Application Control: how allow execution of *.tmp files

[GLFI69]

Hello, i'm trying Application Control. In test mode, these files are blocked: Oggetto\Percorso file: C:\Users\User\AppData\Local\Temp\GLB3A25.tmp Oggetto\Sorgente: C:\Users\User\AppData\Local\Temp\GLB3A25.tmp Oggetto\Hash: de1cb64f3f0e64dc7e13107e6b5c5efc037287da041846ac8a1856dd0bda936a Categoria KL\Nome: Uncategorized Categoria KL\Sorgente: Database locali Utente: DOMAIN\User (Iniziatore) Regola\Categoria: Nega predefinito Regola\Tipo di regola: Verifica I'm trying a rule by File Name MetaData where File Name is: *.tmp but it seems that it is not working. I' can not use the file path because it is relative to user that is logged in. does anyone have any suggestions? Thanks.

[Nikolay Arinchev]

Hi, Have you tried to add a category based on file properties and specify a filename?

[GLFI69]

Hi, i'm try to use *.tmp because the file name is always different.

[Nikolay Arinchev]

Does these files have anything in common except for extention?

[GLFI69]

No, sometime they start from Windows\temp\ sometime from: C:\Users\UserFolder\AppData\Local\Temp\GLB5110.tmp some files name: GLB9B0D.tmp, GLBC005.tmp, GLBCDAC.tmp I don't know what they are!