{"id":10101,"date":"2026-05-25T13:14:03","date_gmt":"2026-05-25T11:14:03","guid":{"rendered":"https:\/\/cyberawareness.sk\/?page_id=10101"},"modified":"2026-06-25T12:26:46","modified_gmt":"2026-06-25T10:26:46","slug":"ochrana-pred-malverom","status":"publish","type":"page","link":"https:\/\/cyberawareness.sk\/en\/ochrana-pred-malverom\/","title":{"rendered":"Malware Protection"},"content":{"rendered":"
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Malware Protection<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Malware Protection<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Does a file\/page contain malware?<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

You can upload files to\u00a0VirusTotal<\/a><\/span>\u00a0or have a specific URL checked. You will then receive the opinion of various antivirus programs as to whether the application\/URL is malicious or not.<\/p>

If you have a link to a page and you are not sure whether it contains malware and you want to see its content, you can use the\u00a0screenshotmachine<\/a><\/span>, a service which will take a screenshot of the page without risking infecting your device by visiting it.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Antivirus<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Recently,\u00a0Windows Defender<\/strong>\u00a0has been shown to be more effective than most commercially available antivirus solutions. Moreover, it is a product that is already installed on your Windows computer and you do not need to buy it, you just need to configure it correctly. However, this statement applies\u00a0only to the Windows 11 operating system<\/strong>\u00a0and not to older versions. Therefore, if you have the Windows 10 operating system, you can configure your Defender and\u00a0uninstall other antivirus solutions<\/strong>, because multiple antivirus programs on one machine worsen the impact on security.<\/p>

As part of the configuration, we will enable enhanced blocking of untrusted programs, Office and Acrobat protection, and certificate protection.<\/p>

You can configure this via Group Policy as follows:<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Next, go to the Windows Defender Exploit Guard, Attack Surface Reduction directory, and finally select the Configure Attack Surface Reduction rules setting. A settings dialog box will appear, copy the following values \u200b\u200bthere and add 1 to each of them:<\/p>

For malware blocking:<\/p>

  • 01443614-cd74-433a-b99e-2ecdc07bfc25<\/li>
  • c1db55ab-c21a-4637-bb3f-a12568109d35<\/li><\/ul>

    For Office and Acrobat protection:<\/p>

    • D4F940AB-401B-4EFC-AADC-AD5F3C50688A<\/li>
    • 3B576869-A4EC-4529-8536-B80A7769E899<\/li>
    • 75668C1F-73B5-4CF0-BB93-3ECF5CB7CC84<\/li>
    • 92E97FA1-2EDF-4476-BDD6-9DD0B4DDDC7B<\/li>
    • 26190899-1602-49e8-8b27-eb1d0a1ce869<\/li>
    • 7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c<\/li><\/ul>

      To protect certificates:<\/p>

      • 9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
        \n\t\t\t\t
        \n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
        \n\t\t\t\t
        \n\t\t\t\t\t\t\t\t\t

        To complete the certificate protection configuration, you can also block external communication of the program\u00a0certutil.exe program<\/strong>. Run\u00a0Windows Defender Firewall with Advanced Security<\/strong>, add a new rule to\u00a0OutboundRules\u00a0<\/strong> , when configuring the new rule, set it to apply only to the\u00a0certutil.exe program<\/strong>\u00a0with the path\u00a0C:\\Windows\\System32\\certutil.exe<\/strong>. Do the same for\u00a0certutil.exe program<\/strong>\u00a0with the path\u00a0C:\\Windows\\SysWow64\\certutil.exe.<\/strong>.

        The new Windows 11 also includes a new Smart App Control<\/strong>, feature that checks the launch of applications to see if they are from untrusted sources, etc. This feature is only available for pure Windows 11, which means the devices that already had Windows 11 when they were purchased.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"

        Ochrana pred malv\u00e9rom Ochrana pred malv\u00e9rom Obsahuje s\u00fabor\/str\u00e1nka malv\u00e9r? Na str\u00e1nku\u00a0VirusTotal\u00a0viete nahra\u0165 s\u00fabory, alebo necha\u0165 prekontrolova\u0165 konkr\u00e9tnu URL adresu. N\u00e1sledne dostanete stanovisko r\u00f4znych antiv\u00edrov\u00fdch programov, \u010di je aplik\u00e1cia\/URL adresa \u0161kodliv\u00e1 alebo nie. Ak m\u00e1te odkaz na str\u00e1nku a nie ste si ist\u00ed, \u010di obsahuje malv\u00e9r a chcete vidie\u0165 jej obsah, m\u00f4\u017eete pou\u017ei\u0165 slu\u017ebu\u00a0screenshotmachine, ktor\u00e1 V\u00e1m […]<\/p>\n","protected":false},"author":12,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"ocean_post_layout":"","ocean_both_sidebars_style":"","ocean_both_sidebars_content_width":0,"ocean_both_sidebars_sidebars_width":0,"ocean_sidebar":"","ocean_second_sidebar":"","ocean_disable_margins":"enable","ocean_add_body_class":"","ocean_shortcode_before_top_bar":"","ocean_shortcode_after_top_bar":"","ocean_shortcode_before_header":"","ocean_shortcode_after_header":"","ocean_has_shortcode":"","ocean_shortcode_after_title":"","ocean_shortcode_before_footer_widgets":"","ocean_shortcode_after_footer_widgets":"","ocean_shortcode_before_footer_bottom":"","ocean_shortcode_after_footer_bottom":"","ocean_display_top_bar":"default","ocean_display_header":"default","ocean_header_style":"","ocean_center_header_left_menu":"","ocean_custom_header_template":"","ocean_custom_logo":0,"ocean_custom_retina_logo":0,"ocean_custom_logo_max_width":0,"ocean_custom_logo_tablet_max_width":0,"ocean_custom_logo_mobile_max_width":0,"ocean_custom_logo_max_height":0,"ocean_custom_logo_tablet_max_height":0,"ocean_custom_logo_mobile_max_height":0,"ocean_header_custom_menu":"","ocean_menu_typo_font_family":"","ocean_menu_typo_font_subset":"","ocean_menu_typo_font_size":0,"ocean_menu_typo_font_size_tablet":0,"ocean_menu_typo_font_size_mobile":0,"ocean_menu_typo_font_size_unit":"px","ocean_menu_typo_font_weight":"","ocean_menu_typo_font_weight_tablet":"","ocean_menu_typo_font_weight_mobile":"","ocean_menu_typo_transform":"","ocean_menu_typo_transform_tablet":"","ocean_menu_typo_transform_mobile":"","ocean_menu_typo_line_height":0,"ocean_menu_typo_line_height_tablet":0,"ocean_menu_typo_line_height_mobile":0,"ocean_menu_typo_line_height_unit":"","ocean_menu_typo_spacing":0,"ocean_menu_typo_spacing_tablet":0,"ocean_menu_typo_spacing_mobile":0,"ocean_menu_typo_spacing_unit":"","ocean_menu_link_color":"","ocean_menu_link_color_hover":"","ocean_menu_link_color_active":"","ocean_menu_link_background":"","ocean_menu_link_hover_background":"","ocean_menu_link_active_background":"","ocean_menu_social_links_bg":"","ocean_menu_social_hover_links_bg":"","ocean_menu_social_links_color":"","ocean_menu_social_hover_links_color":"","ocean_disable_title":"default","ocean_disable_heading":"default","ocean_post_title":"","ocean_post_subheading":"","ocean_post_title_style":"","ocean_post_title_background_color":"","ocean_post_title_background":0,"ocean_post_title_bg_image_position":"","ocean_post_title_bg_image_attachment":"","ocean_post_title_bg_image_repeat":"","ocean_post_title_bg_image_size":"","ocean_post_title_height":0,"ocean_post_title_bg_overlay":0.5,"ocean_post_title_bg_overlay_color":"","ocean_disable_breadcrumbs":"default","ocean_breadcrumbs_color":"","ocean_breadcrumbs_separator_color":"","ocean_breadcrumbs_links_color":"","ocean_breadcrumbs_links_hover_color":"","ocean_display_footer_widgets":"default","ocean_display_footer_bottom":"default","ocean_custom_footer_template":"","footnotes":""},"class_list":["post-10101","page","type-page","status-publish","hentry","entry"],"_links":{"self":[{"href":"https:\/\/cyberawareness.sk\/en\/wp-json\/wp\/v2\/pages\/10101","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cyberawareness.sk\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/cyberawareness.sk\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/cyberawareness.sk\/en\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/cyberawareness.sk\/en\/wp-json\/wp\/v2\/comments?post=10101"}],"version-history":[{"count":10,"href":"https:\/\/cyberawareness.sk\/en\/wp-json\/wp\/v2\/pages\/10101\/revisions"}],"predecessor-version":[{"id":10233,"href":"https:\/\/cyberawareness.sk\/en\/wp-json\/wp\/v2\/pages\/10101\/revisions\/10233"}],"wp:attachment":[{"href":"https:\/\/cyberawareness.sk\/en\/wp-json\/wp\/v2\/media?parent=10101"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}