Can I somehow set up that would block the activity of the suspicious file, but not removed without my permission?
