%AppData%\*.exe     Disallowed Don't allow executables from AppData
%AppData%\*\*.exe Disallowed Don't allow executables from AppData subfolders

%AppData%\Temp\7z*\*.exe Disallowed Block executables run from archive attachments opened with 7zip
%AppData%\Temp\Rar*\*.exe Disallowed Block executables run from archive attachments opened with WinRAR
%AppData%\Temp\wz*\*.exe Disallowed Block executables run from archive attachments opened with WinZip
%AppData%\Temp\zip*\*.exe Disallowed Block executables run from archive attachments opened using Windows built-in Zip support

%AppData%\Temp\*.7z\*.exe Disallowed Block executables run from archive attachments opened with 7zip
%AppData%\Temp\*.rar\*.exe Disallowed Block executables run from archive attachments opened with WinRAR
%AppData%\Temp\*.wz\*.exe Disallowed Block executables run from archive attachments opened with WinZip
%AppData%\Temp\*.zip\*.exe Disallowed Block executables run from archive attachments opened using Windows built-in Zip support

%AppData%\Temp\*\7z*\*.exe Disallowed Block executables run from archive attachments opened with 7zip
%AppData%\Temp\*\Rar*\*.exe Disallowed Block executables run from archive attachments opened with WinRAR
%AppData%\Temp\*\wz*\*.exe Disallowed Block executables run from archive attachments opened with WinZip
%AppData%\Temp\*\zip*\*.exe Disallowed Block executables run from archive attachments opened using Windows built-in Zip support

https://community.spiceworks.com/topic/396103-cryptolocker-prevention-kit-updated?page=16