What this guide is (and is not)
Idle Sleep after / “never sleep on AC” as the farm policy belongs in always-on-pc-earnapp-setup-europe-2026. First-run SmartScreen belongs in earnapp-windows-smartscreen-install-europe-2026. Smart App Control Evaluation/On belongs in earnapp-windows-smart-app-control-europe-2026. Reputation-based PUA blocking belongs in earnapp-windows-pua-blocking-europe-2026. Core isolation Memory integrity belongs in earnapp-windows-memory-integrity-europe-2026. Firewall allow-app on Private belongs in earnapp-windows-firewall-europe-2026. Background apps Always belongs in earnapp-windows-background-apps-europe-2026. Metered Wi‑Fi or Ethernet belongs in earnapp-windows-metered-connection-europe-2026. A tray that vanished after reboot without a Controlled folder access toast belongs in earnapp-windows-autostart-reboot-europe-2026. VPN split-tunnel versus EarnApp bans belongs in vpn-split-tunnel-vs-earn-app-bans-europe-2026. A week of $0 with the official tray Online belongs in earnapp-offline-zero-earnings-europe-2026. Power mode, Energy Saver, Efficiency / EcoQoS, Game Mode, Xbox Game Bar, Processor idle disable, Processor performance boost mode, Maximum processor state, Minimum processor state, System cooling policy, USB Root Hub Device Manager, USB 3 LPM, USB selective suspend, NIC adapter checkbox, Wi‑Fi Power Saving Mode, random MAC, EEE / Green Ethernet, PCIe ASPM, Fast startup, Modern Standby, Hibernate, hybrid sleep, lid close, power button, turn-off-display, hard-disk timeout, AHCI HIPM/DIPM, new-PC and first PayPal have their own pages. Here the stall was Controlled folder access still blocking EarnApp.exe from writing into a protected folder while PUA blocking was already Off or Warn, Smart App Control already Off, SmartScreen already dismissed, Sleep after already Never, Background apps already Always, Firewall already allowed on Private, Memory integrity already compatible with the NIC, and the tray still would not stay Online.
RefDeal will not invent a “CFA off promo,” a ransomware coupon, or an EU payout minimum copied from a 2023 screenshot. Windows 11 Controlled folder access (Ransomware protection) is a separate settings sheet from PUA blocking, from Smart App Control, and from the SmartScreen “More info → Run anyway” dialog. It can be Off or On. On treats some unsigned or rarely seen bandwidth clients — including some EarnApp/Bright Data updates that write logs next to the binary or under a protected user folder — as unauthorized writers even when SmartScreen already said Run anyway, PUA blocking is Off, and Smart App Control is Off. EarnApp is a Bright Data client that needs a live process plus writable log/config paths, not a ransomware toast labelled unauthorized changes blocked. Install from the tracked invite, then confirm Controlled folder access versus the official EarnApp.exe — do not download a “Defender CFA.reg” from a chat. Do not farm a work laptop whose MDM forces Controlled folder access On forever. Do not turn Real-time protection Off.
Confirm it is Controlled folder access, not PUA blocking or Firewall
Controlled folder access blocking EarnApp.exe is not a PUA quarantine and not a Firewall deny — it is a quiet-hour EarnApp stall from a Windows 11 ransomware write-protect class on an “awake” box, not a missing promo code.
- Windows Security → Virus & threat protection → Manage ransomware protection → Controlled folder access. Note Off or On. Screenshot before you touch anything. Then Protection history / Block history: if EarnApp.exe / Bright Data is “Unauthorized changes blocked” only while Controlled folder access is On, that is this page. Protected folders typically include Documents, Pictures, Videos, Music, Desktop, and any custom path you added
- If Controlled folder access is already Off but PUA blocking is still Block, that is the PUA-blocking guide first. Controlled folder access is not Reputation-based protection → Potentially unwanted app blocking
- If Controlled folder access is already Off but Smart App Control is still Evaluation or On, that is the Smart App Control guide first. Controlled folder access is not the SAC Off/Evaluation/On radio
- If Controlled folder access is already Off but SmartScreen still greys the first installer, that is the SmartScreen guide first. Controlled folder access is not the SmartScreen “More info → Run anyway” sheet
- If Controlled folder access is already Off but Windows Firewall still blocks EarnApp.exe on Public, that is the Firewall guide first. Allowing an app through CFA does not write the firewall allow-list
- If Controlled folder access is already Off but Background apps is still Never, that is the Background-apps guide first. CFA does not grant background-run permission
- If Controlled folder access is already Off but Device Manager yellow-bangs Ethernet only with Memory integrity On, that is the Memory integrity / HVCI guide. CFA does not unload NIC drivers
- If Controlled folder access is already Off but the NIC is still Metered, that is the metered-connection guide. Metered is a cost flag, not ransomware write-protect
- If Controlled folder access is already Off but a VPN is on (even split-tunnel), that is the VPN-split-tunnel guide. Bright Data often flags datacentre/VPN exits; turning CFA Off will not fix a VPN path
- If Put my device to sleep after is 5, 10, or 15 minutes on AC, that is the always-on guide first. A parked machine after Sleep is Sleep (or Modern Standby), not a CFA write block that killed the process
- If the tray vanished after reboot and Block history is empty, that is the autostart path first — missing Startup vs a CFA toast are different logs
- Search Microsoft Learn for “Windows 11 controlled folder access ransomware protection allow an app,” not a Telegram “EarnApp Defender off.reg”. OEM “secure PC” SKUs and MDM can lock CFA On — those chassis are weak EarnApp farm boxes. Allow an app through Controlled folder access is a last-resort on a personal spare PC after you verified the official EarnApp path — never a blanket allow for Downloads or a whole Program Files tree via a chat ZIP
- After a quiet hour, reopen Block history. If EarnApp is not listed as unauthorized, CFA is Off or EarnApp.exe is allowed, PUA blocking is Off or Warn, Smart App Control is Off, Firewall allowed on Private, Background apps Always, Sleep after Never, Memory integrity compatible, and the tray is still Limited, check NIC power-saving / USB hub / Power mode / Energy Saver next, then the offline/$0 guide
Fix Controlled folder access versus the official EarnApp.exe
Do this on the machine that actually runs EarnApp, on the home Ethernet path you intend to keep. Do not fight a work laptop whose MDM restores Controlled folder access On, and do not farm a phone hotspot.
- Open /earnapp/ and use the RefDeal tracked invite if the client is not installed yet. The invite attributes a first signup. It does not change Controlled folder access
- Best EU path: spare Ethernet mini-PC — Controlled folder access Off (or On with EarnApp.exe allowed), PUA blocking Off or Warn, Smart App Control Off, Memory integrity On with an OEM NIC, Firewall allow on Private, Background apps = Always, Power mode = Best performance plugged in, Energy Saver Off, Efficiency leaf Off, Game Mode Off, Sleep after = Never. Leave Windows Firewall On. Leave Defender Real-time protection On. Leave the box on AC, vents clear
- If Block history shows EarnApp.exe unauthorized changes blocked while CFA is On: on a dedicated spare farm PC you own, either switch Controlled folder access Off, or keep it On and use Allow an app through Controlled folder access → Browse to the verified EarnApp.exe under Program Files (not a Downloads folder). Restart EarnApp from the official shortcut. Document the before/after screenshot. Do not turn Real-time protection Off
- If Block history still blocks EarnApp.exe after you allowed the wrong path: remove the stale allow, add only the current official binary, restore the official binary once from Protection history if it was quarantined for a different reason. Do not install a third-party “Defender bypass” or unsigned “EarnApp unlocker”
- On a real travel laptop: keep Controlled folder access On and skip EarnApp there if the official binary cannot write without a family-PC policy change. Farm overnight only on AC with a personal spare home PC, Firewall allow on Private, Background apps Always, Sleep Never, and the chassis not in a bag
- Tell the household: a dark monitor is supposed to happen; CFA Off does not “open” EarnApp to the internet. Do not buy a “ransomware whitelist pack”. If a Windows feature update re-blocked the client, redo this page from Block history, not from a chat ZIP
After Controlled folder access no longer blocks EarnApp.exe writes and Sleep stays Never
Sign in with the same account you intend to keep. Leave the box on AC. Confirm the official tray through a quiet hour on home Ethernet. Use /earnapp/ if you never started from our tracked invite.
- Tray Online through a quiet week with CFA Off or EarnApp.exe allowed on the spare box, PUA blocking Off or Warn, Smart App Control Off, Firewall allow on Private, Background apps Always, Memory integrity compatible, and Sleep Never: leave it. We will not quote a fake first-day amount. Screenshot your own dashboard if you need a record
- CFA still On and Block history still lists EarnApp.exe unauthorized: stay on this page until Off or a verified single-file allow on a dedicated spare PC, or skip EarnApp on that chassis
- CFA Off/allowed but PUA blocking still Block: switch to the PUA-blocking guide
- CFA Off/allowed but Smart App Control still Evaluation/On: switch to the Smart App Control guide
- CFA Off/allowed but SmartScreen still blocks a new installer: switch to the SmartScreen guide
- CFA Off/allowed but Firewall still blocks Public: switch to the Firewall guide
- CFA Off/allowed but Background apps still Never: switch to the Background-apps guide
- CFA Off/allowed but Ethernet still yellow-bangs under Memory integrity: switch to the Memory integrity guide
- CFA Off/allowed but the NIC is Metered: switch to the metered-connection guide
- CFA Off/allowed but a VPN is still on: switch to the VPN-split-tunnel guide
- CFA Off/allowed but Sleep after still has minutes: switch to the always-on guide
- CFA Off/allowed, Block history empty, tray vanished after reboot: switch to the autostart guide
- CFA Off/allowed, PUA Off, SAC Off, Firewall allowed on Private, Power mode Best performance, Energy Saver Off, Efficiency leaf Off, Background apps Always, Sleep Never, unmetered home fibre, tray Online or Limited, still $0 after a quiet week: switch to the offline/$0 guide (official binary, Limited, ISP)
What we will not claim
There is no RefDeal EarnApp promo code, no published “CFA bonus,” and no honest EU minimum we can paste from a 2023 screenshot. Primary CTA stays the EarnApp offer with our tracked invite. Hub: /guides/bandwidth-safety/. Starter: /en/start/bandwidth/.