Endpoint Protection

Hi,

How to blocck ipmsg app instaed of adding the file finger print value in App rule?

Check this thread

http://www.symantec.com/connect/forums/how-block-ipmsgexe-wwwipmsgorgindexhtmlen

http://www.symantec.com/connect/forums/block-ip-messenger

You can add the .exe name.

better try adding the exe name and filefinger print

that would give a better resolution

Hi here is the procedure on how to block the ipmsg.exe

https://www-secure.symantec.com/connect/forums/how-block-applications-sep-using-md5

and also this is the md5 file of ipmsg.exe - 749453AF77844F9FDA248BE43ED71859

Hi Robin,

Whether the MD5 file will differ for other versions?

Hi,

Yes all versions md5 are different

Check Ipmsg version Version:         3.3.0.0 details

Product:        IPMsg

Company:     H.Shirouzu

Description:  IPMsg

Version:        2.06

MD5:            A284E6EA598654FACE967AD87C18E64D

Size:            159232

Product:         IPMsg

Company:      H.Shirouzu

Description:    IPMsg

Version:         3.3.0.0

MD5:             D400F67AE72BAD406F56AB03C4AF8BBE

SHA1:           9589CEF6D3A917E2EBA980CF92717790E2EC7627

SHA256:       3026A26A0B3D42581CF42E0162F2D4D5C00E5F021E5D983AD4D13A9B532A9E9B

 

 

 

That y iam telling that many are having different versions na?

So you can try to add the .exe name.

Yes md5 file are differ but if you add exe then how to sure that this come help you because. if file name will be change then it easily to use.

I have block some game and apps there but i have found some engineer which have use the same applicatio to change the different naame.

So try to find the proper registry path and block that registry access.

Hope you understand

Note: if the user changes the name of the exe then the rule will not block.