stapp 130 Report post Posted October 18, 2018 Windows 10 1809 - EAM 8988 Frank if I go to BB and select ''add application rule'' browse to notepad.exe, select it and choose blocked, I can still open notepad. When I do open notepad I get 2 entries in BB list one listed as monitored, and one listed as blocked See screenshot. (Also why does it say n/a when you go to add an application rule?) Download Image Share this post Link to post Share on other sites
Frank H 91 Report post Posted October 18, 2018 you added a block rule for c:\windows\notepad.exe, right? when you start notepad from the windows start menu, it still runs, right ? when you check the shortcut in the w10 start menu, you will notice it starts %windir%\system32\notepad.exe, which is a different exe than the one you excluded, right ? so yeah, notepad, and some others have twin brothers in a different folder. this indeed is a highly confusing thing in Windows. Share this post Link to post Share on other sites
stapp 130 Report post Posted October 18, 2018 3 minutes ago, Frank H said: so yeah, notepad, and some others have twin brothers in a different folder. I hope malware doesn't too What about the n/a when you go to add an application rule? Share this post Link to post Share on other sites
Frank H 91 Report post Posted October 18, 2018 1 minute ago, stapp said: What about the n/a when you go to add an application rule? UI bug Share this post Link to post Share on other sites
