Blocking The creation of all executable file types

Discussion in 'other anti-malware software' started by arran, Oct 30, 2009.

Thread Status:
Not open for further replies.
  1. arran

    arran Registered Member

    Joined:
    Feb 5, 2008
    Posts:
    1,139
    What are peoples thoughts on blocking The creation of all executable file types?
    surely this simple strategy would be 100 percent bullet proof. how can malware get in and infect if their files are blocked from being created in the first place?
    what other security software would you need?

    to my knowledge MD and EQS are the only apps which has file and folder rules.
     
  2. Pliskin

    Pliskin Registered Member

    Joined:
    Feb 8, 2009
    Posts:
    341
    RTD Pro has file and folder rules. PE GUARD also blocks creation of executable file types.
     
  3. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    12,883
    Location:
    Canada
    what about D+ and Anti-Executables:)
     
  4. cheater87

    cheater87 Registered Member

    Joined:
    Apr 22, 2005
    Posts:
    3,123
    Location:
    Pennsylvania.
    Aren't there some types of malware that don't rely on exes?
     
  5. noone_particular

    noone_particular Registered Member

    Joined:
    Aug 8, 2008
    Posts:
    3,798
    Code doesn't have to exist as a physical file to execute. It can exist solely in memory and execute from there. Your idea would work if you can close that vector. Executable code can also exist in other types of data files like PDFs, documents, and media files. How would you protect your system from something like a new version of this exploit?

    Preventing the creation of executable files could cause you other problems. You'd need a way to disable this protection in order to update your system in any way.
     
  6. arran

    arran Registered Member

    Joined:
    Feb 5, 2008
    Posts:
    1,139
    yea I wasn't sure about D+ I knew it had file/folder rules just didn't how how advanced they were.

    didn't know about RTD Pro and PE GUARD, are these apps still being updated?




    thats why I said all types of executable files, not just .exe but all script files and everything else.
     
  7. wat0114

    wat0114 Guest

    I don't see how it matters if you have a program that's capable of blocking everything. What happens when you have to run updates or install some software you just downloaded? Don't you at some point have to allow an executable type to run?
     
Loading...
Thread Status:
Not open for further replies.