess_28"="*"
"FileBlockWildcard_28" ="%windir%\\*.exe"
"FileBlockWhat_28"=dword:00050000
"FileBlockReport_28"=dword:00000001
"FileBlockRuleName_29"= "Prohibir la creación de nuevos archivos (.com) en carpetas de Windows"
"FileBlockProcess_29"="*"
"FileBlockWildcard_29"="%windir%\\* .
com"
"FileBlockWhat_29"=dword:00050000
"FileBlockReport_29"=dword:00000001
"FileBlockRuleName_30"="Tencent QQ tiene prohibido crear archivos publicitarios "
"FileBlockProcess_30"="*"
"FileBlockWildcard_30"="**\\AD\\*.*"
"FileBlockWhat_30"=dword :00090000
"FileBlockReport_30"=dword:00000001
"FileBlockRuleName_31"="Prohibir iniciar desde la carpeta Temp (.exe)"
"FileBlockProcess_31"=" * "
"FileBlockWildcard_31"="**\\temp*\\*.exe"
"FileBlockWhat_31"=dword:00080000
"FileBlockReport_31" = palabra clave:000