Why does the File System Monitor of EMB have Whitelist AND Blacklist Modes?
As stated above the FSM running in Whitelist Modes is safer than in the Blacklist Modes. If no exotic programs are installed FSM running in Whitelist Mode should NOT block any files which are supposed to be passed. When any kind of files are copied, moved, renamed or deleted by the internal Windows (File System) Explorer (NOT to be confused by the Internet Explorer which is NOT the same) all these operations work normally. However, when files are blocked while surfing the Internet and you don’t know exactly what to do to resolve the problem you can switch to either ‘Safe’ or ‘Drive-by Block (BL)’ mode. In these modes only known potentially dangerous files will be blocked.
