Korean Job Discussion Forums

[Drew345]

I am sharing time on my PC with a friend now. He is Korean, and I think Koreans are just great. But I think that the Korean websites are rather dangerous; active-X controller, drive-by downloads, and the dreaded Ahn lab security... I set up two user accounts, but I doubt that creates any real protection.
I must admit that I have already put on the banking Active-X controllers out of necessity, and that twinkle-star thing necessary to see the bus routes. He seems to have installed something called Daum 클리너 (cleaner), which seems to somehow be related to putting background pictures and music on emails. Everything seems to be running smoothly, but still I get that fear every time I see Daum or Naver open up.
What are some good tech-savvy things I can do to make sure my computer stays free from any more active-X, can I block one user from downloading Active-X? How can I make sure Ahn Labs never gets its tentacles on my PC? Any good back up strategies? Can I make sure a USB drive must be scanned (no cancel) and not used if infected?
He knows not to download (more) things, but I know that temptation is going to hit for just one more Active-X download. And I told him never put his mp3 USB drive into another computer (I cleaned it already). So I am looking for more tech solutions than �tell him this��
I am running Windows 7 with Avast Security. My (administrator) account is password protected and the screensaver goes back to the login screen on awake. What are some other good ideas for piece of mind?
I guess this question doesn't have to be about sharing a computer with a Korean. It could easily relate to sharing a computer with anyone (granddad maybe). I don't mean to be offensive to Koreans; the Korean websites just seem rather dangerous.
Thanks

[Swampfox10mm]

This is so very easy, you'll be happy.

Just add a 2nd logon account and don't allow it administrator privs. This won't even allow him to install ActiveX (which will probably lead to him asking you if he can do so, because most Korean sites require them). If he tries to install anything, it will ask for the admin. password to do so, or be blocked.

1. Click on the little blue Microsoft circle in the bottom left corner of screen and open the Control Panel.
2. Click on Add or Remove User Accounts
3. Create a new account
4. Name it something he likes, then choose "Standard User"
5. Click "Create Account"

From Microsoft's Help:

[Drew345]

Great.
I had made a separate account already, but only recently went back and password protected my (admin) account. I just tried to download an active-X from the standard account, and, great! couldn't do it!
How about keeping off those viruses carried around on USB drives. They seem to be so prevalent because of Ahn Lab's worthlessness on other PCs.

[denverdeath]

http://www.askvg.com/how-to-disable-restrict-use-of-usb-storage-devices-in-windows/

always remember though, although time consuming, a person with a copy of a windows cd/dvd can almost always take control of ur computer. well, it would b their com then anyway, if they at least know how to install an OS, with the basic security measures that have been discussed in this thread...

true, or at least better, security will b found by password protecting ur bios.

[Swampfox10mm]

All you need is antivirus software installed. for free I suggest Avast or Microsoft security essentials. Both will scan usb drives when you put them if you specify to do that in the settings. Not complicated. I think Avast scans them by default, and I know MS needs you to check a box in settings to do so. In any case neither will allow a virus to jump to your computer from USB even if settings to scan USB are not chosen.

[CentralCali]

You gave him a chance to follow your rules and he disregarded them. Why, then, are you still allowing him to use your computer? Open the window and point to one of the gazillion "pc bang" in the country. Problem solved.

[hallazgo]

there's a lot of ways he can dork with your system beyond just having a windoze cd. But doesn't sound like a he's a whiz kid so you're probably fine for the malicisou things HE will do. The sites he visits are another thing. I've found Avast to be poor at malware apps that can be installed. Try running ad-aware, super-antimalware or similar once a week just to keep it clean.
Guarantee it will find some nasty stuff every time - Korean sites are thick with 'em

[Swampfox10mm]

I haven't found an antivirus yet that was really great at malware. That's why I run Malwarebytes Free Edition every several weeks, or when I suspect I may have a problem.

[akcrono]

Not to sound like an idiot, but what is Ahn Labs? Never seen it.

[SeoulNate]

it is an extremely crappy virus protection program from korea.

[Drew345]

Thanks for all the Tips,
I got the second user account made, and password protected the admin account, so no unauthorized downloads are possible.
I got Avast running. Actually they stopped offering the option to scan USB drives on insert; they say that is not feasible because of the size of modern USB drives. But they do block viruses trying to jump from USB to the PC.
I am considering a piece of 3rd party software which forces Avast ( or any virus protection ) to scan a USB on startup.
I am also considering a piece of software to disable the USB ports, but not sure if that if possible to do for one user, or if it is done for all users. My friend only needs to charge his little MP3 player in the USB, not access it.
Good advice about the Malwarebytes malware scan once a week.
Thanks so much!

[denverdeath]

[Swampfox10mm]

I haven't checked in the last month, but at least that recently, Microsoft Security Essentials would scan the USB key on insert (or so it seems). There was an option for it, anyway. Might want to give it a look.

It's been a pretty good AV for me, but I noticed that my version at work seemed to stop working for some unknown reason. Had that happen before on reboot on occasion. It's a good program, but I have heard people have similar issues. Always comes back after the next boot, though. Happened about 1 in 10 boots for me.

I feel a bit safer with Avast at the moment.

[Swampfox10mm]

Used to use spybot but it stays in your computer memory yet the free version only adds popups to your life. Still had to run it manually. Wasnt impressed overall.

[Skippy]

Have you considered a separate partition and O/S. Create a small partition (10 -15 GB) and install XP - Korean version. So if he wants to use he will reboot and then choose the different O/S. You can also likely password protect your other O/S (Win7 or Vista) that will not allow him to even boot in to it. I bet there is even way that you could even restrict him to just the partition you created for him, so he can not even look at other drives or save stuff to it. Then ghost it/image it. So once a month or so re-image the drive (he will loose any files he does not back up but it will be clean.

Or just give him a live thumb drive to use. He wants the computer he plugs in the thumb drive and starts it up. All the O/S will be on the thumb drive. May be a little slow but it keeps all crap on the the thumb drive.

But if you want to keep it simple. Create a separate account and put some restrictions. Also consider creating a restore point and just restoring it about once a week.

As to USB viruses - I have used 3 programs that have helped me.
Autorun eater
No Autorun
Flash Disinfector

The first two are resident tray applications that watch flash drives for autorun.inf file and such (most USB viruses will be related to that). The programs either stop the virus from running and sometimes delete. Later you can properly disinfect the thumb drive.

The last one flash_disinfector creates a directory that can not be deleted (easily) in the name of AUTORUN.INF , it it a slow down of the viruses as drives can still be infected but they can not autorun and install them selves again when the are inserted into a slot. You will have to ask the Korean friend to see his drives to then disinfect them.

A minor draw back to the above programs is you can not using any automatic programs that will run when you plug your device in.


Of course you will still want to scan the system regularly.