Default Protections for Popular Software

Apply recommended EMET protections to additional applications: Windows Media Player, Skype, Microsoft Lync Communicator, Windows Live Mail, Microsoft Photo Gallery, Microsoft Live Writer, Microsoft SkyDrive, Google Chrome, Google Talk, Mozilla Firefox, Mozilla Thunderbird, Adobe Photoshop, Winamp, Opera, WinRAR, Winzip, VideoLAN VLC, RealPlayer, mIRC, 7zip, Safari, QuickTime Player, iTunes, Pidgin, and Foxit Reader

Supported on: Windows 10

Enable policy:
Registry PathValue NameValue TypeValue
Software\Policies\Microsoft\EMET\Defaults*\Windows Media Player\wmplayer.exeREG_SZ-EAF -MandatoryASLR
Software\Policies\Microsoft\EMET\Defaults*\Skype\Phone\Skype.exeREG_SZ-EAF
Software\Policies\Microsoft\EMET\Defaults*\Microsoft Lync\communicator.exeREG_SZ
Software\Policies\Microsoft\EMET\Defaults*\Windows Live\Mail\wlmail.exeREG_SZ
Software\Policies\Microsoft\EMET\Defaults*\Windows Live\Photo Gallery\WLXPhotoGallery.exeREG_SZ
Software\Policies\Microsoft\EMET\Defaults*\Windows Live\Writer\WindowsLiveWriter.exeREG_SZ
Software\Policies\Microsoft\EMET\Defaults*\SkyDrive\SkyDrive.exeREG_SZ
Software\Policies\Microsoft\EMET\Defaults*\Google\Chrome\Application\chrome.exeREG_SZ+EAF+ eaf_modules:chrome_child.dll
Software\Policies\Microsoft\EMET\Defaults*\Google\Google Talk\googletalk.exeREG_SZ-DEP
Software\Policies\Microsoft\EMET\Defaults*\Mozilla Firefox\firefox.exeREG_SZ+EAF+ eaf_modules:mozjs.dll;xul.dll
Software\Policies\Microsoft\EMET\Defaults*\Mozilla Firefox\plugin-container.exeREG_SZ
Software\Policies\Microsoft\EMET\Defaults*\Mozilla Thunderbird\thunderbird.exeREG_SZ
Software\Policies\Microsoft\EMET\Defaults*\Mozilla Thunderbird\plugin-container.exeREG_SZ
Software\Policies\Microsoft\EMET\Defaults*\Adobe\Adobe Photoshop CS*\Photoshop.exeREG_SZ
Software\Policies\Microsoft\EMET\Defaults*\Winamp\winamp.exeREG_SZ
Software\Policies\Microsoft\EMET\Defaults*\Opera\opera.exeREG_SZ
Software\Policies\Microsoft\EMET\Defaults*\Opera\*\opera.exeREG_SZ
Software\Policies\Microsoft\EMET\Defaults*\WinRAR\winrar.exeREG_SZ
Software\Policies\Microsoft\EMET\Defaults*\WinRAR\rar.exeREG_SZ
Software\Policies\Microsoft\EMET\Defaults*\WinRAR\unrar.exeREG_SZ
Software\Policies\Microsoft\EMET\Defaults*\WinZip\winzip32.exeREG_SZ
Software\Policies\Microsoft\EMET\Defaults*\WinZip\winzip64.exeREG_SZ
Software\Policies\Microsoft\EMET\Defaults*\VideoLAN\VLC\vlc.exeREG_SZ
Software\Policies\Microsoft\EMET\Defaults*\Real\RealPlayer\realconverter.exeREG_SZ
Software\Policies\Microsoft\EMET\Defaults*\Real\RealPlayer\realplay.exeREG_SZ
Software\Policies\Microsoft\EMET\Defaults*\mIRC\mirc.exeREG_SZ
Software\Policies\Microsoft\EMET\Defaults*\7-Zip\7z.exeREG_SZ-EAF
Software\Policies\Microsoft\EMET\Defaults*\7-Zip\7zG.exeREG_SZ-EAF
Software\Policies\Microsoft\EMET\Defaults*\7-Zip\7zFM.exeREG_SZ-EAF
Software\Policies\Microsoft\EMET\Defaults*\Safari\Safari.exeREG_SZ
Software\Policies\Microsoft\EMET\Defaults*\QuickTime\QuickTimePlayer.exeREG_SZ
Software\Policies\Microsoft\EMET\Defaults*\iTunes\iTunes.exeREG_SZ
Software\Policies\Microsoft\EMET\Defaults*\Pidgin\pidgin.exeREG_SZ
Software\Policies\Microsoft\EMET\Defaults*\Foxit Reader\Foxit Reader.exeREG_SZ
Disable Policy:
Registry HiveRegistry PathValue NameValue TypeValue
HKEY_LOCAL_MACHINE or HKEY_CURRENT_USERSoftware\Policies\Microsoft\EMET\Defaults*\Windows Media Player\wmplayer.exeREG_DWORD
HKEY_LOCAL_MACHINE or HKEY_CURRENT_USERSoftware\Policies\Microsoft\EMET\Defaults*\Skype\Phone\Skype.exeREG_DWORD
HKEY_LOCAL_MACHINE or HKEY_CURRENT_USERSoftware\Policies\Microsoft\EMET\Defaults*\Microsoft Lync\communicator.exeREG_DWORD
HKEY_LOCAL_MACHINE or HKEY_CURRENT_USERSoftware\Policies\Microsoft\EMET\Defaults*\Windows Live\Mail\wlmail.exeREG_DWORD
HKEY_LOCAL_MACHINE or HKEY_CURRENT_USERSoftware\Policies\Microsoft\EMET\Defaults*\Windows Live\Photo Gallery\WLXPhotoGallery.exeREG_DWORD
HKEY_LOCAL_MACHINE or HKEY_CURRENT_USERSoftware\Policies\Microsoft\EMET\Defaults*\Windows Live\Writer\WindowsLiveWriter.exeREG_DWORD
HKEY_LOCAL_MACHINE or HKEY_CURRENT_USERSoftware\Policies\Microsoft\EMET\Defaults*\SkyDrive\SkyDrive.exeREG_DWORD
HKEY_LOCAL_MACHINE or HKEY_CURRENT_USERSoftware\Policies\Microsoft\EMET\Defaults*\Google\Chrome\Application\chrome.exeREG_DWORD
HKEY_LOCAL_MACHINE or HKEY_CURRENT_USERSoftware\Policies\Microsoft\EMET\Defaults*\Google\Google Talk\googletalk.exeREG_DWORD
HKEY_LOCAL_MACHINE or HKEY_CURRENT_USERSoftware\Policies\Microsoft\EMET\Defaults*\Mozilla Firefox\firefox.exeREG_DWORD
HKEY_LOCAL_MACHINE or HKEY_CURRENT_USERSoftware\Policies\Microsoft\EMET\Defaults*\Mozilla Firefox\plugin-container.exeREG_DWORD
HKEY_LOCAL_MACHINE or HKEY_CURRENT_USERSoftware\Policies\Microsoft\EMET\Defaults*\Mozilla Thunderbird\thunderbird.exeREG_DWORD
HKEY_LOCAL_MACHINE or HKEY_CURRENT_USERSoftware\Policies\Microsoft\EMET\Defaults*\Mozilla Thunderbird\plugin-container.exeREG_DWORD
HKEY_LOCAL_MACHINE or HKEY_CURRENT_USERSoftware\Policies\Microsoft\EMET\Defaults*\Adobe\Adobe Photoshop CS*\Photoshop.exeREG_DWORD
HKEY_LOCAL_MACHINE or HKEY_CURRENT_USERSoftware\Policies\Microsoft\EMET\Defaults*\Winamp\winamp.exeREG_DWORD
HKEY_LOCAL_MACHINE or HKEY_CURRENT_USERSoftware\Policies\Microsoft\EMET\Defaults*\Opera\opera.exeREG_DWORD
HKEY_LOCAL_MACHINE or HKEY_CURRENT_USERSoftware\Policies\Microsoft\EMET\Defaults*\Opera\*\opera.exeREG_DWORD
HKEY_LOCAL_MACHINE or HKEY_CURRENT_USERSoftware\Policies\Microsoft\EMET\Defaults*\WinRAR\winrar.exeREG_DWORD
HKEY_LOCAL_MACHINE or HKEY_CURRENT_USERSoftware\Policies\Microsoft\EMET\Defaults*\WinRAR\rar.exeREG_DWORD
HKEY_LOCAL_MACHINE or HKEY_CURRENT_USERSoftware\Policies\Microsoft\EMET\Defaults*\WinRAR\unrar.exeREG_DWORD
HKEY_LOCAL_MACHINE or HKEY_CURRENT_USERSoftware\Policies\Microsoft\EMET\Defaults*\WinZip\winzip32.exeREG_DWORD
HKEY_LOCAL_MACHINE or HKEY_CURRENT_USERSoftware\Policies\Microsoft\EMET\Defaults*\WinZip\winzip64.exeREG_DWORD
HKEY_LOCAL_MACHINE or HKEY_CURRENT_USERSoftware\Policies\Microsoft\EMET\Defaults*\VideoLAN\VLC\vlc.exeREG_DWORD
HKEY_LOCAL_MACHINE or HKEY_CURRENT_USERSoftware\Policies\Microsoft\EMET\Defaults*\Real\RealPlayer\realconverter.exeREG_DWORD
HKEY_LOCAL_MACHINE or HKEY_CURRENT_USERSoftware\Policies\Microsoft\EMET\Defaults*\Real\RealPlayer\realplay.exeREG_DWORD
HKEY_LOCAL_MACHINE or HKEY_CURRENT_USERSoftware\Policies\Microsoft\EMET\Defaults*\mIRC\mirc.exeREG_DWORD
HKEY_LOCAL_MACHINE or HKEY_CURRENT_USERSoftware\Policies\Microsoft\EMET\Defaults*\7-Zip\7z.exeREG_DWORD
HKEY_LOCAL_MACHINE or HKEY_CURRENT_USERSoftware\Policies\Microsoft\EMET\Defaults*\7-Zip\7zG.exeREG_DWORD
HKEY_LOCAL_MACHINE or HKEY_CURRENT_USERSoftware\Policies\Microsoft\EMET\Defaults*\7-Zip\7zFM.exeREG_DWORD
HKEY_LOCAL_MACHINE or HKEY_CURRENT_USERSoftware\Policies\Microsoft\EMET\Defaults*\Safari\Safari.exeREG_DWORD
HKEY_LOCAL_MACHINE or HKEY_CURRENT_USERSoftware\Policies\Microsoft\EMET\Defaults*\QuickTime\QuickTimePlayer.exeREG_DWORD
HKEY_LOCAL_MACHINE or HKEY_CURRENT_USERSoftware\Policies\Microsoft\EMET\Defaults*\iTunes\iTunes.exeREG_DWORD
HKEY_LOCAL_MACHINE or HKEY_CURRENT_USERSoftware\Policies\Microsoft\EMET\Defaults*\Pidgin\pidgin.exeREG_DWORD
HKEY_LOCAL_MACHINE or HKEY_CURRENT_USERSoftware\Policies\Microsoft\EMET\Defaults*\Foxit Reader\Foxit Reader.exeREG_DWORD

Included products and mitigations:

- Windows Media Player - all default mitigations except MandatoryASLR and EAF

- Skype - all default mitigations except EAF

- Microsoft Lync Communicator - all default mitigations

- Windows Live Mail - all default mitigations

- Microsoft Photo Gallery - all default mitigations

- Microsoft Live Writer - all default mitigations

- Microsoft SkyDrive - all default mitigations

- Google Chrome - all default mitigations, and EAF+

- Google Talk - all default mitigations except DEP

- Mozilla Firefox - all default mitigations, and EAF+

- Mozilla Thunderbird - all default mitigations

- Adobe Photoshop - all default mitigations

- Winamp - all default mitigations

- Opera - all default mitigations

- WinRAR - all default mitigations

- Winzip - all default mitigations

- VideoLAN VLC - all default mitigations

- RealPlayer - all default mitigations

- mIRC - all default mitigations

- 7zip - all default mitigations except EAF

- Safari - all default mitigations

- QuickTime Player - all default mitigations

- iTunes - all default mitigations except Caller

- Pidgin - all default mitigations

- Foxit Reader - all default mitigations


emet.admx