Sunday, March 16, 2008

GPO to stop Blaster and Sobig.F

Start->Run->MMC
Select File
Add/Remove Snap-in
Add, Group Policy Object Editor,
Add, Close, Ok.

Go to :-Local Computer Policy, User Configuration, Administrative Templates, System
Click on Systems
Double Click on "Don't Run Specified Windows Applications".

Select Enable and then click on Show, then Add

Add any applications you want to restrict. Blaster and Sobig.F are

  • WINPPR32.EXE

  • MSBLASTER.EXE

Click OK and close out of the MMC.

These will help to stop the above two Trojan / worms.

No comments:

Post a Comment