This is an Application Control Policy used to block psexec.exe.
This policy will block psexec.exe based on:
- fingerprint
-services/processes
-filename
The action is block and notification is set to display a pop up.
...
USBDeview is a small utility that lists all USB devices that currently connected to your computer, as well as all USB devices that you previously used.
For each USB device, extended information is displayed: Device name/description, device ...
This tool is awesome on the fight against W32.Downadup on large networks.
Use this tool to quickly identify infected systems and machines.
If you find infected machines, you should MS-patch KB958644 and reboot them to cleanup the system.
...
SEP is a unique product which allows you to create effective application and device control policies to stop threats. Today I'm going to show you how to log applications which run from removable drives and receive a scheduled report by e-mail. Such ...
This software will scan your network with Conficker/Downadup infections.
ConfickerScanner.zip
Thanks a lot for this tool. Thanks a lot for this tool.
Conficker Scanner dear Jomargonjales
i try this tool on winxp 64 ...
I've built a custom IPS policy to block Aurora exploit and I've used Metasploit's IE_Aurora module to attack my virtual machine and guess what, SEP blocked the attack. Attached you'll have the policy file and a screenshot. Please ...
I have attached the Firewall and Application Control policy Policy to Block Peer to Peer Applications as per this article
. ...
This will manually remove Daprosy on your computer. Please see the attached file and read the procedure.
Daprosy.zip
(Security, 11.x, Endpoint Protection (AntiVirus), Emerging Threats, Malicious Code, Security Risks, Vulnerabilities ...
To install the new copy of Rmtshare.exe, follow these steps:
Download Rmtshar.exe into your Resource Kit directory. By default, this directory is: C:\NTRESKIT\
If your software is not capable of downloading the file into a particular ...