Zipcentral - running files from inside zips

[crispybits]

Hi all

 

Just a quicky hopefully. We've had a number of kids now that have bypassed our block on them running their own .exe files by zipping them up, opening them up with the zip software (in our case zipcentral) and running the .exe or .bat from within that window. This means Impero doesn't block it and they can run pretty much whatever they want on our network.

 

Is there a free zip program that's any good that anyone knows of that doesn't allow this feature, or any way to turn off this feature in zipcentral? We need them to still be able to zip and unzip as it's part of some of the ICT courses.

 

Cheers in advance for any assistance.

Edited May 24, 2016 by crispybits
proof read...

[synaesthesia]

It'll extract those files to a temporary location usually in %appdata% - find that location, block EXE's from running

[Pashers]

Not used Impero, but I presume you can disable exes running from locations. If so then zipcentral may work by storing the exe in these locations:

%localAppData%\*.exe

%localAppData%\*\*.exe

%localAppData%\Temp\*.zip\*.exe

%localAppData%\Temp\\*.exe

 

If so you can add the above to a group policy or in Impero to disable exes running from these locations.

FatDex - Disable .exe’s from running inside any user %appdata% directory – GPO

Edited May 24, 2016 by Pashers