Trick to Block Executable/Script File on Drive

Current computer virus commonly spreading as executable (*.exe, *.scr, *.com, *.pif) and script file (such *.vbs and *.bat), and how to make this all file not running on Drive including USB Flashdisk so our computer is still secure from virus attack because commonly virus use file document or folder icon to avoid user detection.

With this technique we can block all of executable/script file on desire drive so there is no mistake when we run a wrong program which dim as data file. For example when we plug USB Flasdisk that contain virus on it (assume as drive E:) there is no need to worry virus infect our computer even we click the file for many times.
But it also has shortage, all executable/script file including non virus on that drive is blocked so be careful do not block drive with windows system on it.

1. Open Control Panel
2. Chose Administrative Tools
3. Chose Local Security Policy
4. Then Chose Software Restriction Policies, right click on it and Create New Policies
5. The result is a number new object appear on right side
6. Chose Additional Rules, right click
7. Chose New Path Rules
8. Put drive address we want to block (exp: C:\Documents and Settings/ANDRY/My Documents)
9. For Security Level, if we chose Unrestricted it mean to unblock all file on those drive, but if we chose Disallowed it mean to block executable file except data file such doc, xls, jpg etc.
10. Then Apply and OK
11. To Open It
12. Chose Additional Rules
13. Click properties to rules you wish to open.
14. Chose Unrestricted or Delete the Rules.

If we use this technique it will be stop the spreading of executable/script virus. But we still aware to spreading of macro virus because file data is still unblock.