Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: mQ4 on September 21, 2004, 01:14:55 PM

Title: Custom blocking a program
Post by: mQ4 on September 21, 2004, 01:14:55 PM: What I want to know is if there is any way to do this: to block a program's execution. I want to prevent Yahoo messenger (and maybe AIM) from installing (priority) or executing. Can Avast custom block an exe? Can another program do the trick? Thank you.
Title: Re:Custom blocking a program
Post by: Vlk on September 21, 2004, 01:25:02 PM: What OS are you using?
Title: Re:Custom blocking a program
Post by: mQ4 on September 21, 2004, 01:27:00 PM: XP SP2
Title: Re:Custom blocking a program
Post by: mQ4 on September 22, 2004, 02:12:51 PM: no solution? :(
Title: Re:Custom blocking a program
Post by: Lisandro on September 22, 2004, 08:31:08 PM: Quote from: mQ4 on September 22, 2004, 02:12:51 PM
no solution? :(

It won't be easy in my opinion...
I was browsing for a solution here and waiting for Vlk. ::)
Title: Re:Custom blocking a program
Post by: mQ4 on September 22, 2004, 09:03:30 PM: I know it's not easy... That's why I came here ;)
Title: Re:Custom blocking a program
Post by: DavidR on September 22, 2004, 09:28:07 PM: I would have thought that this is a function of your firewall?

If you don't automatically give Yahoo messenger internet access, it would have to ask for access.

Not sure if a program like ProcessGuard Pro could be customised in this way.
Title: Re:Custom blocking a program
Post by: Lisandro on September 22, 2004, 09:42:05 PM: Quote from: DavidR on September 22, 2004, 09:28:07 PM
Not sure if a program like ProcessGuard Pro could be customised in this way.

To block any single executable? I don't think so...
Title: Re:Custom blocking a program
Post by: Vlk on September 22, 2004, 10:14:16 PM: You have XP? So what's the problem then? ;)

If the files are installed on a NTFS volume, you can assign/restrict any access rights (including the execute right) to any file (including the Yahoo Messenger and/or AIM executables) - it's a feature of the OS since Windows NT 3.1...

To set it, just right-click the exe file(s) in Explorer, click Properties, and see the Security tab.

Cheers
Vlk
Title: Re:Custom blocking a program
Post by: Lisandro on September 22, 2004, 10:52:34 PM: If you are talking of known and already placed executable files...
But I was talking avast! (or PG) block an installation (or execution) of a non-infectable file (see the first post of the thread) :-\
Title: Re:Custom blocking a program
Post by: mQ4 on September 23, 2004, 03:33:55 AM: Technical is right?
Title: Re:Custom blocking a program
Post by: Vlk on September 23, 2004, 08:52:39 AM: So you want to identify the new program by file name? Or how would you like to do it? (I mean, blocking the execution by name doesn't really make much sense as the name can be easily changed).
Title: Re:Custom blocking a program
Post by: mQ4 on September 23, 2004, 10:15:18 AM: Well... by name is OK i guess...If the bloking is silent, no one will suspect... A more "advanced" solution will be a signature... MD5(am I correct?), but I don't know how to extract one... Or the file header and frist x bytes maybe... I don't know...
Title: Re:Custom blocking a program
Post by: Lisandro on September 23, 2004, 01:51:10 PM: Quote from: Technical on September 22, 2004, 10:52:34 PM
But I was talking avast! (or PG) block an installation (or execution) of a non-infectable file (see the first post of the thread) :-\

Now, I'm curious... could be a signatures detection feature? ::)
Could the signatures into VRDB help in these detection? ::)
Title: Re:Custom blocking a program
Post by: mQ4 on September 23, 2004, 04:53:37 PM: ^^I'm with stupid :)