Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there a way i can blacklist multiple files? right now i am thinking exe, msi and bat. I need a list of dangerous file extension (one i found online had rtf and mp3 on it WTF, exploitable files does not count bc that is everything).

How can i prevent windows explorer from executing these files? I know how to prevent these files from being extracted via winrar but i dont know how to stop it from firefox and explorer.

-edit- i'll make sure the account isnt an admin XP account. I am doing a favour to the owner who doesnt know anything about computers and needs to install the occasional app.

share|improve this question
up vote 1 down vote accepted

In the corporate environment I've seen Faronics Anti-Executable used a fair bit. Faronics products (best known for deep freeze) are fairly popular with the bigger corporations but you can also buy single licenses for a decent price. You can create whitelists for file types you want to allow and have the rest denied. It uses hashes as well which can be used to keep programs off the system entirely.

For a free alternative there is System Safety Monitor, which has a lot less features, but it might suit your needs.

Anti-Executable would be my preference.

share|improve this answer

You can use Windows' builtin security policies. See Description of the Software Restriction Policies in Windows XP.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.