Saw on another site these suggestions for improving security on Win 7: 1. Disable writing to the registry keys 2. Deny all access to: Vssadmin.exe, Wmic.exe, and \Run 3. Prevent any program from executing in: \Downloads, \Temp, and %AppData% 4. Restrict all downloads execution to: \Program Files Unfortunately not even hints on how to actually do any of this, nor is Google being helpful. Can anyone provide links to any how-to/DIYs a Win 7 newbie can use to do the above?