m-dwyer / CryptoBlocker

A script to deploy File Server Resource Manager and associated scripts to block infected users
GNU General Public License v2.0
53 stars 103 forks source link

Issue - Blocking a windows update #8

Open CordlezToaster opened 8 years ago

CordlezToaster commented 8 years ago

Got this message today after my server tried to update User NT AUTHORITY\SYSTEM attempted to save C:\Windows\SoftwareDistribution\Download\a51458c204d30e1b291af16256441875\inst\x86_microsoft-windows-bcrypt-primitives-dll_31bf3856ad364e35_6.3.9600.18341_none_a6f94f2e32865993.manifest to C:\ on the BATMAN server. This file is in the “CryptoBlockerGroup” file group, which is not permitted on the server.