mcafee8.0i能不能保存设置文件？
可以~~
也不算好东西 申明下不是本人写的，白乌鸦写的
新建文本档
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\Shared Components\On Access Scanner\BehaviourBlocking]
"PortBlockReportMinutes"=dword:00000001
"bLimitSize_Ent"=dword:00000001
"ShareBlockReport"=dword:00000001
"LogFileFormat_Ent"=dword:00000001
"FileBlockEnabled_8"=dword:00000001
"FileBlockEnabled_1"=dword:00000001
"VSIDBlockOnNonVirus"=dword:00000000
"FileBlockEnabled_28"=dword:00000001
"EnterceptShowMessages"=dword:00000000
"FileBlockEnabled_26"=dword:00000001
"bLogToFile"=dword:00000001
"FileBlockEnabled_4"=dword:00000001
"FileBlockEnabled_13"=dword:00000001
"FileBlockEnabled_19"=dword:00000001
"FileBlockEnabled_12"=dword:00000001
"FileBlockEnabled_18"=dword:00000001
"FileBlockEnabled_0"=dword:00000001
"bLogToFile_Ent"=dword:00000001
"FileBlockEnabled_2"=dword:00000001
"FileBlockEnabled_11"=dword:00000001
"FileBlockEnabled_10"=dword:00000001
"VSIDMessage"=""
"FileBlockEnabled_23"=dword:00000001
"FileBlockEnabled_17"=dword:00000001
"FileBlockEnabled_9"=dword:00000001
"VSIDSendMessage"=dword:00000000
"PortBlockReport"=dword:00000001
"szLogFileName"="%VSEDEFLOGDIR%\\AccessProtectionLog.txt"
"FileBlockEnabled_3"=dword:00000001
"FileBlockEnabled_20"=dword:00000001
"FileBlockEnabled_27"=dword:00000001
"FileBlockEnabled_30"=dword:00000000
"FileBlockEnabled_25"=dword:00000001
"dwMaxLogSizeMB"=dword:00000001
"FileBlockEnabled_22"=dword:00000001
"FileBlockEnabled_5"=dword:00000001
"FileBlockEnabled_16"=dword:00000001
"bLimitSize"=dword:00000001
"VSIDBlock"=dword:00000001
"dwMaxLogSizeMB_Ent"=dword:00000001
"ShareBlockMode"=dword:00000002
"LogFileFormat"=dword:00000001
"FileBlockEnabled_15"=dword:00000001
"PortBlockProcessExclusionList"=hex(7):46,00,72,00,61,00,6d,00,65,00,77,00,6f,\
00,72,00,6b,00,53,00,65,00,72,00,76,00,69,00,63,00,65,00,2e,00,65,00,78,00,\
65,00,00,00,41,00,67,00,65,00,6e,00,74,00,6e,00,74,00,2e,00,65,00,78,00,65,\
00,00,00,00,00
"VSIDBlockTimeout"=dword:0000000a
"FileBlockEnabled_14"=dword:00000001
"EnterceptMode"=dword:00000001
"FileBlockEnabled_29"=dword:00000001
"FileBlockEnabled_6"=dword:00000001
"szLogFileName_Ent"="%VSEDEFLOGDIR%\\BufferOverflowProtectionLog.txt"
"FileBlockEnabled_24"=dword:00000001
"FileBlockEnabled_7"=dword:00000001
"EnterceptEnabled"=dword:00000001
"FileBlockEnabled_21"=dword:00000001
"FileBlockEnabled_31"=dword:00000001
"FileBlockEnabled_32"=dword:00000001
"FileBlockEnabled_33"=dword:00000001
"FileBlockEnabled_34"=dword:00000001
"FileBlockEnabled_35"=dword:00000001
"FileBlockEnabled_36"=dword:00000001
"FileBlockEnabled_37"=dword:00000001
"FileBlockEnabled_38"=dword:00000001
"FileBlockEnabled_39"=dword:00000001
"FileBlockEnabled_40"=dword:00000001
"FileBlockEnabled_41"=dword:00000001
"FileBlockEnabled_42"=dword:00000001
"FileBlockEnabled_43"=dword:00000001
"FileBlockEnabled_44"=dword:00000001
"FileBlockEnabled_45"=dword:00000001
"FileBlockEnabled_46"=dword:00000001
"FileBlockEnabled_47"=dword:00000001
"FileBlockEnabled_48"=dword:00000001
"FileBlockEnabled_49"=dword:00000001
"FileBlockEnabled_50"=dword:00000001
"FileBlockEnabled_51"=dword:00000001
"FileBlockEnabled_52"=dword:00000001
"FileBlockEnabled_53"=dword:00000001
"FileBlockEnabled_54"=dword:00000001
"FileBlockEnabled_55"=dword:00000001
"FileBlockEnabled_56"=dword:00000001
"FileBlockEnabled_57"=dword:00000001
"FileBlockEnabled_58"=dword:00000001
"FileBlockEnabled_59"=dword:00000001
"FileBlockEnabled_60"=dword:00000001
"FileBlockEnabled_61"=dword:00000001
"FileBlockEnabled_62"=dword:00000001
"FileBlockEnabled_63"=dword:00000001
"FileBlockEnabled_64"=dword:00000001
"FileBlockEnabled_65"=dword:00000001
"FileBlockEnabled_66"=dword:00000001
"FileBlockEnabled_67"=dword:00000001
"FileBlockEnabled_68"=dword:00000001
"FileBlockEnabled_69"=dword:00000001
"FileBlockEnabled_70"=dword:00000001
"FileBlockEnabled_71"=dword:00000001
"FileBlockEnabled_72"=dword:00000001
"FileBlockEnabled_73"=dword:00000001
"FileBlockEnabled_74"=dword:00000001
"FileBlockEnabled_75"=dword:00000001
"FileBlockEnabled_76"=dword:00000001
"FileBlockEnabled_77"=dword:00000001
"FileBlockEnabled_78"=dword:00000001
"FileBlockEnabled_79"=dword:00000001
"FileBlockEnabled_80"=dword:00000000
"FileBlockEnabled_81"=dword:00000001
"FileBlockEnabled_82"=dword:00000001
"FileBlockEnabled_83"=dword:00000001
"FileBlockEnabled_84"=dword:00000001
"FileBlockEnabled_85"=dword:00000001
"FileBlockEnabled_86"=dword:00000001
"FileBlockEnabled_87"=dword:00000001
"FileBlockEnabled_88"=dword:00000000
"FileBlockEnabled_89"=dword:00000001
"FileBlockEnabled_90"=dword:00000001
"FileBlockEnabled_91"=dword:00000001
"FileBlockEnabled_92"=dword:00000001
"FileBlockEnabled_93"=dword:00000001
"FileBlockEnabled_94"=dword:00000001
"FileBlockEnabled_95"=dword:00000001
"FileBlockEnabled_96"=dword:00000001
"FileBlockEnabled_97"=dword:00000001
"PortBlockEnabled_0"=dword:00000001
"PortBlockName_0"="禁止大量发送邮件的蠕虫病毒发送邮件"
"PortBlockDirection_0"=dword:00000001
"PortBlockRange_0"="25"
"PortBlockWhiteList_0"="foxmail.exe"
"PortBlockEnabled_1"=dword:00000001
"PortBlockName_1"="禁止 IRC 通讯出站"
"PortBlockDirection_1"=dword:00000001
"PortBlockRange_1"="6666-6669"
"PortBlockWhiteList_1"=""
"PortBlockEnabled_2"=dword:00000001
"PortBlockName_2"="禁止 IRC 通讯入站"
"PortBlockDirection_2"=dword:00000000
"PortBlockRange_2"="6666-6669"
"PortBlockWhiteList_2"=""
"PortBlockEnabled_3"=dword:00000000
"PortBlockName_3"="禁止从万维网上下载"
"PortBlockDirection_3"=dword:00000001
"PortBlockRange_3"="80"
"PortBlockWhiteList_3"="thunder5.exe,TTraveler.exe,qq.exe,qqpet.exe,IEXPLORE.EXE,paipaiclient.exe,dexplore.exe,HDRoom.exe,msnmsgr.exe,tbstudio.exe,aupdrun.exe,outpost.exe,QQDownload.exe,MSNmsgr.exe,WINWORD.EXE"
"PortBlockEnabled_4"=dword:00000000
"PortBlockName_4"="禁止 FTP 入站通讯（阻止诸如 Nimda 等病毒传播）"
"PortBlockDirection_4"=dword:00000000
"PortBlockRange_4"="20-21"
"PortBlockWhiteList_4"="flashfxp.exe,cuteftppro.exe,thunder5.exe"
"PortBlockEnabled_5"=dword:00000001
"PortBlockName_5"="禁止 FTP 出站通讯（阻止病毒下载文件）"
"PortBlockDirection_5"=dword:00000001
"PortBlockRange_5"="20-21"
"PortBlockWhiteList_5"="flashfxp.exe,cuteftppro.exe,thunder5.exe,HEOnline.exe"
"PortBlockEnabled_6"=dword:00000001
"PortBlockName_6"="阻止Telnet 23 端口连接本地主机"
"PortBlockDirection_6"=dword:00000000
"PortBlockRange_6"="23"
"PortBlockWhiteList_6"=""
"PortBlockEnabled_7"=dword:00000001
"PortBlockName_7"="阻断SQL 默认 SA 的连接本地主机"
"PortBlockDirection_7"=dword:00000000
"PortBlockRange_7"="1433"
"PortBlockWhiteList_7"=""
"PortBlockEnabled_8"=dword:00000001
"PortBlockName_8"="阻止 3389 远程终端连接本地主机"
"PortBlockDirection_8"=dword:00000000
"PortBlockRange_8"="3389"
"PortBlockWhiteList_8"=""
"PortBlockEnabled_9"=dword:00000001
"PortBlockName_9"="阻止 4778 远程控制连接本地主机"
"PortBlockDirection_9"=dword:00000000
"PortBlockRange_9"="4778"
"PortBlockWhiteList_9"=""
"PortBlockEnabled_10"=dword:00000001
"PortBlockName_10"="阻止 4889-4899 远程控制连接本地主机"
"PortBlockDirection_10"=dword:00000000
"PortBlockRange_10"="4889-4899"
"PortBlockWhiteList_10"=""
"PortBlockEnabled_11"=dword:00000001
"PortBlockName_11"="阻止 456 端口被开启利用"
"PortBlockDirection_11"=dword:00000000
"PortBlockRange_11"="456"
"PortBlockWhiteList_11"=""
"PortBlockEnabled_12"=dword:00000001
"PortBlockName_12"="阻止 555 端口被开启利用"
"PortBlockDirection_12"=dword:00000000
"PortBlockRange_12"="555"
"PortBlockWhiteList_12"=""
"PortBlockEnabled_13"=dword:00000001
"PortBlockName_13"="阻止 556 端口被开启利用"
"PortBlockDirection_13"=dword:00000000
"PortBlockRange_13"="556"
"PortBlockWhiteList_13"=""
"PortBlockEnabled_14"=dword:00000001
"PortBlockName_14"="阻止 666 端口被开启利用"
"PortBlockDirection_14"=dword:00000000
"PortBlockRange_14"="666"
"PortBlockWhiteList_14"=""
"PortBlockEnabled_15"=dword:00000001
"PortBlockName_15"="阻止 1010 端口被开启利用"
"PortBlockDirection_15"=dword:00000000
"PortBlockRange_15"="1010"
"PortBlockWhiteList_15"=""
"PortBlockEnabled_16"=dword:00000001
"PortBlockName_16"="阻止启用1080代理端口"
"PortBlockDirection_16"=dword:00000000
"PortBlockRange_16"="1080"
"PortBlockWhiteList_16"=""
"PortBlockEnabled_17"=dword:00000001
"PortBlockName_17"="阻止启用8080代理端口"
"PortBlockDirection_17"=dword:00000000
"PortBlockRange_17"="8080"
"PortBlockWhiteList_17"=""
"PortBlockEnabled_18"=dword:00000001
"PortBlockName_18"="阻止 2000-2001 端口被开启利用"
"PortBlockDirection_18"=dword:00000000
"PortBlockRange_18"="2000-2001"
"PortBlockWhiteList_18"="qq.exe,qqpet.exe"
"PortBlockEnabled_19"=dword:00000001
"PortBlockName_19"="阻止 7306-7308 端口被开启利用"
"PortBlockDirection_19"=dword:00000000
"PortBlockRange_19"="7306-7308"
"PortBlockWhiteList_19"=""
"PortBlockEnabled_20"=dword:00000001
"PortBlockName_20"="阻止 7626 端口被开启利用"
"PortBlockDirection_20"=dword:00000000
"PortBlockRange_20"="7626"
"PortBlockWhiteList_20"=""
"PortBlockEnabled_21"=dword:00000001
"PortBlockName_21"="阻止 8000 端口被开启利用"
"PortBlockDirection_21"=dword:00000000
"PortBlockRange_21"="8000"
"PortBlockWhiteList_21"=""
"PortBlockEnabled_22"=dword:00000001
"PortBlockName_22"="阻止 11000端口被开启利用"
"PortBlockDirection_22"=dword:00000000
"PortBlockRange_22"="11000"
"PortBlockWhiteList_22"=""
"PortBlockEnabled_23"=dword:00000001
"PortBlockName_23"="阻止 11223端口被开启利用"
"PortBlockDirection_23"=dword:00000000
"PortBlockRange_23"="11223"
"PortBlockWhiteList_23"=""
"PortBlockEnabled_24"=dword:00000001
"PortBlockName_24"="阻止 12223端口被开启利用"
"PortBlockDirection_24"=dword:00000000
"PortBlockRange_24"="12223"
"PortBlockWhiteList_24"=""
"PortBlockEnabled_25"=dword:00000001
"PortBlockName_25"="阻止 12345-12346端口被开启利用"
"PortBlockDirection_25"=dword:00000000
"PortBlockRange_25"="12345-12346"
"PortBlockWhiteList_25"=""
"PortBlockEnabled_26"=dword:00000001
"PortBlockName_26"="阻止 12631端口被开启利用"
"PortBlockDirection_26"=dword:00000000
"PortBlockRange_26"="12631"
"PortBlockWhiteList_26"=""
"PortBlockEnabled_27"=dword:00000001
"PortBlockName_27"="阻止 20034端口被开启利用"
"PortBlockDirection_27"=dword:00000000
"PortBlockRange_27"="20034"
"PortBlockWhiteList_27"=""
"PortBlockEnabled_28"=dword:00000001
"PortBlockName_28"="阻止 21554端口被开启利用"
"PortBlockDirection_28"=dword:00000000
"PortBlockRange_28"="21554"
"PortBlockWhiteList_28"=""
"PortBlockEnabled_29"=dword:00000001
"PortBlockName_29"="阻止 31339端口被开启利用"
"PortBlockDirection_29"=dword:00000000
"PortBlockRange_29"="31339"
"PortBlockWhiteList_29"=""
"PortBlockEnabled_30"=dword:00000001
"PortBlockName_30"="阻止 27374端口被开启利用"
"PortBlockDirection_30"=dword:00000000
"PortBlockRange_30"="27374"
"PortBlockWhiteList_30"=""
"PortBlockEnabled_31"=dword:00000001
"PortBlockName_31"="阻止 30029端口被开启利用"
"PortBlockDirection_31"=dword:00000000
"PortBlockRange_31"="30029"
"PortBlockWhiteList_31"=""
"PortBlockEnabled_32"=dword:00000001
"PortBlockName_32"="阻止 31787端口被开启利用"
"PortBlockDirection_32"=dword:00000000
"PortBlockRange_32"="31787"
"PortBlockWhiteList_32"=""
"PortBlockEnabled_33"=dword:00000001
"PortBlockName_33"="阻止 33911端口被开启利用"
"PortBlockDirection_33"=dword:00000000
"PortBlockRange_33"="33911"
"PortBlockWhiteList_33"=""
"PortBlockEnabled_34"=dword:00000001
"PortBlockName_34"="阻止 34324端口被开启利用"
"PortBlockDirection_34"=dword:00000000
"PortBlockRange_34"="34324"
"PortBlockWhiteList_34"=""
"PortBlockEnabled_35"=dword:00000001
"PortBlockName_35"="阻止 40412端口被开启利用"
"PortBlockDirection_35"=dword:00000000
"PortBlockRange_35"="40412"
"PortBlockWhiteList_35"=""
"PortBlockEnabled_36"=dword:00000001
"PortBlockName_36"="阻止 40421-40423端口被开启利用"
"PortBlockDirection_36"=dword:00000000
"PortBlockRange_36"="40421-40423"
"PortBlockWhiteList_36"=""
"PortBlockEnabled_37"=dword:00000001
"PortBlockName_37"="阻止 47878端口被开启利用"
"PortBlockDirection_37"=dword:00000000
"PortBlockRange_37"="47878"
"PortBlockWhiteList_37"=""
"PortBlockEnabled_38"=dword:00000001
"PortBlockName_38"="阻止 53001端口被开启利用"
"PortBlockDirection_38"=dword:00000000
"PortBlockRange_38"="53001"
"PortBlockWhiteList_38"=""
"PortBlockEnabled_39"=dword:00000001
"PortBlockName_39"="阻止 61466端口被开启利用"
"PortBlockDirection_39"=dword:00000000
"PortBlockRange_39"="61466"
"PortBlockWhiteList_39"=""
"PortBlockEnabled_40"=dword:00000001
"PortBlockName_40"="阻止 65000端口被开启利用"
"PortBlockDirection_40"=dword:00000000
"PortBlockRange_40"="65000"
"PortBlockWhiteList_40"=""
"PortBlockEnabled_41"=dword:00000001
"PortBlockName_41"="阻止 5022端口被开启利用"
"PortBlockDirection_41"=dword:00000000
"PortBlockRange_41"="5022"
"PortBlockWhiteList_41"=""
"PortBlockEnabled_42"=dword:00000001
"PortBlockName_42"="1025-1030"
"PortBlockDirection_42"=dword:00000000
"PortBlockRange_42"="1025-1030"
"PortBlockWhiteList_42"=""
"PortBlockEnabled_43"=dword:00000001
"PortBlockName_43"="1025-1030"
"PortBlockDirection_43"=dword:00000001
"PortBlockRange_43"="1025-1030"
"PortBlockWhiteList_43"=""
"FileBlockRuleName_0"="禁止 Internet Explorer 从 Temp 文件夹启动任何项目"
"FileBlockProcess_0"="iexplore.exe"
"FileBlockWildcard_0"="**\\temp*\\**"
"FileBlockWhat_0"=dword:00080000
"FileBlockReport_0"=dword:00000001
"FileBlockRuleName_1"="禁止 Internet Explorer 从 Downloaded Programs 文件夹启动文件 (.exe)"
"FileBlockProcess_1"="iexplore.exe"
"FileBlockWildcard_1"="**\\Downloaded Program Files\\**\\*.exe"
"FileBlockWhat_1"=dword:00180000
"FileBlockReport_1"=dword:00000001
"FileBlockRuleName_2"="禁止 Outlook 从 Temp 文件夹启动任何项目"
"FileBlockProcess_2"="outlook.exe"
"FileBlockWildcard_2"="**\\temp*\\**"
"FileBlockWhat_2"=dword:00180000
"FileBlockReport_2"=dword:00000001
"FileBlockRuleName_3"="禁止 Outlook Express 从 Temp 文件夹启动任何项目"
"FileBlockProcess_3"="msimn.exe"
"FileBlockWildcard_3"="**\\temp*\\**"
"FileBlockWhat_3"=dword:00180000
"FileBlockReport_3"=dword:00000001
"FileBlockRuleName_4"="禁止 Packager 从 Temp 文件夹启动任何项目"
"FileBlockProcess_4"="packager.exe"
"FileBlockWildcard_4"="**\\temp*\\**"
"FileBlockWhat_4"=dword:00180000
"FileBlockReport_4"=dword:00000001
"FileBlockRuleName_5"="禁止 MSN 从 Temp 文件夹启动任何项目"
"FileBlockProcess_5"="msn6.exe"
"FileBlockWildcard_5"="**\\temp*\\**"
"FileBlockWhat_5"=dword:00080000
"FileBlockReport_5"=dword:00000001
"FileBlockRuleName_6"="禁止 WinZip32 从 Temp 文件夹启动任何项目"
"FileBlockProcess_6"="winzip32.exe"
"FileBlockWildcard_6"="**\\temp*\\**"
"FileBlockWhat_6"=dword:00080000
"FileBlockReport_6"=dword:00000001
"FileBlockRuleName_7"="禁止 WinRAR 从 Temp 文件夹启动任何项目"
"FileBlockProcess_7"="winrar.exe"
"FileBlockWildcard_7"="**\\temp*\\**"
"FileBlockWhat_7"=dword:00080000
"FileBlockReport_7"=dword:00000001
"FileBlockRuleName_8"="禁止从 Temp 文件夹执行脚本"
"FileBlockProcess_8"="?script.exe"
"FileBlockWildcard_8"="**\\temp*\\**"
"FileBlockWhat_8"=dword:000a0000
"FileBlockReport_8"=dword:00000001
"FileBlockRuleName_9"="禁止使用 tftp.exe，因为某些蠕虫使用它。"
"FileBlockProcess_9"="*"
"FileBlockWildcard_9"="**\\tftp.exe"
"FileBlockWhat_9"=dword:001f0000
"FileBlockReport_9"=dword:00000001
"FileBlockRuleName_10"="禁止访问可疑的启动项目 (.exe)"
"FileBlockProcess_10"="*"
"FileBlockWildcard_10"="**\\startup\\**\\*.exe"
"FileBlockWhat_10"=dword:000f0000
"FileBlockReport_10"=dword:00000001
"FileBlockRuleName_11"="禁止访问可疑的启动项目 (.scr)"
"FileBlockProcess_11"="*"
"FileBlockWildcard_11"="**\\startup\\**\\*.scr"
"FileBlockWhat_11"=dword:000f0000
"FileBlockReport_11"=dword:00000001
"FileBlockRuleName_12"="禁止访问可疑的启动项目 (.hta)"
"FileBlockProcess_12"="*"
"FileBlockWildcard_12"="**\\startup\\**\\*.hta"
"FileBlockWhat_12"=dword:000f0000
"FileBlockReport_12"=dword:00000001
"FileBlockRuleName_13"="禁止访问可疑的启动项目 (.pif)"
"FileBlockProcess_13"="*"
"FileBlockWildcard_13"="**\\startup\\**\\*.pif"
"FileBlockWhat_13"=dword:000f0000
"FileBlockReport_13"=dword:00000001
"FileBlockRuleName_14"="禁止访问可疑的启动项目 (.com)"
"FileBlockProcess_14"="*"
"FileBlockWildcard_14"="**\\startup\\**\\*.com"
"FileBlockWhat_14"=dword:000f0000
"FileBlockReport_14"=dword:00000001
"FileBlockRuleName_15"="禁止远程修改文件 (.exe)"
"FileBlockProcess_15"="System:Remote"
"FileBlockWildcard_15"="**\\*.exe"
"FileBlockWhat_15"=dword:00040000
"FileBlockReport_15"=dword:00000001
"FileBlockRuleName_16"="禁止远程修改文件 (.scr)"
"FileBlockProcess_16"="System:Remote"
"FileBlockWildcard_16"="**\\*.scr"
"FileBlockWhat_16"=dword:00040000
"FileBlockReport_16"=dword:00000001
"FileBlockRuleName_17"="禁止远程修改文件 (.ocx)"
"FileBlockProcess_17"="System:Remote"
"FileBlockWildcard_17"="**\\*.ocx"
"FileBlockWhat_17"=dword:00040000
"FileBlockReport_17"=dword:00000001
"FileBlockRuleName_18"="禁止远程修改文件 (.dll)"
"FileBlockProcess_18"="System:Remote"
"FileBlockWildcard_18"="**\\*.dll"
"FileBlockWhat_18"=dword:00040000
"FileBlockReport_18"=dword:00000001
"FileBlockRuleName_19"="禁止远程创建/修改/删除 Windows 文件夹和子文件夹中的任何内容"
"FileBlockProcess_19"="System:Remote"
"FileBlockWildcard_19"="%windir%\\**\\*"
"FileBlockWhat_19"=dword:00150000
"FileBlockReport_19"=dword:00000001
"FileBlockRuleName_20"="禁止远程创建/修改/删除 Windows 文件夹和子文件夹中的文件 (.ini)"
"FileBlockProcess_20"="System:Remote"
"FileBlockWildcard_20"="%windir%\\**\\*.ini"
"FileBlockWhat_20"=dword:00150000
"FileBlockReport_20"=dword:00000001
"FileBlockRuleName_21"="禁止远程创建/修改/删除系统根目录中的任何内容"
"FileBlockProcess_21"="System:Remote"
"FileBlockWildcard_21"="%systemdrive%\\*"
"FileBlockWhat_21"=dword:00150000
"FileBlockReport_21"=dword:00000001
"FileBlockRuleName_22"="禁止远程创建/修改/删除文件 (.exe)"
"FileBlockProcess_22"="System:Remote"
"FileBlockWildcard_22"="**\\*.exe"
FileBlockWhat_22"=dword:00150000
"FileBlockReport_22"=dword:00000001
"FileBlockRuleName_23"="禁止远程创建/修改/删除文件 (.scr)"
"FileBlockProcess_23"="System:Remote"
"FileBlockWildcard_23"="**\\*.scr"
"FileBlockWhat_23"=dword:00150000
"FileBlockReport_23"=dword:00000001
"FileBlockRuleName_24"="禁止远程创建/修改/删除文件 (.ocx)"
"FileBlockProcess_24"="System:Remote"
"FileBlockWildcard_24"="**\\*.ocx"
"FileBlockWhat_24"=dword:00150000
"FileBlockReport_24"=dword:00000001
"FileBlockRuleName_25"="禁止远程创建/修改/删除文件(.pif)"
"FileBlockProcess_25"="System:Remote"
"FileBlockWildcard_25"="**\\*.pif"
"FileBlockWhat_25"=dword:00150000
"FileBlockReport_25"=dword:00000001
"FileBlockRuleName_26"="禁止远程创建 autorun.inf 文件"
"FileBlockProcess_26"="System:Remote"
"FileBlockWildcard_26"="**\\autorun.inf"
"FileBlockWhat_26"=dword:00010000
"FileBlockReport_26"=dword:00000001
"FileBlockRuleName_27"="禁止在 Windows 文件夹中创建新文件 (.bat)"
"FileBlockProcess_27"="*"
"FileBlockWildcard_27"="%windir%\\*.bat"
"FileBlockWhat_27"=dword:00050000
"FileBlockReport_27"=dword:00000001
"FileBlockRuleName_28"="禁止在 Windows 文件夹中创建新文件 (.exe)"
"FileBlockProcess_28"="*"
"FileBlockWildcard_28"="%windir%\\*.exe"
"FileBlockWhat_28"=dword:00050000
"FileBlockReport_28"=dword:00000001
"FileBlockRuleName_29"="禁止在 Windows 文件夹中创建新文件 (.com)"
"FileBlockProcess_29"="*"
"FileBlockWildcard_29"="%windir%\\*.com"
"FileBlockWhat_29"=dword:00050000
"FileBlockReport_29"=dword:00000001
"FileBlockRuleName_30"="禁止腾讯QQ创建广告文件"
"FileBlockProcess_30"="*"
"FileBlockWildcard_30"="**\\AD\\*.*"
"FileBlockWhat_30"=dword:00090000
"FileBlockReport_30"=dword:00000001
"FileBlockRuleName_31"="禁止从 Temp 文件夹启动(.exe)"
"FileBlockProcess_31"="*"
"FileBlockWildcard_31"="**\\temp*\\*.exe"
"FileBlockWhat_31"=dword:00080000
"FileBlockReport_31"=dword:000