How to help family keep PCs malware free

If you are a techy I'm sure you've run into the friend or family member who just can't seem to keep their PC free of viruses, spyware and other malware.

Over on his ZDNet column, Ed Bott recently gave his thoughts and a fairly detailed set of instructions on how to set up a PC so that a person (or persons) who is more prone to get into trouble with malware online is much less likely to get infected.

Basically, he details how to set up a separate limited account that the people who have problems with malware run under and another admin type account that is password protected that is usable only by "trusted" people. Trusted people would be those individuals who know how to avoid getting malware on their systems by not going to porn or pirate sites, although even those people might want to run as the limited access user for most situations.

Anyhow, it's a common problem these days that most, if not all anti-spyware software leave some of the tasks of keeping junk off the computer to the actual user, so if you have users who don't know better, refuse to read the warnings that pop up or are prone to mistakenly hitting the wrong button, then this is the way to go. It will also help to some degree to keep the clutter of software off of the box.

Anyone can work on their PCs in this way with a large majority of available software and completely avoid most of the risk of getting malware on even their Windows systems.

What People Are Saying

That's quite a difficult

That's quite a difficult problem with that malware. Antivirus protection is necessary, but is there any reliable method, who can give a 100% guarantee? The only thing I personally can do is just avoid suspicious sites and messages. But nobody is insured. Thus, a separate limited account is quite a good idea, why not? I can share it with trusted people and I can be at least more calm about my PC.

I posted this as a general

I posted this as a general comment elsewhere:

How in the world did we get to this place where it's OK to be spending billions of dollars anually on debugging and patching and repairing the damage done by this totally horrible operating system?

After ten years of this, why hasn't MS fixed their OS' permissions so that nobody's errant or devious program has access to any SYSTEM files, processes and address space? What is going on here?

We are stuck running this mess with full R/W perms on everything, including the entire Registry, executables and DLL storage area. Even Microsoft's own apps won't run correctly without it. What a joke.

Linux/Unix/VM and every other OS assumes a tight multi-user and multi-process security environment is first and foremost.

Microsoft on the other hand, keeps feeding us garbage, and we keep eating it like it's the only protein in town.

I don't care what anybody says, there's no way on earth that any of the ?nix OSes would ever be 1% as vulnerable to attack as Windows is. It's just not possible. Period.

So why aren't they working on fixing this, and why aren't WE _DEMANDING_ they do it before we fork over another dollar?

I'm embarrassed to be in IT (30 years worth) and deeply sadened by the current state of Windows, and the fact that 95% of all desktops run it. This product needs to go away - forever. And I for one predict it will no longer be the underlying OS for virtualized desktops in the near future.

Soon, you'll be able to run MS apps in protected environments provided by "other" OSes. That way at least, you won't be shooting yourself in the foot when you open an attachment.

Good ridance. I want to get on with using these systems for productive use, to get the task done, and not to spend all my time cleaning up after juvenile and just plain lousy programming efforts. Bad code! Bad vendor! Bad code!

dave...