This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(105.60000000000001, 94%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESS%3C/text%3E%3C/svg%3E)
On Exploit Protection in the Program Settings I have all these programs? here and some, such as: PresentationHost.exe has like 6 overrides?
It it normal to have all these or are they a virus? Or were they altered by the virus that was on?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(89.60000000000001, 81%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERA%3C/text%3E%3C/svg%3E)
Yes, they are normal and these are pre-defined settings and having these features would improve your protection against 0-days and other exploits. You always could modify these settings.
In case you have any feedback or recommendation, you may report them using the Feedback Hub app.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(0, 16%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKJ%3C/text%3E%3C/svg%3E)
Hello,
You mentioned "You always could modify these settings" but I wonder, can you do so without potentially unwanted or even catastrophic failures? For instance, if we disallow "Runtimebroker.exe" from having the ability to inject DLLs into all processes (including Windows Hooks).. couldn't this possibly make the system not boot properly, or cause applications to behave badly?
I am not trying to shoot your response down, I'm just trying to get a better understanding of your familiarity with actually doing this. I would much rather restrict these applications (including built-in) from doing things, rather than allowing potentially un-safe (security-wise) operations. That said, a broken OS is very secure, but very unusable at the same time.
TL;DR: If there's any documentation somewhere that might give us an idea of what the implications are for changing the security exceptions with these built-in processes, that would be really great. Flipping these switches manually and trying to log what happens is a non-ideal prospect, as I'm sure you can imagine.
Thank you, in advance, for your answer(s) kind sir.
Faithfully and unwaveringly yours,
Kim Jong Un
Supreme Leader - Democratic People's Republic of Korea