CryptoPrevent Protection Settings->Software Restriction Policies->Minimum Plan Tab

The Minimum plan tab:

• The following protect each of these locations from executable files:
  • %appdata%
    • All Supported OS
      •  %appdata%\*.[executable extension]
    • Windows Vista + OS
      • %userprofile%\AppData\*.[executable extension]
      • %userprofile%\Appdata\Roaming\*.[executable extension]
    • Windows XP OS
      • %allusersprofile%\Application Data\*.[executable extension]
      • %userprofile%\Application Data\*.[executable extension]
  • %appdata%\*
    • All Supported OS
      •  %appdata%\*\*.[executable extension]
    • Windows Vista + OS
      • %userprofile%\Appdata\Roaming\*\*.[executable extension]
    • Windows XP OS
      • %allusersprofile%\Application Data\*\*.[executable extension]
      • %userprofile%\Application Data\*\*.[executable extension]
  • %localappdata%
    • Windows Vista + OS
      • %userprofile%\AppData\Local\*.[executable extension]
      • %userprofile%\AppData\LocalLow\*.[executable extension]
      • %userprofile%\AppData\LocalLow\*\*.[executable extension]
    • Windows XP OS
      • %allusersprofile%\Local Settings\Application Data\*.[executable extension]
      • %allusersprofile%\Local Settings\Application Data\*\*.[executable extension]
      • %userprofile%\Local Settings\Application Data\*.[executable extension]
      • %userprofile%\Local Settings\Application Data\*\*.[executable extension]
  • Recycle Bin
    • Windows Vista + OS
      • *:\$Recycle.Bin\*.[executable extension]
    • Windows XP OS
      • *:\RECYCLER\*.[executable extension]
• Double File Extensions
  • Protects all locations from executable files with a path of *.[dbl extension list item].[executable extension]
  • Note this does not apply for the executable extension [.lnk]
• Right-to-Left Override
  • exploits related to the direction of text interpretation.
  • Please follow the provided link for more information regarding the right-to-left override character:
    • https://www.google.com/search?q=right+to+left+override
    • https://blogs.technet.microsoft.com/office_global_experience/2009/11/18/bidirectional-text-embedding-and-override