Windows 11 Security Feature Smart App Control Can Block Files Used to Spread Malware

Microsoft has designed software that gives Windows 11 users more security from malware attacks on their devices.

Windows 11 will have a new feature called Smart App Control. If a Windows user tries to run something on a device, the Smart App Control will first examine the source of the function before allowing it to launch on the system.

If the function trying to launch is safe after examining it, the Smart App Control will allow it to run on the device. However, if the app detects it to be malicious, it will block it from running on the system.

It will then display, "Smart App Control blocked an app that may be unsafe." This file was blocked because files of this type from the internet can be dangerous. "

Smart App Control in Windows 11

Windows 11's Smart App Control is a feature created by Microsoft to add another layer of security to protect users against being targeted for cyberattacks using malware or emerging threats.

Microsoft is doing this by blocking untrusted or malicious apps before they even try to run on a user's system.

Smart App Control also helps to block potentially unwanted apps, which are apps that may cause a device to run slowly, display unexpected ads, offer extra software users do not want, or do other things users do not expect.

According to Microsoft, when a user attempts to launch an application on Windows, the intelligent cloud-based security service known as Smart App Control will investigate the possibility of coming to a reliable conclusion regarding the app's level of risk.

If the service determines that the application is secure, Smart App Control will permit it to function normally. The app will be blocked by Smart App Control if there is a suspicion that it contains malicious code or is otherwise undesirable.

However, if the security service is unable to make an accurate prediction regarding the app, then Smart App Control will check to see if the app possesses a valid signature in the event that this is the case.

Smart App Control will allow the application to run if it has a valid digital signature. If the application has not been signed, or if the signature that has been provided is invalid, Smart App Control will consider it to be an untrusted application and will block it to protect the users.

Windows 11: Blocked Files

This Windows 11 feature was confirmed on Twitter by Microsoft's VP for Enterprise and OS Security, David Weston.

Weston tweeted, "Windows 11 with smart app control blocks iso and lnk files that have the mark of the web just like Macros."

Weston first announced this feature in April, stating that it will be a significant upgrade to security, allowing only trustworthy and secure applications to open on Windows 11.

According to Bleeping Computer, security researcher Will Dormann has confirmed that the SAC will immediately stop files like VHDX, IMG, and VHD from opening.

In addition, the feature will also block these source files from running in the system: .wsf, .appref-ms, .cmd,.cpl, .jse, .msp, .vbe, .bat, .chm, .js, .msc, .reg, and.vbs.

This effort comes after Microsoft began blocking macros in Office files for download from the internet, which led to hackers switching to different file types to deliver malicious payloads like Windows Shortcut LNK files, RAR, and ISO.

To combat these ever-changing tactics, the company came up with the Smart App Control to protect its users.