The technique of using control strategy to completely isolate virus Trojan under Win7 system

1, open the Start menu and enter the "secpol.msc" command in the search box and press ENTER to open the local security policy;

2. In the open Local Security policy interface, expand the AppLocker rule in application control policy on the left, and then right-click the executable rule to select the Create new rule option;

3, in the pop-up "Create new Rules" interface, in the right margin of the right mouse click to select "Create new Rules", open the New Rule wizard;

4, in the pop-up creation of the interface to create executable rules, select the left of the "permission" item, under "Operation" set to "reject", in the "User or group" select "Everyone", so that all people and the system can not run the virus limited;

5, then click on the left side of the "conditions" option, we can limit the operation of the program by three kinds of conditional types: "publisher", "Path", "File Hash", "publisher" based on digital signature, because the virus is usually not digitally signed, so this is temporarily unavailable, But this is especially useful when restricting ordinary software, whereas "path" is a direct selection of virus files or folders, and "file hashes" can be used to limit viruses by hashing, even if the virus replicates a lot to different places, it can be completely scrapped. Now small weave to "path" limit for example, enter the next step, click the "Browse File" button to select the virus file, and then click the "Create" button;

6, because the creation of the first rule, so there will be a default rule creation prompts, so as to avoid the rules set up to make system file procedures are limited, click "Yes", allowing the creation of default rules;

7, through the above settings, the virus restrictions on the rules began to take effect, you can try to double-click the virus to see the virus has been limited to run the

Tip: If you set the AppLocker rule to be invalid, you can open the service, locate the Application Identity service project, set the startup type to Automatic, and then press start to make the rule effective. In addition, in the choice of anti-virus software, we recommend that you choose more frequent updates to the software, the latest software will be easier to kill the latest virus.