How access protection rules are defined

These preconfigured rules protect your computer from common behaviors of malware threats. You can enable, disable, and change the configuration, but you cannot delete these rules.

Two rule examples are:

• Prevent disabling or changing of critical processes, remote creation or modification of executable files, hijacking of executable files, Windows Process spoofing, and mass mailing worms from sending mail.
• Protect phone book files from password and email stealers.

These protection levels apply to anti-virus rules:

• Standard Protection
• Maximum Protection
• Outbreak Control

These preconfigured rules prevent modification of commonly used files and settings. You can enable, disable, and change the configuration, but you cannot delete these rules.

Three rule examples are:

• Prevent modification of McAfee files and settings.
• Protect Mozilla and Firefox files and settings, Internet Explorer settings, and network settings.
• Prevent installation of Browser Helper Objects and automatically running programs from the Temp folder.

These protection levels apply to common rules.

• Standard Protection
• Maximum Protection

These preconfigured rules prevent termination of VMWare processes and modification of VMWare files. You can enable, disable, and change the configuration, but you cannot delete these rules.

If you installed the AntiSpyware Enterprise Module, you have additional rules to protect you from spyware-related threats.

Anti-virus and common rules that protect some critical settings and files from being modified, but generally allow you to install and execute legitimate software.

Anti-virus and common rules that protect most critical settings and files from being modified. This level provides more protection than Standard, but might prevent you from installing legitimate software. If you cannot install software, we recommend that you disable the Access Protection feature first, then enable it again after installation.

Anti-virus rules that block destructive code from accessing the computer until a DAT file is released. These rules are preconfigured to block access to shares during an outbreak.