Protect your friend computer

So... I have to set up a windows 7 machine for a good friend...

I know how I set up MY machines... but... it is not possible on a friend machine... She will go on lots of websites....

And, you know, interactive outbound protection and stuff that asks for your confirmation aren't really good either since most people will click before they even think about reading the alert...

I just need to lock it down enough for it to be secure, but not TOO much... She won't need to access admin rights to install stuff...

It is mainly browsing and instant messaging....


Thanks for your suggestions

Alex

 

DefenseWall
OR
Sandboxie: Force browsers and messengers in that sandbox

 

It's a good idea... however I think that sandboxie isn't the best option...

I mean, what if she needs to download stuff...

It easy for me to understand the concept of a "sandbox"... but it isn't for the average user...

 

I second my opinion for DefenseWall.
Sandboxie is good for her

 

My vote goes to Defensewall also, plus Panda Cloud Antivirus to scan every file your friend downloads.

Simple and Light

 

just teach her how to download using sandboxie.
just say :click>"Recover to the same folder"
Thats it.

 

Panda cloud or mse wot on browser to surf only in green sites nothing else
sandboxing or hips are confusing for average user. Also tell her to not download
any torrent or use sharing programs

 

Avast 5
Comodo only firewall

And maybe
http://linkscanner.avg.com/
or
http://www.mywot.com/
or
http://www.siteadvisor.com/

Anyway you can also use Comodo V4 (firewall and defense+, Avast as AV) when they will release the final version since the number popups for defense + in the beta version is very very low

 

I vote for Sandboxie "Paid".

Settings changes from Default:
1. Delete Invocation: Auto delete contents of sandbox
2. DropRights: Enabled
3. Force all web browsers to Sandbox.

Throw in at least one website ratings type software (i.e., Linkscanner without the Linkscanner Toolbar).

 

If you do go with MSE you can't use Defensewall due to a conflict

 

Since she's not going to be installing apps, then I agree with the Sandboxie recommendations.

That is risky browsing behavior and is what the OP is trying to mitigate. Keep the download in the sandbox until you are sure it is safe. Only then should it be recovered.

 

DefenSeWall will save any bacon at any time in any situation

 

As long as the user know's what they are doing

 

Yeah. the only problem with that is: how do you know if it is safe or not?... I would have to look at it...

It is possible like once a week... however, even if she won't install apps, she will download images, maybe videos... save e-mail attachements that she uses everyday for work...

 

Are the email attachment things like word documents or .exe like files?

 

Is your friend willing to learn the basics of safe computer usage?

If she isn't willing or capable, then you have the same problem that I have with my family and friends. My experience says to image her system so you can do a full restore in the future (it WILL be needed; it's just a matter of how long).

Show her how to save things that are important to her to a USB drive.

Install avast! 5 Free, cross your fingers, and hope for the best!

 

That's the most important problem! Most people don't want to learn how computers work! Most people here are good with that stuff! they want to learn and they want to know!...

How many hours... days.... weeks... months or even YEARS did you spent on learning about computer security?... Most people don't want to do that... And it's just normal... They use it (the internet) because you almost need it these days... It's like a car... almost everyone uses one! But only a few people understand how a fuel injection system work...

Nice idea to make an image of the clean system! I sure will...

iBrad: mostly word and excel files, sometimes images and videos.

 

Due to the fact it's Word and Excel files Defensewall would work great. If you have it run Office as untrusted Malware won't be able to sneak in through Office documents. The internet Browser can run untrusted so no malware can sneak through it. Just add an antivirus and your friend should be highly secured.

 

If everyone knew how to operate and run adequate security program, I would be out of a job.

 

Yeah... you aren't the only one! But as I said, this just won't happend... Even if ALL the security exploits were fixed, the biggest problem would still be there.... the users


I guess it's all a matter of balancing the risks with the amount of security software/measures!

I don't do a lot online... I already said it, no javascript, no plugins... VERY basic use of the internet... I also lock down my system to the maximum...

I only use MSE and Looknstop as my "security software"... but since my use of the internet is really limited and my system is locked to a maximum, there is no risks (well, they are REALLY small)...




But this is MY approach to computer security... it would not work with almost everyone! People want to have scripting enabled... they want flash... they want to browse anywhere... they want to go on facebook and myspace... they want to install stuff... sometimes even do p2p...

In that case, yes, you need more than MSE and LookNstop I guess

 

If there were no stupid people I would be out of a job. Paramedic/A+ tech

 

However, not everyone with computer problems is stupid

But if there was no "stupid" people that download anything without thinking, go on porn sites and do P2P all day long, I guess that 95% of the infections would be prevented...


But I understand what you mean... I have a friend who work at the Fire department.... Sometimes he sees things that are hard to believe.

 

yeah the stupid people are the ones I pick up off the street. Of course the other stupid ones are the people that go to warez sites and wonder why they have 30 trojans.

 

IMO, MSE + MBAM is good enough for her.

 

A multi-pronged approach:
1. MSE as the standard scanner, set to do a quick scan daily, even if computer is in use.
(I would have recommended Avira, but its update issues and pop-ups are holding my hand.)
2. Firefox as the default browser.
3. AVG Linkscanner.
4. Ask her to run CCleaner daily before shutdown.
5. Weekly scan with a-squared(if she is on broadband, coz if she updates it after a week, huge database will be downloaded) or MBAM or SAS.