Member Avatar for BobLewiston

In Windows XP, in addition to an administrative account, I have a limited account for the internet (to help safeguard against malware).

Should I log off of my administrative account before accessing the net via my limited account?

And is there any way for a website to infect you other than actually going to that website?

  • 2 Contributors
  • 3 Replies
  • 109 Views
  • 2 Days Discussion Span
  • Latest Post Latest Post by donkey_pasta

Dani AI

Generated

— using a separate limited (standard) account for web browsing is the right approach. is also correct that logging off an administrator session reduces risk. Fast User Switching or simply locking an admin session keeps that account’s processes running in the background, and any open, network-enabled admin programs can be additional attack surface. Logging out of the admin account (or at least closing networked/admin apps) before browsing is a simple, effective step.

Logging off helps but is not a complete guarantee. Many attacks exploit browser, plugin, or kernel vulnerabilities that can run code at the level of the process they compromise. Some payloads can chain to higher-privilege components or exploit services that run as SYSTEM, so keep that context in mind. Practical, low-effort mitigations you can apply now: use a browser that blocks third-party scripts or uses click-to-play for plugins; remove or disable unused plugins (Java/Flash/ActiveX were common vectors on XP-era machines); disable autorun for removable media; close any admin-owned networked apps before switching users.

Websites can infect systems without you deliberately “going to” a malicious URL. Common vectors include drive-by download attacks, malicious ads and third-party content (malvertising), compromised CDNs or scripts, and redirects from otherwise-trusted pages. These techniques let attackers push exploit code via content embedded in legitimate sites or ads Drive-by download and Malvertising.

Important note: Windows XP no longer receives security updates, so remaining on XP keeps you exposed even if you follow good practices. Upgrading to a supported OS is the single best long-term protection (see Microsoft product lifecycle for Windows XP).

Recommended Answers

All 3 Replies

Member Avatar for donkey_pasta

Should I log off of my administrative account before accessing the net via my limited account?

I don't think it matters because the Administrative account has different permissions. Although my personal preference is to log off before logging onto a different user account.

And is there any way for a website to infect you other than actually going to that website?

This is kind of an awkwardly worded question. (I could be wrong but) I think what you're asking is -- 'Is there a way to be penetrated by threats if you don't go to threatening websites?' If that is you're question then the answer is yes. Some ways to safeguard yourself:
*Make sure you have your firewall enabled. Check the exceptions list to see what ports are open.
*Use OpenDNS web filtering to block sites known for malware.
*Check MD5 hashes on downloads you think could be potentially harmful.
*Don't surf porn or download pirated content

Member Avatar for BobLewiston

donkey_pasta:

Make sure you have your firewall enabled. Check the exceptions list to see what ports are open.

My firewall (PC Tools Firewall Plus) is enabled. But I don't see any way in it to check the staus of ports. Anyway, I don't really understand - how many and what ports could be open via my wireless modem?

Check MD5 hashes on downloads you think could be potentially harmful.

How do I do this? Will Malwarebytes' Anti-Malware, SUPERAntiSpyware or Avast AntiVirus do it for me?

Member Avatar for donkey_pasta

I don't have experience with PC Tools Firewall Plus, but what you can do is look at the applications list -- that will show you which applications are communicating and it may tell you which ports.

If you're modem is wireless most likely you have DSL and the modem is probably doing the routing. Typically DSL modems have a firewall enabled.

As far as the MD5 hashes go, it's something that you may not bother with as it sounds like you are a pretty average user. But if you use FireFox you can download an extension that will calculate the MD5 hash of a downloaded program. If the download website provides the MD5 hash you can compare the two using the extension and if they match then the file is clean, if they don't match then there is definitely some potential danger. Extension:

You sound like you are in good shape though, using a limited user account, having a firewall intact, using anti-malware/virus/spyware software. Make sure your wireless connection is secured using WPA or WPA2 encryption along with a good strong network key (password).

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.