今天又爆出麻花家软件会读取浏览器浏览历史并上传,故有大佬写了火绒规则来禁止。
- {
- "ver":"5.0",
- "tag":"hipsuser",
- "data":[
- {
- "id":11,
- "power":0,
- "name":"QQ 禁止访问浏览器历史记录(Chrome 系列+Firefox)",
- "procname":"QQ.exe",
- "treatment":1,
- "policies":[
- {
- "montype":1,
- "action_type":15,
- "res_path":"*\\AppData\\Local\\*\\User Data\\Default\\History"
- },
- {
- "montype":1,
- "action_type":15,
- "res_path":"*\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*"
- }
- ]
- },
- {
- "id":14,
- "power":0,
- "name":"QQ 禁止遍历 Local 文件夹",
- "procname":"QQ.exe",
- "treatment":1,
- "policies":[
- {
- "montype":1,
- "action_type":15,
- "res_path":"*\\AppData\\Local\\*"
- }
- ]
- },
- {
- "id":13,
- "power":0,
- "name":"Tim 禁止访问浏览器历史记录(Chrome 系列+Firefox)",
- "procname":"Tim.exe",
- "treatment":1,
- "policies":[
- {
- "montype":1,
- "action_type":15,
- "res_path":"*\\AppData\\Local\\*\\User Data\\Default\\History"
- },
- {
- "montype":1,
- "action_type":15,
- "res_path":"*\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*"
- }
- ]
- },
- {
- "id":15,
- "power":0,
- "name":"Tim 禁止遍历 Local 文件夹",
- "procname":"Tim.exe",
- "treatment":1,
- "policies":[
- {
- "montype":1,
- "action_type":15,
- "res_path":"*\\AppData\\Local\\*"
- }
- ]
- }
- ]
- }
代码保存为 JSON 即可导入
食用方法:火绒-防护中心-高级防护-自定义防护-导入 选择规则即可
本文转自 Hostloc:https://www.hostloc.com/thread-797568-1-1.html