今天又爆出麻花家软件会读取浏览器浏览历史并上传,故有大佬写了火绒规则来禁止。
{
"ver":"5.0",
"tag":"hipsuser",
"data":\[
{
"id":11,
"power":0,
"name":"QQ禁止访问浏览器历史记录(Chrome系列+Firefox)",
"procname":"QQ.exe",
"treatment":1,
"policies":\[
{
"montype":1,
"action\_type":15,
"res\_path":"\*\\\\AppData\\\\Local\\\\\*\\\\User Data\\\\Default\\\\History"
},
{
"montype":1,
"action\_type":15,
"res\_path":"\*\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\\*"
}
\]
},
{
"id":14,
"power":0,
"name":"QQ禁止遍历Local文件夹",
"procname":"QQ.exe",
"treatment":1,
"policies":\[
{
"montype":1,
"action\_type":15,
"res\_path":"\*\\\\AppData\\\\Local\\\\\*"
}
\]
},
{
"id":13,
"power":0,
"name":"Tim禁止访问浏览器历史记录(Chrome系列+Firefox)",
"procname":"Tim.exe",
"treatment":1,
"policies":\[
{
"montype":1,
"action\_type":15,
"res\_path":"\*\\\\AppData\\\\Local\\\\\*\\\\User Data\\\\Default\\\\History"
},
{
"montype":1,
"action\_type":15,
"res\_path":"\*\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\\*"
}
\]
},
{
"id":15,
"power":0,
"name":"Tim禁止遍历Local文件夹",
"procname":"Tim.exe",
"treatment":1,
"policies":\[
{
"montype":1,
"action\_type":15,
"res\_path":"\*\\\\AppData\\\\Local\\\\\*"
}
\]
}
\]
}
代码保存为JSON即可导入 食用方法:火绒-防护中心-高级防护-自定义防护-导入 选择规则即可 本文转自Hostloc:https://www.hostloc.com/thread-797568-1-1.html