Wilders Security Forums  

Go Back   Wilders Security Forums > Official Prevx Support Forum > Prevx Releases
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread
  #1  
Old April 30th, 2012, 09:24 AM
Amit's Avatar
Amit Amit is offline
Massive Poster
 
Join Date: May 2011
Location: Parallel Universe
Posts: 4,631
Default WSA as Anti-Executable?

Hi,

Can WSA be configured to work as a n Anti-Executable? If so how to configure it like that?

Best Wishes,
ams963
__________________
✓The first principle is that you must not fool yourself, and you are the easiest person to fool.
✓Science is the belief in the ignorance of experts.
✓I don't know anything, but I do know that everything is interesting if you go into it deeply enough.


-------Richard P. Feynman---------
  #2  
Old April 30th, 2012, 07:34 PM
xXDarkStalkerxX xXDarkStalkerxX is offline
Frequent Poster
 
Join Date: Nov 2008
Posts: 268
Default Re: WSA as Anti-Executable?

Heuristics > Warn when new programs execute that are not trusted.

I think this is the setting that you want.


  #3  
Old April 30th, 2012, 09:23 PM
Triple Helix's Avatar
Triple Helix Triple Helix is offline
Prevx Forum Helper
 
Join Date: Nov 2004
Location: Oshawa, Ontario
Posts: 9,606
Default Re: WSA as Anti-Executable?

Quote:
Originally Posted by xXDarkStalkerxX
Heuristics > Warn when new programs execute that are not trusted.

I think this is the setting that you want.



Yes it is but lots of pop-ups though!

TH
__________________
Triple Helix - Microsoft® MVP Consumer Security 2012/14

VIP Member Of ASAP - (Alliance of Security Analysis Professionals™)

Webroot® SecureAnywhere™ Complete 2013 Closed Beta Tester v8.0.2.145 - VoodooShield 1.08 - Windows 7 Ultimate 64bit and all Windows OS's from XP to Win 8 on VM's.
  #4  
Old April 30th, 2012, 10:13 PM
STV0726's Avatar
STV0726 STV0726 is offline
Frequent Poster
 
Join Date: Jul 2010
Posts: 868
Default Re: WSA as Anti-Executable?

That's still not really an anti-executable though. It's WSA in whitelist mode...

...If anything I'd call it an anti-NEW executable.

Use sofwtare restriction policy with WSA to get the effect you're really longing for.
__________________
~ STV0726
OS: Windows 7|SRP|SUA|UAC|EFS|EMET|Firewall|Backup
Resident: Webroot SecureAnywhere 2013|Sandboxie
On-Demand: MBAM|SAS|HMP|Comodo CE|Secunia PSI
Browser: Firefox|Web of Trust|Adblock Plus|NoScript
Hardware/Other: Linksys Router|Norton ConnectSafe DNS
  #5  
Old April 30th, 2012, 11:30 PM
Dark Shadow's Avatar
Dark Shadow Dark Shadow is offline
Massive Poster
 
Join Date: Oct 2007
Location: USA
Posts: 4,550
Default Re: WSA as Anti-Executable?

A True 100 percent Anti=Excutable Faronics AE
__________________
OS X 10.8.3 - 2.9 GHz Intel core i7 - 8 GB 1600 MHz DDR3 - 750 SATA HD - Intel HD 4000 Graphics 512 MB.
  #6  
Old May 1st, 2012, 01:12 AM
Amit's Avatar
Amit Amit is offline
Massive Poster
 
Join Date: May 2011
Location: Parallel Universe
Posts: 4,631
Default Re: WSA as Anti-Executable?

Quote:
Originally Posted by xXDarkStalkerxX
Heuristics > Warn when new programs execute that are not trusted.

I think this is the setting that you want.


thx a lot...that indeed seems like a near AE feature......
__________________
✓The first principle is that you must not fool yourself, and you are the easiest person to fool.
✓Science is the belief in the ignorance of experts.
✓I don't know anything, but I do know that everything is interesting if you go into it deeply enough.


-------Richard P. Feynman---------
  #7  
Old May 1st, 2012, 01:13 AM
Amit's Avatar
Amit Amit is offline
Massive Poster
 
Join Date: May 2011
Location: Parallel Universe
Posts: 4,631
Default Re: WSA as Anti-Executable?

Quote:
Originally Posted by Triple Helix
Yes it is but lots of pop-ups though!

TH
I will handle it.....
__________________
✓The first principle is that you must not fool yourself, and you are the easiest person to fool.
✓Science is the belief in the ignorance of experts.
✓I don't know anything, but I do know that everything is interesting if you go into it deeply enough.


-------Richard P. Feynman---------
  #8  
Old May 1st, 2012, 01:14 AM
Amit's Avatar
Amit Amit is offline
Massive Poster
 
Join Date: May 2011
Location: Parallel Universe
Posts: 4,631
Default Re: WSA as Anti-Executable?

Quote:
Originally Posted by STV0726
That's still not really an anti-executable though. It's WSA in whitelist mode...

...If anything I'd call it an anti-NEW executable.

Use sofwtare restriction policy with WSA to get the effect you're really longing for.
and how do I use this software restriction policy?.....can you guide me?
__________________
✓The first principle is that you must not fool yourself, and you are the easiest person to fool.
✓Science is the belief in the ignorance of experts.
✓I don't know anything, but I do know that everything is interesting if you go into it deeply enough.


-------Richard P. Feynman---------
  #9  
Old May 1st, 2012, 01:15 AM
Amit's Avatar
Amit Amit is offline
Massive Poster
 
Join Date: May 2011
Location: Parallel Universe
Posts: 4,631
Default Re: WSA as Anti-Executable?

Quote:
Originally Posted by djohn
A True 100 percent Anti=Excutable Faronics AE
true.....
__________________
✓The first principle is that you must not fool yourself, and you are the easiest person to fool.
✓Science is the belief in the ignorance of experts.
✓I don't know anything, but I do know that everything is interesting if you go into it deeply enough.


-------Richard P. Feynman---------
  #10  
Old May 1st, 2012, 02:19 AM
Zorak's Avatar
Zorak Zorak is offline
Regular Poster
 
Join Date: Jan 2010
Location: Australian Capital Territory
Posts: 139
Default Re: WSA as Anti-Executable?

Quote:
Originally Posted by ams963
and how do I use this software restriction policy?.....can you guide me?

This guide here is a good one: http://www.mechbgon.com/srp/

Software Restriction Policies (SRP) are not for everyone, I suggest you do a bit of research first so you can understand what is involved and decide if it is for you or not. It is a very effective way of securing a PC however. There are plenty of threads about SRP here on Wilders posted by people with far more knowledge than I. There is also a neat little program called PGS by Wilder's member Sully which can enable SRP for unsupported versions of Windows.

Hope this helps!
__________________
Win7 Pro x64 SP1 - SUA - UAC(max) - SRP - EMET 3.5 Realtime: Webroot SecureAnywhere - Windows Firewall On Demand: Hitman Pro - Emsisoft Emergency Kit - OTL - Secunia PSI Imaging: Windows Backup & Restore - Macrium Reflect Free Router: Linksys
  #11  
Old May 1st, 2012, 02:50 AM
Amit's Avatar
Amit Amit is offline
Massive Poster
 
Join Date: May 2011
Location: Parallel Universe
Posts: 4,631
Default Re: WSA as Anti-Executable?

Quote:
Originally Posted by Zorak
This guide here is a good one: http://www.mechbgon.com/srp/

Software Restriction Policies (SRP) are not for everyone, I suggest you do a bit of research first so you can understand what is involved and decide if it is for you or not. It is a very effective way of securing a PC however. There are plenty of threads about SRP here on Wilders posted by people with far more knowledge than I. There is also a neat little program called PGS by Wilder's member Sully which can enable SRP for unsupported versions of Windows.

Hope this helps!
it says 'You can't use Software Restriction Policy if you have Windows XP Home Edition and Windows Vista and Windows 7 Home and Starter versions either'....so I can't use it on my xp......but it's good for my win 7 pcs.....so thx a lot.......also the guide said if I cannot use SRP on XP then I can either use Limited account or Sandboxie or DropMyRights...........since I got sbie....I'll use it on xp...thx again......
__________________
✓The first principle is that you must not fool yourself, and you are the easiest person to fool.
✓Science is the belief in the ignorance of experts.
✓I don't know anything, but I do know that everything is interesting if you go into it deeply enough.


-------Richard P. Feynman---------
 

Wilders Security Forums > Official Prevx Support Forum > Prevx Releases « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -4. The time now is 04:00 AM.


Powered by vBulletin® Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2013, Wilders Security Forums