If he's doing all that, he knows your admin password (if there is one). So change (or assign) a password to the admin accounts and it should be sorted. However, this won't stop him from downloading nasty files (which should be blocked automatically by the AV program), but it will stop him from installing anything nasty.
I don't believe that he would be able to run an elevated command prompt from the guest account, and if you change your password (use a random string of letters and numbers, or a password algorithm), then they shouldn't be able to change anything critical. Parental controls will help, and you can also set times when he is allowed online. Limiting his access I think is the first step. If that doesn't work, I would eliminate it alltogether, by either means mentioned before, or an extremely effective one, take the hard drive cable when you leave.
Did you try setting up a Guest account as suggested earlier?
Just discipline the kid, thats what I think you should do... If not, just put a password on the BIOS, he can't get through that, but remember, if you forget the BIOS password... You are screwed.
if you forget the bios password, you're not screwed, you can reset the CMOS cell. script kiddies rofl :P
I had a similar problem with my Grand daughter, who played games on line and got infected big time. I actually had to re-install windows once, and spent a lot of time with Malwarebytes and SAS. The solution was to install a virtual app called Shadow Defender. She was instructed to start it each time she used the computer. If the computer did get infected re-booting cleared it. No problems since. You can pick the virtual app of your choice like Sandboxie as an example.
If your child thinks it's funny to get around your efforts, perhaps he shouldn't have a computer until he is a little older. Good luck.
I have to agree with this. If you can't control what your son does on the computer, then you may have a bigger problem than viruses on your system. I, also, hate to be too blunt and I know that it may not be easy. Being a parent is sometimes difficult. But you need to be able to have some control over his behavior.
Accounts Tutorial and Links: https://www.sevenforums.com/tutorials...-accounts.html
First of all, create a new administrator account and give it a random name and a strong password. A good source for strong passwords is https://www.grc.com/passwords.htm, and you can use this to generate both your Administrator username and its password. Make a note of both the username and password, as you will need these when you need to access this account. Remember to revisit the mentioned link periodically and change the password for maximum security, and remember to make a note of it.
Log into the new administrator account and, with reference to Regedit - Enable or Disable - Vista Forums, download the VBS file as mentioned in OPTION ONE. Later, you will be able to disable/enable the registry editor by following the instructions in the Tutorial. Don't disable it yet, as you still need it enabled for the rest of this procedure.
Now go to Accounts and make all other accounts STANDARD (there should only be one Administrator account on your system). Login to each of the other accounts in turn and, with reference to Command Prompt - Enable or Disable - Vista Forums, disable the command prompt for each of the accounts using OPTION THREE. I suggest that you disable both the prompt and scripts.
Log back into your Administrator account and download the files mentioned in OPTION ONE at both of these Tutorials: Log On with User Name and Password and Control Panel - Enable or Disable - Vista Forums.
You can also follow the instructions here Parental Controls - Set Time Limits and set time restrictions so that he is only able to access/log in at certain times. You can also restrict his access to certain programs by following this Tutorial: Parental Controls - Allow or Block Specific Programs
Execute the following files in the order shown (see the above-mentioned Tutorials for instructions):
Restrict Access:
Disable_Control_Panel.reg
Log_On_with_User_Name_and_Password.reg
Enable-Disable_regedit.vbs
Restore Access:
Enable-Disable_regedit.vbs
Enable_Control_Panel.reg
Log_On_with_Default_Password_Only.reg
Remember to restict access again once you have finished doing what you are doing that requires such access.
If, after doing all this, your son is still managing to circumvent the security, then you need to take firm steps and deny him access to the computer for a period of time. I suggest a minimum of 48hrs, increasing by 24hrs each time he circumvents the security. If he continues to circumvent the security, then you need to be looking at a longer period of access denial, such as a week or even a month. He needs to learn that access to your computer is a privilege and not a right, and, as it is your computer, you have the last word on what can and cannot be done on it.
Don't forget to change your password if your security is circumvented, irrespective of when you last changed it.
Last edited by Dwarf; 20 Jul 2011 at 10:30.
I would still get him his own Computer after his restriction is lifted, why should you have to go and disable all kinds of services ect and put a damper on your own user experience. doesnt sound very fun.
One of my main concernes would be why my security software didnt stop the 68 viruses before they infected my machine? And How I got infected? was it a site that was visited? was it pirated software? Could my machine still be infected?
Here are some resources for you to read
READ & RUN ME FIRST Malware Removal Guide (incl. spyware, virus, trojan, hijacker)
Warning about Porn, Keygens, Cracks, and other Illegal Software
And one of the most important ones How to Protect yourself from malware!
The How to protect guide does not cover Virtualization software like Sandboxie, Sandboxie runs your programs in an isolated space which prevents them from making permanent changes to other programs and data in your computer. Or the Comodo Sandbox included in CIS which sandboxes unknown files the first time they are run wich ads an extra layer of protection, or Bufferzone Pro which is free at the moment.
The guide also does not cover HIPS like the Defence + feature in Comodo IS, which I think is vital to keeping a secure machine.
Last edited by Warlockz; 20 Jul 2011 at 11:04.
I'm sorry to disagree with you, Warlocks, but rewarding poor behavior is not the way to solve problems. If he's old enough to get a job, then have him earn his own money and buy one. If he's not old enough to work, then give him some sort of reprimand. I, of course, believe that everyone deserves a second chance. After the reprimand, have a talk with him and let him know that he has one more, and only one more, chance to show that he can act responsibly. I certainly am no expert, so I am giving you only a personal opinion--not expert advice.
Quote