A computer-implemented system for blocking application interface elements, the system comprising: a computer system having an application running on it, wherein the application has an graphical user interface with interface elements providing access to various functions of the application, wherein the application interface of an active application is displayable as a foreground on a computer or a mobile device screen; an analysis module configured to analyze one or more interface elements; a database of restricted application interface elements accessible by the analysis module for determining whether the one or more interface elements are to be blocked; wherein the restricted application interface elements comprise at least one of malware, allow access to confidential data, allow for execution of payments, allow for sending a Short Message Service, a link for downloading a free application and connecting to the Internet; and a blocking module configured to block at least one or more interface elements; wherein the analysis module acquires data from the application and from the database for selecting the at least one of the one or more interface elements to be blocked; characterized in that the one or more interface elements are blocked for user interaction by overlaying on the at least one of the one or more interface elements a removable trusted application element on the GUI, wherein the trusted application element is constantly displayable over the restricted interface element, allowing running the application instead of terminating it because at least one restricted application interface element is detected, wherein the removable trusted application element is removable to unblock the blocked at least one or more interface elements upon receiving a user request, and the determining whether the one or more interface elements are to be blocked is based on a content analysis of the interface elements, and wherein the analysis module is adapted to detect user actions on the interface elements; to analyze the user actions; and to provide the related data to the blocking module to block the interface elements, if the user actions match a restricted pattern, wherein a sequence of the user actions on the interface elements is analyzed as a script which contains several moves from one interface elements to another. a computer system having an application running on it, wherein the application has an graphical user interface with interface elements providing access to various functions of the application, wherein the application interface of an active application is displayable as a foreground on a computer or a mobile device screen; an analysis module configured to analyze one or more interface elements; a database of restricted application interface elements accessible by the analysis module for determining whether the one or more interface elements are to be blocked; wherein the restricted application interface elements comprise at least one of malware, allow access to confidential data, allow for execution of payments, allow for sending a Short Message Service, a link for downloading a free application and connecting to the Internet; and a blocking module configured to block at least one or more interface elements; wherein the analysis module acquires data from the application and from the database for selecting the at least one of the one or more interface elements to be blocked; characterized in that the one or more interface elements are blocked for user interaction by overlaying on the at least one of the one or more interface elements a removable trusted application element on the GUI, wherein the trusted application element is constantly displayable over the restricted interface element, allowing running the application instead of terminating it because at least one restricted application interface element is detected, wherein the removable trusted application element is removable to unblock the blocked at least one or more interface elements upon receiving a user request, and the determining whether the one or more interface elements are to be blocked is based on a content analysis of the interface elements, and wherein the analysis module is adapted to detect user actions on the interface elements; to analyze the user actions; and to provide the related data to the blocking module to block the interface elements, if the user actions match a restricted pattern, to detect user actions on the interface elements; to analyze the user actions; and to provide the related data to the blocking module to block the interface elements, if the user actions match a restricted pattern, wherein a sequence of the user actions on the interface elements is analyzed as a script which contains several moves from one interface elements to another.