Avast WEBforum

Other => General Topics => Topic started by: polonus on June 03, 2005, 10:25:31 PM

Title: The vulnerability window.
Post by: polonus on June 03, 2005, 10:25:31 PM
Hi friends on the forum,

Malware creators try to distribute their creations rapidly to prevent users from having time to update solutions. They use mass mailers, you see outbreaks lasting a couple of hours. All this explosive activity is to benefit from the vulnerability window. So close the vulnerability window as much as you can. Update, be sensible. There is a risk in certain activities on the net: P2P, even when you use PeerGuardian, you can be the next victim of the vulnerability window. Help close it, and don't put it open wider.

greetings,

polonus
Title: Re: The vulnerability window.
Post by: DavidR on June 04, 2005, 12:43:05 AM
You can reduce your vulnerability by not browsing or using programs that access the internet whilst logged on as a user with admin privileges. A pain to keep switching user, so why not use MS DropMyRights.

For further information - DropMyRights - Browsing the Web and Reading E-mail Safely as an Administrator (http://msdn.microsoft.com/security/securecode/columns/default.aspx?pull=/library/en-us/dncode/html/secure11152004.asp)

For ease of use I would suggest that you create a folder called DMR (on the C:\ drive) rather than the default location burried in the documents and settings folder. This makes the path in your shortcut much shorter, but this is your choice.
For each program (browser, email program, etc.) that you want to run with restricted rights you need to create an alternative desktop shortcut to launch it via DropMyRights.exe.
The target location in the alternative shortcut would look something like this - C:\DMR\DropMyRights.exe "C:\Program Files\Mozilla Firefox\firefox.exe". What this is doing is calling the DropMyRights.exe, which launches the program with restricted rights.
You will need to change the icon as it will look like a plain old MS DOS icon, rather than the original programs icon.