Windows 10: In the program settings for exploit protection, should there be any system overrides...

My account was hacked by *** Email address is removed for privacy *** so I'm wondering if this is somthing they did?Any insights would be very helpful, thank you.

:)

 

Exploit Protection's "Program Settings"

Let us say that I went into WINDOWS DEFENDER SECURITY CENTER > APP & BROWSER CONTROL > EXPLOIT PROTECTION SETTINGS > PROGRAM SETTINGS.

Then, let us say that I edited via "system override" the settings for one of the programs.

My question: How would I later restore the default settings (i. e., the ones that were set before editing) for one or more edited programs?

Exploit Protection does not seem to provide any option for restoring back to a program's default state before any change was made.

Thanks for any help!

 

Many items in Program settings in Exploit protection

Hello,

In Security>App & browser control>Exploit protection>Program settings there is a long list of exe files in there that I did not put there myself.
A few examples are:
excelcnv.exe
ExTExport.exe
graph.exe
ie4uinit.exe

mshta.exe
msoasb.exe

ngen.exe

Plus many more.
I can elaborate on the individual overrides on each one if you like. But should there be so many exe files listed in the system overrides like this? Is this normal?
I have run virus scans using Trend Micro Housecall, Malwarebytes Premium and Microsoft Windows Defender, all of which found nothing.

I await a reply.
Thanks

 

Many items in Program settings in Exploit protection

Hello Reticzeta,

Thanks for using Microsoft products and posting in the community.

It is normal for there to be a large list of executable files in the Program settings section of Exploit protection. The list contains all the programs that are recognized by Windows, and some of them may have been added by third-party applications installed on your computer.

Some of the exe files you mentioned, such as excelcnv.exe, graph.exe, and ie4uinit.exe, are related to Microsoft Office applications and are included in the list by default. Other exe files, like ngen.exe, are related to Windows itself and may have been added to the list by Windows updates or other system changes.

If you are concerned about any of the individual overrides for these files, you can review them to see if they appear to be legitimate. If you are unsure, you can research the file online to see if it is associated with any known malware or security vulnerabilities.

Overall, having a long list of executable files in the Program settings section of Exploit protection is not necessarily a cause for concern, as it is normal for there to be a large number of programs on a typical computer. However, it is always a good idea to stay vigilant and keep your security software up to date to protect against any potential threats.

Please feel free to let me know if you have any further updates, thanks.

Best Regards,

Lenka-MSFT| Microsoft Community Support Specialist