Run as Limited User - How to Stop 90% of Viruses Automatically

[Marc]

This is a simple tip I like to give to everyone.

Have two account on your PC. One account should be a LIMITED user account for day-to-day activities. Have another account be your administrator account. Use the administrator account ONLY when you need to do something as an administrator.

Why?

Any program on your computer that runs (few exceptions) runs under your name. If your day-to-day account has administrative privileges, so does everything running. Meaning, when you catch a virus, that virus has access to every file and program on the PC automatically. This lets it screw up your operating system, delete important system files, and cause great havoc. If you are a LIMITED user, then the virus can only effect things you can change. This incidentally stops about 90% of all viruses out there.

Note: if "Run as..." doesn't show up, hold down the SHIFT key before right clicking.

This is not meant to be a replacement for good browsing practices, but it sure does help for when you do slip up.

But I need to run this program as an administrator or it doesn't work!

A program is only as good as its programmer, and unfortunately we don't have programmer licenses. There are also other legitimate blocks too, like installer programs and administrative tools.

You don't have to log off of your current session to do this either! Right click on the program file or shortcut you wish to run as an administrator, and you will see "Run as..." in 2000/XP click administrator or any other account then enter your password (or "Run as Administrator" in Vista/7 click it and enter the password for that account). This program will now be running with the privileges of that account. There are very few programs that do not allow you to do the "Run as" function. Usually those pain in the ass shit programs like Adobe or iTunes.

If you have any questions, feel free to post them.

[multicoloredwiz]

A lot of programs may seem untrustworthy or suspicious (like an anti-spyware prog named SUPERANTISPYWARE... which sounds so blatantly illegitimate). Usually, that means you shouldn't run them at all, but sometimes they might be useful or needed. There're a lot of rogue programs out there that disguise themselves as something helpful but aren't.

In this situation, you can check the program in a virtual machine.

A virtual machine is basically a guest OS running inside of your OS. I recommend VirtualBox. Set it up in a read-only shared folder between the host OS and guest OS. Make sure the guest OS has no network adapters enabled. Do an antivirus check in your guest OS on the file to check for anything funky. Usually, you're good to go, but not always. Then, run it in the guest OS. If anything bad happens to the guest OS, no big deal. You can blow it up or... live with it.

If it's healthy, great, you should be safe in your host OS. If it's not, find another program.

Another thing I recommend to prevent viruses or spyware is to use Firefox as your browser, then get the addons AdBlockPlus and NoScript. Subscribe to ANY AdBlock site and just undo anything that you don't want to be blocked out with NoScript. There's a pretty good chance NOTHING will get through. I use these and do scans with Spyware S&D and MalwareBytes once a MONTH only to return... no results.

[Marc]

The whole virtual PC thing could be a good stand alone topic.