Don't Run Application containing some words

Question

I want to close applications which contains some target words on their title or their name or in their text boxes, after they run.

For example if an application's title contains "keylog" then After running a third party application detect it and closes it. also the same with its file name.

Is there any third party application for doing this?

Answer 1

Without third party software (of which, I can't really recommend any), this is not easily achievable with the built in features of Windows. The closest you can get is to use the business versions of Windows (Professional and higher), and use Group Policy to restrict the list of applications that can be run.

This being said, it is an include list, not an exclusion list.

However, it is highly likely that these applications could bypass your security simply by renaming themselves or similar.

It would be impossible to protect via an application's title as the application would already have run by this point - unless you do some sort of decompiling/resource look up in advance - however, this will most likely be inefficient, very slow and not always work (in the case of obfuscation).

If you want to go ahead with an allow list, here is a guide for XP, Windows Vista/7 are very similar, but, if you need help, let me know and I will write a guide for you.

Answer 2

AutoIt would be my best recommendation. It has the ability to poll for window title or text (both hidden and visible windows) and process name (WinExists(), ProcessExists()) and has options for closing applications by process or by window (WinKill(), WinClose(), ProcessClose()). Because it is a scripting language, it is extremely configurable to filter out exactly what you want, but might have a higher learning curve than other apps.

Note: it won't prevent them from running, but it will kill them immediately once they attempt to run.

Here is some example code:

Opt("WinTitleMatchMode", 2)

While 1

If ProcessExists("notepad.exe") Then
    ProcessClose("notepad.exe")
EndIf

If WinExists("Paint","") = 1 Then
    WinClose("Paint","")
EndIf

    Sleep(100)

WEnd

This will close any window with "Paint" in the title and the notepad.exe process as soon as they start.