How to use Access Protection policies to protect against viruses that can disable Task Manager

技術的な記事 ID: KB53355
最終更新: 7/22/2020

環境

McAfee VirusScan Enterprise (VSE) 8.8

For details of VirusScan Enterprise supported platforms, see KB51111.

概要

Several viruses can disable administrative features of the computer such as Task Manager. When the features as disabled, Task Manager is shown as unavailable if you try to load it by right-clicking the taskbar.

This article explains how VirusScan can be used to prevent from administrative features being disabled.

解決策

IMPORTANT: These instructions directly affect your access to the registry. It can be circumvented by (temporarily) disabling Access Protection.

To protect Task Manager

Click Start, Programs, McAfee, VirusScan Console.
Double-click Access Protection.
From Categories, select User-Defined Rules, New.
Select Registry Blocking Rule and click OK.
For the Rule name type Prevent modification of Task Manager - 1.
For Processes to include, type asterisk (*).
It means that all processes are included.
For Processes to exclude, type gpupdate.exe and any other process to be excluded, separating processes by a comma and a space.
The gpupdate.exe process is the Microsoft Group Policy Refresh Utility. See http://technet.microsoft.com/en-us/library/bb490983.aspx
Under Registry Key or value to protect, select HKCU from the drop-down list.
In the adjacent field, type /Software/Microsoft/Windows/CurrentVersion/Policies/System/DisableTaskMgr
For Rule Type, select Value.
For Registry actions to block select Write to key or value and Create Key or value. Click OK.
The rule created above protects the HKCU (HKEY_CURRENT_USER) registry Hive. A similar rule must be created for the HKLM (HKEY_LOCAL_MACHINE) Hive.
Repeat these steps, naming the rule Prevent modification of Task Manager - 2 and selecting HKLM instead of HKCU.

以前のドキュメント ID

616141

影響を受ける製品

VirusScan Enterprise 8.8

言語:

この記事は、次の言語で表示可能です:

English United States
Japanese

技術用語集

用語集にある用語をハイライトする

当社の技術用語集を参照してください。

Knowledge Center

How to use Access Protection policies to protect against viruses that can disable Task Manager

環境

概要

解決策

関連情報

以前のドキュメント ID

影響を受ける製品

言語:

技術用語集

Title

Title

Knowledge Center

How to use Access Protection policies to protect against viruses that can disable Task Manager

環境

概要

解決策

関連情報

以前のドキュメント ID

影響を受ける製品

言語:

技術用語集

地域を選択してください

Title

Title