Thanks for posting the file that shows what Cryptoprevent creates rules for.
It looks like the majority of the restrictions are on files that can run/execute (.bat, .cmd, .com, .exe, .js, .jse., .pif, and .scr), are in locations where programs should not be running, or are of files that appear to be named as multimedia/compression/MS Office files but are actual files that can run/execute. There also are restrictions on svchost.exe running in odd locations. And, cipher.exe, lsassvrtdbks.exe, lsassw86s.exe, scsvserv.exe, syskey.exe, and vssadmin.exe are restricted… it looks like all of these except ciphere.exe and vssadmin.exe are malware programs… does Avast already block all of these malware programs?
I’m not sure what this restriction does:
HKLM Group Policy restriction on software: ** <====== ATTENTION
