Source: sbi-secureit
So it is not surprising that so many of us avoid this problem by using the admin account. Although this is much more convenient, it is very dangerous in terms of security. Any "malicious" website or any attachment may enter a vulnerability in the browser or e-mail program, and may run malicious software with full rights to embed. It enters system folders, disables anti-virus and computer-destroying programs. Conversely, if an attacker does not have the right to edit your system, it cannot be harmful.
Amust's 1-Defender launched in December last year and updated to version 2.0 in April, this tool only runs with Microsoft's Internet Explorer (IE), Outlook and Windows Messenger. After a quick installation, you will have the option to create a new desktop and shortcut buttons to run the application with limited permissions, even if you are logged in as an administrator. In addition to the desktop there is a new 1-Defender icon and when running IE, the logo on the upper left is slightly different, implying that you are running in SafeInternet mode. When running in this mode, you (or any malicious software) cannot install the software or change the Registry.
Links from other applications or files need to launch IE and IE will run in safe mode. You can run IE directly by pressing Shift and clicking the link or the usual way through the old IE icon. Most old IE operations such as opening files from a computer or installing a new toolbar remain unchanged.
Like 1-Defender, DropMyRights is a small program that also runs pre-selected applications with limited user rights. Developed by Michael Howard, a former Microsoft security program manager, DropMyRights has been around since 2004. Although Howard works for Microsoft, it doesn't market it. It can run with any program, but before using it you need to edit a bit. After installation, you must create a shortcut icon to assign which application you want to run with it (or you have to edit the existing icon). Howard gave complete instructions, including illustrations at his website (see the link in the table).
If you click on a link in another application like Word, the default browser will launch as usual without DropMyRights protection (unless the browser is running with DropMyRights). To increase security, copy and paste the link after launching the browser with a new browser icon when installing DropMyRights.
Microsoft plans to offer "protection" mode in Vista, in which mode IE 7 will run without administrative rights, like 1-Defender and DropMyRights. The company is also trying to eliminate the inconvenience of running daily applications with restrictions (current Vista trials still have a lot of things to edit).
Block application
GreenBorder Pro only runs exclusively on IE, goes beyond DropMyRights and 1-Defender by creating a protected "box" so that the browser only runs in this. Therefore, it can fill all gaps so that malicious software has write access to the system directory and it also has many other administrative functions; can block access to all documents. GreenBorder Pro also has a higher level of security: Privacy Zone (for data like online banking .) will block access to History memory and other data in the browser. When running, it places a prominent green line around IE. If the toolbar or anything else in IE tries to open a file, you will get a message saying whether to allow it. Downloaded executable files cannot be run until you remove GreenBorder protection. If you suspect any executable file, you can learn it before deciding to allow installation.
You can import and export bookmarks into this "security box" comfortably, but the toolbars and browser add-ins do not. You must start IE in unprotected mode to install IE toolbar if you want to use it temporarily.
GreenBorder installs and runs smoothly; FireFox version is under development. With an annual subscription fee, this protection tool may be slightly higher than its value.
Virtual Sandbox of Fortres Grand also creates a "box", but it can run with any program on the computer. The tool will scan the entire system after installation and will by default run all browsers in this security box. E-mail programs run normally, but any double-clicked attachment must run in the box. You can fine-tune the settings for each application that needs security and of course you can specify which applications run with Virtual Sandbox.
Because Virtual Sandbox can run with any program with limited permissions, it has better security than GreenBorder, in return it requires many things. You will have to receive many pop-up windows asking you to run or not. Configuration menus also have a slightly complicated interface.
Anyone who wants to increase the security of the computer and is afraid of complicated configuration of Virtual Sandbox will probably match the free VMWare Player and Browser Appliance. The two-step installation process of this tool is very easy and then you will have to run Firefox in the virtual operating system called Ubuntu Linux (the full download is about 300MB) completely independent of Windows. At that point, you will surf the web with Firefox inside Linux. If any malicious program infects your system via Firefox, the program will still be unable to access Windows. And then Firefox's recovery is quite easy.
This is a strong protection for web surfing, but this tool consumes a lot of resources - about 300MB of memory with 4 open tabs in Firefox (after a new installation). You have to set up a new browser and cannot simply copy a bookmark file into a virtual environment.
All four programs allow you to browse and receive e-mail without fear of infection. According to a security expert, limiting the right to use computers can also block most malicious software. So unless you really need more security than the "box" security and virtualization application, the simple tool that limits permissions like free DropMyRights is more than enough.
Free protection programs
Protection Type Run with Comments tool
Amust 1-Defender
Do not allow system changes by restricting user rights
Internet Explorer, Outlook, Windows Messenger
This is a good option, easy to use and free if you regularly work with Internet Explorer
DropMyRights
Do not allow system changes by restricting user rights
All programs
Easy installation, this is the best free tool for all your programs
VMWare Player and
Browser Appliance
Install a standalone browser inside a virtual environment to prevent the PC from affecting
Firefox
Large installation capacity but not difficult to set up, this is the safest option if your PC's resources are abundant.