¿Puede mcafee8.0i guardar el archivo de configuración?

Está bien~~

No es algo bueno. Tenga en cuenta que no lo escribí yo, sino White Crow.

Crea un nuevo archivo de texto

Editor del Registro de Windows versión 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\Shared Components\On Access Scanner\BehaviourBlocking]

"PortBlockReportMinutes"=dword: 00000001

"bLimitSize_Ent"=dword:00000001

"ShareBlockReport"=dword:00000001

"LogFileFormat_Ent"=dword:00000001

"FileBlockEnabled_8"=dword: 00000001

"FileBlockEnabled_1"=dword:00000001

"VSIDBlockOnNonVirus"=dword:00000000

"FileBlockEnabled_28"=dword:00000001

"EnterceptShowMessages"=dword:00000000

"FileBlockEnabled_26"=dword:00000001

"bLogToFile"=dword:00000001

"FileBlockEnabled_4 "=dword:00000001

"FileBlockEnabled_13"=dword:00000001

"FileBlockEnabled_19"=dword:00000001

"FileBlockEnabled_12"=dword:00000001

"FileBlockEnabled_18 "=dword:00000001

"FileBlockEnabled_0"=dword:00000001

"bLogToFile_Ent"=dword:00000001

"FileBlockEnabled_2"= dword:00000001

"FileBlockEnabled_11"=dword:00000001

"FileBlockEnabled_10"=dword:00000001

"VSIDMessage"=""

"FileBlockEnabled_23"=dword :00000001

"FileBlockEnabled_17"=dword:00000001

"FileBlockEnabled_9"=dword:00000001

"VSIDSendMessage"=dword:00000000

"PortBlockReport"=dword:00000001

"szLogFileName"="%VSEDEFLOGDIR%\\AccessProtectionLog.txt"

"FileBlockEnabled_3"=dword:00000001

"FileBlockEnabled_20"=dword:00000001

"Fi

leBlockEnabled_27"=dword:00000001

"FileBlockEnabled_30"=dword:00000000

"FileBlockEnabled_25"=dword:00000001

"dwMaxLogSizeMB"=dword:00000001 p>

"FileBlockEnabled_22"=dword:00000001

"FileBlockEnabled_5"=dword:00000001

"FileBlockEnabled_16"=dword:00000001

" bLimitSize" =dword:00000001

"VSIDBlock"=dword:00000001

"dwMaxLogSizeMB_Ent"=dword:00000001

"ShareBlockMode"=dword:00000002

"LogFileFormat"=dword:00000001

"FileBlockEnabled_15"=dword:00000001

"PortBlockProcessExclusionList"=hex(7):46,00,72,00, 61, 00,6d,00,65,00,77,00,6f,\

00,72,00,6b,00,53,00,65,00,72,00,76, 00, 69,00,63,00,65,00,2e,00,65,00,78,00,\

65,00,00,00,41,00,67,00, 65, 00,6e,00,74,00,6e,00,74,00,2e,00,65,00,78,00,65,\

00,00,00,00, 00

"VSIDBlockTimeout"=dword:0000000a

"FileBlockEnabled_14"=dword:00000001

"EnterceptMode"=dword:00000001

"FileBlockEnabled_29 "=dword:00000001

"FileBlockEnabled_6"=dword:00000001

"szLogFileName_Ent"="%VSEDEFLOGDIR%\\BufferOverflowProtectionLog.txt"

" FileBlockEnabled_24" =dword:00000001

"FileBlockEnabled_7"=dword:00000001

"EnterceptEnabled"=dword:00000001

"FileBlockEnabled_21"=dword:00000001

"FileBlockEnabled_31"=dword:00000001

"FileBlockEnabled_32"=dword:00000001

"FileBlockEnabled_33"=dword:00000001

"FileBlockEnabled_34" =dword :00000001

"FileBlockEnabled_35"=dword:00000001

"FileBlockEnabled_36"=dword:00000001

p>

"FileBlockEnabled_37"=dword:00000001

"FileBlockEnabled_38"=dword:00000001

"FileBlockEnabled_39"=dword:00000001

"FileBlockEnabled_40" =dword:00000001

"FileBlockEnabled_41"=dword:00000001

"FileBlockEnabled_42"=dword:00000001

"FileBlockEnabled_43"=dword:00000001

"FileBlockEnabled_44"=dword:00000001

"FileBlockEnabled_45"=dword:00000001

"FileBlockEnabled_46"=dword:00000001

"FileBlockEnabled_47"=dword :00000001

"FileBlockEnabled_48"=dword:00000001

"FileBlockEnabled_49"=dword:00000001

"FileBlockEnabled_50"=dword:00000001

"FileBlockEnabled_51"=dword:00000001

"FileBlockEnabled_52"=dword:00000001

"FileBlockEnabled_53"=dword:00000001

"FileBlockEnabled_54"=dword:00000001

"FileBlockEnabled_55"=dword:00000001

"FileBlockEnabled_56"=dword:00000001

"FileBlockEnabled_57"=dword:00000001

" FileBlockEnabled_58"=dword:00000001

"FileBlockEnabled_59"=dword:00000001

"FileBlockEnabled_60"=dword:00000001

"FileBlockEnabled_61"=dword:00000001 p>

"FileBlockEnabled_62"=dword:00000001

"FileBlockEnabled_63"=dword:00000001

"FileBlockEnabled_64"=dword:00000001

" FileBlockEnabled_65" =dword:00000001

"FileBlockEnabled_66"=dword:00000001

"FileBlockEnabled_67"=dword:00000001

"FileBlockEnabled_68"=dword:00000001

"FileBlockEnabled_69"=dword:00000001

"FileBlockEnabled_70"=dword:00000001

"FileBlockEnabled_71"=dword:00000

001

"FileBlockEnabled_72"=dword:00000001

"FileBlockEnabled_73"=dword:00000001

"FileBlockEnabled_74"=dword:00000001

"FileBlockEnabled_75"=dword:00000001

"FileBlockEnabled_76"=dword:00000001

"FileBlockEnabled_77"=dword:00000001

"FileBlockEnabled_78"=dword:00000001

"FileBlockEnabled_79"=dword:00000001

"FileBlockEnabled_80"=dword:00000000

"FileBlockEnabled_81"=dword:00000001

"FileBlockEnabled_82 "=dword:00000001

"FileBlockEnabled_83"=dword:00000001

"FileBlockEnabled_84"=dword:00000001

"FileBlockEnabled_85"=dword:00000001

"FileBlockEnabled_86"=dword:00000001

"FileBlockEnabled_87"=dword:00000001

"FileBlockEnabled_88"=dword:00000000

"FileBlockEnabled_89"= dword:00000001

"FileBlockEnabled_90"=dword:00000001

"FileBlockEnabled_91"=dword:00000001

"FileBlockEnabled_92"=dword:00000001

"FileBlockEnabled_93"=dword:00000001

"FileBlockEnabled_94"=dword:00000001

"FileBlockEnabled_95"=dword:00000001

"FileBlockEnabled_96"=dword: 00000001

"FileBlockEnabled_97"=dword:00000001

"PortBlockEnabled_0"=dword:00000001

"PortBlockName_0"="Prohíbe gusanos que envían grandes cantidades de correo desde enviando correos "

"PortBlockDirection_0"=dword:00000001

"PortBlockRange_0"="25"

"PortBlockWhiteList_0"="foxmail.exe"

"PortBlockEnabled_1"=dword:00000001

"PortBlockName_1"="Desactivar comunicación IRC saliente"

"PortBlockDirection_1"=dword:00000001

" PortBlockRange_1 "="6666-6669"

"PortBlo

ckWhiteList_1"=""

"PortBlockEnabled_2"=dword:00000001

"PortBlockName_2"="Desactivar comunicación IRC entrante"

"PortBlockDirection_2"=dword: 00000000

"PortBlockRange_2"="6666-6669"

"PortBlockWhiteList_2"=""

"PortBlockEnabled_3"=dword:00000000

"PortBlockName_3"="Está prohibida la descarga desde la World Wide Web"

"PortBlockDirection_3"=dword:00000001

"PortBlockRange_3"="80"

" PortBlockWhiteList_3" ="thunder5.exe,TTraveler.exe,qq.exe,qqpet.exe,IEXPLORE.EXE,paipaiclient.exe,dexplore.exe,HDRoom.exe,msnmsgr.exe,tbstudio.exe,aupdrun.exe,outpost. exe, QQDownload.exe,MSNmsgr.exe,WINWORD.EXE"

"PortBlockEnabled_4"=dword:00000000

"PortBlockName_4"="Desactivar comunicación entrante FTP (evita la propagación de virus como Nimda )"

"PortBlockDirection_4"=dword:00000000

"PortBlockRange_4"="20-21"

"PortBlockWhiteList_4"="flashfxp.exe ,cuteftppro. exe,thunder5.exe"

"PortBlockEnabled_5"=dword:00000001

"PortBlockName_5"="Deshabilitar la comunicación saliente FTP (evitar que los virus descarguen archivos)"

"PortBlockDirection_5"=dword:00000001

"PortBlockRange_5"="20-21"

"PortBlockWhiteList_5"="flashfxp.exe,cuteftppro.exe,thunder5.exe ,HEOnline. exe"

"PortBlockEnabled_6"=dword:00000001

"PortBlockName_6"="Bloquear el puerto Telnet 23 para que no se conecte al host local"

" PortBlockDirection_6"=dword:00000000

"PortBlockRange_6"="23"

"PortBlockWhiteList_6"=""

"PortBlockEnabled_7"=dword:00000001

"PortBlockName_7 "="Bloquear la conexión SA predeterminada de SQL al host local"

"PortBlockDirection_7"=dword:00000000

"PortBlockRange_7"="1433"

"PortBlockWhiteList_7 "=""

"PortBlockEnabled_8"=dwo

rd:00000001

"PortBlockName_8"="Bloquear la conexión del terminal remoto 3389 al host local"

"PortBlockDirection_8"=dword:00000000

"PortBlockRange_8" ="3389 "

"PortBlockWhiteList_8"=""

"PortBlockEnabled_9"=dword:00000001

"PortBlockName_9"="Conexión de control remoto del bloque 4778 a local host"

p>

"PortBlockDirection_9"=dword:00000000

"PortBlockRange_9"="4778"

"PortBlockWhiteList_9"=""

"PortBlockEnabled_10"= dword:00000001

"PortBlockName_10"="Bloquear conexiones de control remoto 4889-4899 al host local"

"PortBlockDirection_10"=dword:00000000

"PortBlockRange_10"= "4889-4899"

"PortBlockWhiteList_10"=""

"PortBlockEnabled_11"=dword:00000001

" PortBlockName_11"="Evitar que el puerto 456 se abra y explote "

"PortBlockDirection_11"=dword:00000000

"PortBlockRange_11"="456"

"PortBlockWhiteList_11 "=""

" PortBlockEnabled_12"=dword:00000001

"PortBlockName_12"="Evitar que el puerto 555 se abra y explote"

"PortBlockDirection_12"= dword:00000000

"PortBlockRange_12"= "555"

"PortBlockWhiteList_12"=""

"PortBlockEnabled_13"=dword:00000001

"PortBlockName_13"="Evitar que el puerto 556 sea abierto y explotado"

"PortBlockDirection_13"=dword:00000000

"PortBlockRange_13"="556"

"PortBlockWhiteList_13"=""

"PortBlockEnabled_14" =dword:00000001

"PortBlockName_14"="Evitar que el puerto 666 se abra y explote"

"PortBlockDirection_14 "=dword:00000000

"PortBlockRange_14"="666 "

"PortBlockWhiteList_14"=""

"PortBlockEnabled_15"=dword:00000001

"PortBlockName_15"="Evitar que el puerto 1010 se abra y explote"

"PortBlockDirection_15"=dword:00000000

"PortBlockRan

ge_15"="1010"

"PortBlockWhiteList_15"=""

"PortBlockEnabled_16"=dword:00000001

"PortBlockName_16"="Habilitación de bloqueo del proxy 1080 puerto "

"PortBlockDirection_16"=dword:00000000

"PortBlockRange_16"="1080"

"PortBlockWhiteList_16"=""

" PortBlockEnabled_17"=dword:00000001

"PortBlockName_17"="Bloquear habilitación del puerto proxy 8080"

"PortBlockDirection_17"=dword:00000000

"PortBlockRange_17" =" 8080"

"PortBlockWhiteList_17"=""

"PortBlockEnabled_18"=dword:00000001

"PortBlockName_18"="Evita que los puertos 2000-2001 sean abierto y explotado"

"PortBlockDirection_18"=dword:00000000

"PortBlockRange_18"="2000-2001"

"PortBlockWhiteList_18"="qq.exe, qqpet.exe"

"PortBlockEnabled_19"=dword:00000001

"PortBlockName_19"="Evitar que los puertos 7306-7308 se abran y exploten"

"PortBlockDirection_19 "=dword:00000000

"PortBlockRange_19"="7306-7308"

"PortBlockWhiteList_19"=""

"PortBlockEnabled_20"=dword:00000001

" PortBlockName_20"="Evitar que el puerto 7626 sea abierto y explotado"

"PortBlockDirection_20"=dword:00000000

"PortBlockRange_20"="7626"

"PortBlockWhiteList_20"= ""

"PortBlockEnabled_21"=dword:00000001

"PortBlockName_21"="Evita que el puerto 8000 se abra y explote"

"PortBlockDirection_21"=dword:00000000

"PortBlockRange_21"="8000"

"PortBlockWhiteList_21"=""

"PortBlockEnabled_22"=dword:00000001

"PortBlockName_22" ="Evitar que el puerto 11000 sea abierto y explotado"

"PortBlockDirection_22"=dword:00000000

"PortBlockRange_22"="11000"

"PortBlockWhiteList_22"=""

"PortBlockEnabled_23"=dword:00000001<

/p>

"PortBlockName_23"="Evitar que el puerto 11223 se abra y explote"

"PortBlockDirection_23"=dword:00000000

"PortBlockRange_23"="11223"

"PortBlockWhiteList_23"=""

"PortBlockEnabled_24"=dword:00000001

"PortBlockName_24"="Evita que el puerto 12223 se abra y explote"

" PortBlockDirection_24"=dword:00000000

"PortBlockRange_24"="12223"

"PortBlockWhiteList_24"=""

"PortBlockEnabled_25"=dword: 00000001

"PortBlockName_25"="Evita que los puertos 12345-12346 se abran y exploten"

"PortBlockDirection_25"=dword:00000000

"PortBlockRange_25"=" 12345-12346"

"PortBlockWhiteList_25"=""

"PortBlockEnabled_26"=dword:00000001

"PortBlockName_26"="Evita que se abra el puerto 12631 y explotado"

"PortBlockDirection_26"=dword:00000000

"PortBlockRange_26"="12631"

"PortBlockWhiteList_26"=""

"PortBlockEnabled_27"=dword:00000001

"PortBlockName_27"="Evitar que se abra y explote el puerto 20034"

"PortBlockDirection_27"=dword:00000000

" PortBlockRange_27"="20034"

"PortBlockWhiteList_27"=""

"PortBlockEnabled_28"=dword:00000001

"PortBlockName_28"="Evita que el puerto 21554 sea abierto y explotado"

" PortBlockDirection_28"=dword:00000000

"PortBlockRange_28"="21554"

"PortBlockWhiteList_28"=""

"PortBlockEnabled_29"=dword:00000001

"PortBlockName_29"="Evitar que se abra y explote el puerto 31339"

"PortBlockDirection_29"=dword:00000000

"PortBlockRange_29"="31339"

"PortBlockWhiteList_29"=""

"PortBlockEnabled_30"=dword:00000001

"PortBlockName_30"="Prevenir puerto 27374 de ser abierto y explotado"

"PortBlockDirection_30" =dword:00000000

"PortBlo

ckRange_30"="27374"

"PortBlockWhiteList_30"=""

"PortBlockEnabled_31"=dword:00000001

"PortBlockName_31"="Evita que el puerto 30029 sea abierto Utilice "

"PortBlockDirection_31"=dword:00000000

"PortBlockRange_31"="30029"

"PortBlockWhiteList_31"=""

"PortBlockEnabled_32"=dword:00000001

"PortBlockName_32"="Evitar que se abra y explote el puerto 31787"

"PortBlockDirection_32"=dword:00000000

"PortBlockRange_32" ="31787"

"PortBlockWhiteList_32"=""

"PortBlockEnabled_33"=dword:00000001

"PortBlockName_33"="Evitar que el puerto 33911 siendo abierto y explotado"

"PortBlockDirection_33"=dword:00000000

"PortBlockRange_33"="33911"

"PortBlockWhiteList_33"=""

"PortBlockEnabled_34 "=dword:00000001

"PortBlockName_34"="Evitar que se abra y explote el puerto 34324"

"PortBlockDirection_34"=dword:00000000

"PortBlockRange_34"=" 34324"

"PortBlockWhiteList_34"=""

"PortBlockEnabled_35"=dword:00000001

"PortBlockName_35"="Impedir puerto 40412 sea abierto y explotado"

"PortBlockDirection_35"=dword:00000000

"PortBlockRange_35"="40412"

"PortBlockWhiteList_35"=""

"PortBlockEnabled_36"= dword:00000001

"PortBlockName_36"="Evitar que los puertos 40421-40423 se abran y exploten"

"PortBlockDirection_36"=dword:00000000

"PortBlockRange_36"=" 40421-40423"

"PortBlockWhiteList_36"=""

"PortBlockEnabled_37"=dword:00000001

" PortBlockName_37"="Evitar que el puerto 47878 se abra y explote"

"PortBlockDirection_37"=dword:00000000

"PortBlockRange_37"="47878"

"PortBlockWhiteList_37 "=""

"PortBlockEnabled_38 "=dword:00000001

"PortBlockName_38"="Evitar que el puerto 53001 se abra y explote"

"PortBlockDirection_38"=dword:00000000

"PortBlockRange_38"="53001"

" PortBlockWhiteList_38" =""

"PortBlockEnabled_39"=dword:00000001

"PortBlockName_39"="Evitar que el puerto 61466 se abra y explote"

"PortBlockDirection_39" =dword:00000000

"PortBlockRange_39"="61466"

"PortBlockWhiteList_39"=""

"PortBlockEnabled_40"=dword:00000001

"PortBlockName_40 "="Evitar que el puerto 65000 sea abierto y explotado"

"PortBlockDirection_40"=dword:00000000

"PortBlockRange_40"="65000"

"PortBlockWhiteList_40"=" "

"PortBlockEnabled_41"=dword:00000001

"PortBlockName_41"="Evitar que el puerto 5022 se abra y explote"

" PortBlockDirection_41"=dword:00000000

"PortBlockRange_41"="5022"

"PortBlockWhiteList_41"=""

"PortBlockEnabled_42"=dword:00000001

"PortBlockName_42"= "1025-1030"

"PortBlockDirection_42"=dword:00000000

"PortBlockRange_42"="1025-1030"

"PortBlockWhiteList_42"=""

"PortBlockEnabled_43"=dword:00000001

"PortBlockName_43"="1025-1030"

"PortBlockDirection_43"=dword :00000001

" PortBlockRange_43"="1025-1030"

"PortBlockWhiteList_43"=""

"FileBlockRuleName_0"="Desactivar Internet Explorer para que no inicie ningún elemento desde la carpeta Temp"

"FileBlockProcess_0"="iexplore.exe"

"FileBlockWildcard_0"="**\\temp*\\**"

"FileBlockWhat_0"=dword:00080000

"FileBlockReport_0"=dword:00000001

"FileBlockRuleName_1"="Evitar que Internet Explorer inicie archivos (.exe) desde la carpeta Programas descargados"

"FileBlockProcess_1"=" iexplore.exe"

>

"FileBlockWildcard_1"="**\\Archivos de programa descargados\\**\\*.exe"

"FileBlockWhat_1"=dword:00180000

"FileBlockReport_1" =dword:00000001

"FileBlockRuleName_2"="Prohibir que Outlook inicie cualquier elemento de la carpeta Temp"

"FileBlockProcess_2"="outlook.exe"

" FileBlockWildcard_2"="**\\temp*\\**"

"FileBlockWhat_2"=dword:00180000

"FileBlockReport_2"=dword:00000001

"FileBlockRuleName_3"="Evitar que Outlook Express inicie elementos de la carpeta Temp"

"FileBlockProcess_3"="msimn.exe"

"FileBlockWildcard_3"="**\\ temp* \\**"

"FileBlockWhat_3"=dword:00180000

"FileBlockReport_3"=dword:00000001

"FileBlockRuleName_4"="Deshabilitar Packager de Carpeta de archivos temporal para iniciar cualquier proyecto"

"FileBlockProcess_4"="packager.exe"

"FileBlockWildcard_4"="**\\temp*\\**"

"FileBlockWhat_4"=dword:00180000

"FileBlockReport_4"=dword:00000001

"FileBlockRuleName_5"="Prohibir a MSN iniciar cualquier proyecto desde la carpeta Temp"

"FileBlockProcess_5"="msn6.exe"

"FileBlockWildcard_5"="**\\temp*\\**"

"FileBlockWhat_5"=dword: 00080000

"FileBlockReport_5"=dword:00000001

"FileBlockRuleName_6"="Prohibir que WinZip32 inicie cualquier proyecto desde la carpeta Temp"

"FileBlockProcess_6"=" winzip32.exe"

"FileBlockWildcard_6"="**\\temp*\\**"

"FileBlockWhat_6"=dword:00080000

"FileBlockReport_6 "=dword:00000001

"FileBlockRuleName_7"="Prohibir que WinRAR inicie cualquier proyecto desde la carpeta Temp"

"FileBlockProcess_7"="winrar.exe"

"FileBlockWildcard_7"=" **\\temp*\\**"

"FileBlockWhat_7"=dword:00080000

"FileBlockReport_7"=dword:00000001

"ArchivoBl

ockRuleName_8"="Deshabilitar la ejecución de script desde la carpeta Temp"

"FileBlockProcess_8"="?script.exe"

"FileBlockWildcard_8"="**\\temp*\\* * "

"FileBlockWhat_8"=dword:000a0000

"FileBlockReport_8"=dword:00000001

"FileBlockRuleName_9"="Está prohibido utilizar tftp.exe porque cierto Algunos gusanos lo usan.

"

"FileBlockProcess_9"="*"

"FileBlockWildcard_9"="**\\tftp.exe"

"FileBlockWhat_9"=dword:001f0000

"FileBlockReport_9"=dword:00000001

"FileBlockRuleName_10"="Prohibir el acceso a elementos de inicio sospechosos (.exe)"

"FileBlockProcess_10"="*"

"FileBlockWildcard_10"="**\\startup\\**\\*.exe"

"FileBlockWhat_10"=dword:000f0000

"FileBlockReport_10 "=dword:00000001

"FileBlockRuleName_11"="El acceso a elementos de inicio sospechosos (.scr) está prohibido"

"FileBlockProcess_11"="*"

" FileBlockWildcard_11"="**\\startup\\**\\*.scr"

"FileBlockWhat_11"=dword:000f0000

"FileBlockReport_11"=dword:00000001

"FileBlockRuleName_12"="Deshabilitar el acceso a elementos de inicio sospechosos (.hta)"

"FileBlockProcess_12"="*"

"FileBlockWildcard_12"="**\ \ startup\\**\\*.hta"

"FileBlockWhat_12"=dword:000f0000

"FileBlockReport_12"=dword:00000001

"FileBlockRuleName_13" = "No hay acceso a elementos de inicio sospechosos (.pif)"

"FileBlockProcess_13"="*"

"FileBlockWildcard_13"="**\\startup\\**\\ * .pif"

"FileBlockWhat_13"=dword:000f0000

"FileBlockReport_13"=dword:00000001

"FileBlockRuleName_14"="Deshabilitar el acceso a elementos de inicio sospechosos ( .com)"

"FileBlockProcess_14"="*"

"FileBlockWildcard_14"="**\\startup\\**\\*.com"

"FileBlockWhat_14"=dword:000f0000

"FileBlockReport_14"=dword:00000001

"FileBlockRuleName_15"="Está prohibida la modificación remota de archivos (.exe)"

"FileBlockProcess_15"="System:Remote"

"FileBlockWildcard_15"="**\\*.exe"

"FileBlockWhat_15"=dword:00040000

"FileBlockReport_15"=dword:00000001

"FileBlockRuleName_16"="Está prohibida la modificación remota de archivos (

.scr)"

"FileBlockProcess_16"="Sistema:Remoto"

"FileBlockWildcard_16"="**\\*.scr"

"FileBlockWhat_16" =dword:00040000

"FileBlockReport_16"=dword:00000001

"FileBlockRuleName_17"="Está prohibida la modificación remota de archivos (.ocx)"

"FileBlockProcess_17 "= "Sistema:Remoto"

"FileBlockWildcard_17"="**\\*.ocx"

"FileBlockWhat_17"=dword:00040000

"FileBlockReport_17 "= dword:00000001

"FileBlockRuleName_18"="La modificación remota de archivos (.dll) está prohibida"

"FileBlockProcess_18"="System:Remote"

"FileBlockWildcard_18" ="**\\*.dll"

"FileBlockWhat_18"=dword:00040000

"FileBlockReport_18"=dword:00000001

" FileBlockRuleName_19"=" Deshabilitar la creación, modificación o eliminación remota de cualquier elemento en las carpetas y subcarpetas de Windows"

"FileBlockProcess_19"="System:Remote"

"FileBlockWildcard_19"="%windir% \ \**\\*"

"FileBlockWhat_19"=dword:00150000

"FileBlockReport_19"=dword:00000001

"FileBlockRuleName_20"="Creación remota prohibido /Modificar/eliminar archivos (.ini) en carpetas y subcarpetas de Windows"

"FileBlockProcess_20"="System:Remote"

"FileBlockWildcard_20"="%windir%\ \* *\\*.ini"

"FileBlockWhat_20"=dword:00150000

"FileBlockReport_20"=dword:00000001

"FileBlockRuleName_21"="Prohibido crear de forma remota /modificar/eliminar cualquier cosa en el directorio raíz del sistema"

"FileBlockProcess_21"="System:Remote"

"FileBlockWildcard_21"="%systemdrive%\\*"

"FileBlockWhat_21"=dword:00150000

"FileBlockReport_21"=dword:00000001

"FileBlockRuleName_22"="La creación/modificación/eliminación remota de archivos (.exe) está prohibida )"

"FileBlockProcess_22"="Sistema:Remoto"

"FileBlockWildcard_22"="**\\*.exe"

FileBlockWhat_22"=dword: 00150000

"FileBlockReport_22"=dword:00000001

"FileBlockRuleName_23"="La creación/modificación/eliminación remota de archivos (.scr) está prohibida"

"FileBlockProcess_23"="Sistema :Remoto "

"FileBlockWildcard_23"="**\\*.scr"

"FileBlockWhat_23"=dword:00150000

"FileBlockReport_23"=dword: 00000001

"FileBlockRuleName_24"="Prohibir la creación/modificación/eliminación remota de archivos (.ocx)"

"FileBlockProcess_24"="System:Remote"

"FileBlockWildcard_24" ="**\\*.ocx"

"FileBlockWhat_24"=dword:00150000

"FileBlockReport_24"=dword:00000001

"FileBlockRuleName_25 "=" Prohibir la creación, modificación o eliminación remota de archivos (.pif)"

"FileBlockProcess_25"="System:Remote"

"FileBlockWildcard_25"="**\\* .pif"

"FileBlockWhat_25"=dword:00150000

"FileBlockReport_25"=dword:00000001

"FileBlockRuleName_26"="Creación remota de archivos autorun.inf está prohibido"

"FileBlockProcess_26"="System:Remote"

"FileBlockWildcard_26"="**\\autorun.inf"

"FileBlockWhat_26"= dword:00010000

"FileBlockReport_26"=dword:00000001

"FileBlockRuleName_27"="Prohibir la creación de nuevos archivos (.bat) en carpetas de Windows"

" FileBlockProcess_27"="* "

"FileBlockWildcard_27"="%windir%\\*.bat"

"FileBlockWhat_27"=dword:00050000

"FileBlockReport_27 "=dword:00000001

"FileBlockRuleName_28"="Prohibir la creación de nuevos archivos (.exe) en carpetas de Windows"

"FileBlockProcess_28"="*"

"FileBlockWildcard_28" ="%windir%\\*.exe"

"FileBlockWhat_28"=dword:00050000

"FileBlockReport_28"=dword:00000001

"FileBlockRuleName_29"= "Prohibir la creación de nuevos archivos (.com) en carpetas de Windows"

"FileBlockProcess_29"="*"

"FileBlockWildcard_29"="%windir%\\* .

com"

"FileBlockWhat_29"=dword:00050000

"FileBlockReport_29"=dword:00000001

"FileBlockRuleName_30"="Tencent QQ tiene prohibido crear archivos publicitarios "

"FileBlockProcess_30"="*"

"FileBlockWildcard_30"="**\\AD\\*.*"

"FileBlockWhat_30"=dword :00090000

"FileBlockReport_30"=dword:00000001

"FileBlockRuleName_31"="Prohibir iniciar desde la carpeta Temp (.exe)"

"FileBlockProcess_31"=" * "

"FileBlockWildcard_31"="**\\temp*\\*.exe"

"FileBlockWhat_31"=dword:00080000

"FileBlockReport_31" = palabra clave:000