How to use Windows 7 control strategy to completely trap a trojan virus

In the first step, enter "Secpol.msc" in the search for programs and files box on the Start menu and press ENTER.

Step two, in the local Security policy interface, find the executable rules for "AppLocker" in application control Policy, and "create new rule" in "execute Rules".

In the third step, in the right-click menu of the right blank area of the Create new rule interface, select Create new rule → Enter the new Rule Wizard.

Step fourth, in the interface, select the "Permission" item, set its action to reject, and the user or group select "Everyone" so that everyone and the system cannot run the restricted virus.

Fifth step: In the "Conditions" interface, we can use three types of conditions to limit the operation of the program, respectively: "publisher", "Path", "File hash." The publisher is judged by a digital signature, and since the virus is usually not digitally signed, the item is temporarily unavailable, but this is especially useful when restricting generic software. "Path" is to select the virus file or folder directly. File hashes, however, can be used to limit viruses by hashing them out, even if the virus replicates many copies to different places. Here we take the "path" limit as an example, after entering the next step, we click on the "Browse File" button to select the virus file, and then click the "Create" button.

Sixth step: Because we created the first rule, then there will be a default rule creation prompt, click "Yes" to allow the creation of default rules, so as not to set the rules of the System file program is limited.

Postscript:

The restriction rules for such a virus will take effect. You can double-click to run the virus to try, the virus has been limited to run. In addition, small series to remind you that if the set AppLocker rule is invalid, you can enter the "Start menu in the search programs and Files" box, type services.msc, and then press ENTER, you can open the "service", and then find the "Application Identity" service project, and set the startup type to "Automatic" and press "start" to make the rule effective. In the selection of anti-virus software, the small part of the recommended to choose more frequent software, because the virus is also a variety of, only the latest software can be detected to the latest virus.