Internet Explorer 6, and Internet Explorer 7, for Windows XP SP2, will automatically block downloads that do not require user interaction, unless you have disabled the Automatic prompting for file downloads option, and provides more protection against downloaded executable files by checking for a digital signature on files that can be digitally signed, like .exe, .dll, .cab, .ocx, and .msi files.

NOTE: When a Web site attempts to download a file that did not result from a user action, like a key press or mouse click, the download is blocked and an Information Bar prompts you with:

To help protect your security, Internet Explorer blocked this site from downloading files to a computer. Click here for more options.

Internet Explorer and Windows Explorer automatically take advantage of these tighter restrictions on file downloads. Other applications can be configured to do so also.

I have scripted FEATURE_RESTRICT_FILEDOWNLOAD.BAT to list the applications that have been configured to take advantage of the tighter restrictions on file downloads.




@echo off                              setlocal EnableDelayedExpansion                              if exist "%TEMP%\FEATURE_RESTRICT_FILEDOWNLOAD.TMP" del /f /q "%TEMP%\FEATURE_RESTRICT_FILEDOWNLOAD.TMP"                               set App=NONE                              set key="HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD"                              set f1=FIND /i "REG_DWORD"                              set f2=FIND /i "0x1"                              call :quiet >nul 2>&1                              if exist "%TEMP%\FEATURE_RESTRICT_FILEDOWNLOAD.TMP" type "%TEMP%\FEATURE_RESTRICT_FILEDOWNLOAD.TMP"                               if exist "%TEMP%\FEATURE_RESTRICT_FILEDOWNLOAD.TMP" del /f /q "%TEMP%\FEATURE_RESTRICT_FILEDOWNLOAD.TMP"                               set key="HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD"                              call :quiet >nul 2>&1                              if exist "%TEMP%\FEATURE_RESTRICT_FILEDOWNLOAD.TMP" type "%TEMP%\FEATURE_RESTRICT_FILEDOWNLOAD.TMP"                               if exist "%TEMP%\FEATURE_RESTRICT_FILEDOWNLOAD.TMP" del /f /q "%TEMP%\FEATURE_RESTRICT_FILEDOWNLOAD.TMP"                               endlocal                              goto :EOF                              :quiet                              for /f "Tokens=1" %%a in ('reg query %key%^|%f1%^|%f2%') do (                               set App=%%a                               @echo !App!>>"%TEMP%\FEATURE_RESTRICT_FILEDOWNLOAD.TMP"                              )