Kids download bad things, help?

[RBlass]

We have a Windows 7 Home Premium 64bit.
My son keeps downloading useless stuff, and recently I've found out that he's gotten 68 viruses onto the computer. I've deleted them all, of course.
I've tried making him a new account with Windows Family Safety (a non-administrator,) but he's somehow figured out how to bypass this and still download things. He said something along the lines of "It was easy, I just made myself an administrator."

Please, what can I do to not allow him to download anything? Un-bypassable?

Thank you so much.

 

[Maguscreed]

It can be done, but it involves editing some local group and security policies.
It's not exactly my area.
It can be done though.

 

[PooMan UK]

Hiya and welcome to the forums

Have a looky here K9 Web Protection - Free Internet Filter and Parental Control Software really good and it's free (doesn't matter which account he's logged onto) ..

 

[seavixen32]

Welcome to Windows Seven Forums.

Open a Guest account and see if he can crack that.

Either that or you'll have to invoke the ultimate deterrent and chop his hands off.

 

[RBlass]

I've found out that the way he's making himself an administrator is by going into the command prompt and typing in:

"net user admin."

then,

type in 'net user (admin name space *.)

then,

type in pass (pass will not show on tab) retype pass

then,

logout and login the acc with your pass

He's also found out how to go into the command prompt and change all the passwords on all accounts (including admin) to 123.

Any way to not allow him to do this? And/Or disable him from getting onto the command prompt?

 

[Britton30]

Sorry to be blunt. This is a parenting issue, not how to keep a child from a computer with security. Heck kids learn how to by-pass all sorts of lock-outs in school form their friends.
Two things to do, ban all the child's PC use or get him his own. If it gets screwed up due to his poor judgement, oh well.

You can put a password on BIOs and shut down when you leave it. If he tries to get into the case to disable that, there is a problem.

 

[theog]

You could install Norton, setup Parental Controls, when your son trys to bypass the controls, you will recieve a email.

 

[Thorsen]

Another possible way of locking it down for when he is grounded is to encrypt the HDD with Truecrypt and it will require a password on boot. TrueCrypt - Free Open-Source On-The-Fly Disk Encryption Software for Windows 7/Vista/XP, Mac OS X and Linux

I think the BIOS password can be bypassed as well

 

[Warlockz]

Maybe try something like Faronics Deep Freeze, It undoes anything changed on the machine when you restart your machine, you can password protect it and your son cant disable or uninstall it without the password. Unless he boots the machine with a live CD and deletes the program files...

Or if it was me I would take Britton30s advice and get him his own Computer, you would be surprised how cheap you can find one nowadays like on Craigslist or even a refurbished machine from Microcenter, then I would encrypt my machine with a pass and keyfile using DiskCryptor, so they would never be able to access it period nomatter what kind of hack they tried to use.

 

[James Colbert]

Reward his bad behavior by getting him his own computer or just using a workaround? Not here, not ever. That would merely teach him that he can get what he wants simply by doing whatever he wants. Boundries.

I would solve this problem by removing his access to the computer altogether. He would lose other priviledges as well. He won't like it, but if your goal is to be liked, you both lose the battle. He doesn't need you to be his friend and he can't respect a parent who won't parent. This is a battle you need to win for both of your sakes.

After clarity is achieved and he understands that respect is inextricably tied to priviledge, you can restore his access to the computer, having initiated a bios password and a policy for computer access and use. You should also remove his ability to access the command prompt, registry and the like. A 3rd party software may help you here.

James

 

[CreepinJesus]

I've found out that the way he's making himself an administrator is by going into the command prompt and typing in:

"net user admin."

then,

type in 'net user (admin name space *.)

then,

type in pass (pass will not show on tab) retype pass

then,

logout and login the acc with your pass

He's also found out how to go into the command prompt and change all the passwords on all accounts (including admin) to 123.

Any way to not allow him to do this? And/Or disable him from getting onto the command prompt?

If he's doing all that, he knows your admin password (if there is one). So change (or assign) a password to the admin accounts and it should be sorted. However, this won't stop him from downloading nasty files (which should be blocked automatically by the AV program), but it will stop him from installing anything nasty.

 

[LiquidSnak]

I don't believe that he would be able to run an elevated command prompt from the guest account, and if you change your password (use a random string of letters and numbers, or a password algorithm), then they shouldn't be able to change anything critical. Parental controls will help, and you can also set times when he is allowed online. Limiting his access I think is the first step. If that doesn't work, I would eliminate it alltogether, by either means mentioned before, or an extremely effective one, take the hard drive cable when you leave.

 

[seavixen32]

Did you try setting up a Guest account as suggested earlier?

 

[SlasherIT]

Just discipline the kid, thats what I think you should do... If not, just put a password on the BIOS, he can't get through that, but remember, if you forget the BIOS password... You are screwed.

 

[XenX]

if you forget the bios password, you're not screwed, you can reset the CMOS cell. script kiddies rofl

 

[Heyyou]

I had a similar problem with my Grand daughter, who played games on line and got infected big time. I actually had to re-install windows once, and spent a lot of time with Malwarebytes and SAS. The solution was to install a virtual app called Shadow Defender. She was instructed to start it each time she used the computer. If the computer did get infected re-booting cleared it. No problems since. You can pick the virtual app of your choice like Sandboxie as an example.
If your child thinks it's funny to get around your efforts, perhaps he shouldn't have a computer until he is a little older. Good luck.

 

[Frank1]

Sorry to be blunt. This is a parenting issue, not how to keep a child from a computer with security. Heck kids learn how to by-pass all sorts of lock-outs in school form their friends.
Two things to do, ban all the child's PC use or get him his own. If it gets screwed up due to his poor judgement, oh well.

You can put a password on BIOs and shut down when you leave it. If he tries to get into the case to disable that, there is a problem.

I have to agree with this. If you can't control what your son does on the computer, then you may have a bigger problem than viruses on your system. I, also, hate to be too blunt and I know that it may not be easy. Being a parent is sometimes difficult. But you need to be able to have some control over his behavior.

 

[Dwarf]

Accounts Tutorial and Links: http://www.sevenforums.com/tutorials/2974-user-accounts.html

First of all, create a new administrator account and give it a random name and a strong password. A good source for strong passwords is https://www.grc.com/passwords.htm, and you can use this to generate both your Administrator username and its password. Make a note of both the username and password, as you will need these when you need to access this account. Remember to revisit the mentioned link periodically and change the password for maximum security, and remember to make a note of it.

Log into the new administrator account and, with reference to Regedit - Enable or Disable - Vista Forums, download the VBS file as mentioned in OPTION ONE. Later, you will be able to disable/enable the registry editor by following the instructions in the Tutorial. Don't disable it yet, as you still need it enabled for the rest of this procedure.

Now go to Accounts and make all other accounts STANDARD (there should only be one Administrator account on your system). Login to each of the other accounts in turn and, with reference to Command Prompt - Enable or Disable - Vista Forums, disable the command prompt for each of the accounts using OPTION THREE. I suggest that you disable both the prompt and scripts.

Log back into your Administrator account and download the files mentioned in OPTION ONE at both of these Tutorials: http://www.sevenforums.com/tutorials/61650-log-user-name-password.html and Control Panel - Enable or Disable - Vista Forums.

You can also follow the instructions here http://www.sevenforums.com/tutorials/54369-parental-controls-set-time-limits.html and set time restrictions so that he is only able to access/log in at certain times. You can also restrict his access to certain programs by following this Tutorial: http://www.sevenforums.com/tutorials/54397-parental-controls-allow-block-specific-programs.html

Execute the following files in the order shown (see the above-mentioned Tutorials for instructions):

Restrict Access:

Disable_Control_Panel.reg
Log_On_with_User_Name_and_Password.reg
Enable-Disable_regedit.vbs

Restore Access:

Enable-Disable_regedit.vbs
Enable_Control_Panel.reg
Log_On_with_Default_Password_Only.reg

Remember to restict access again once you have finished doing what you are doing that requires such access.

If, after doing all this, your son is still managing to circumvent the security, then you need to take firm steps and deny him access to the computer for a period of time. I suggest a minimum of 48hrs, increasing by 24hrs each time he circumvents the security. If he continues to circumvent the security, then you need to be looking at a longer period of access denial, such as a week or even a month. He needs to learn that access to your computer is a privilege and not a right, and, as it is your computer, you have the last word on what can and cannot be done on it.

Don't forget to change your password if your security is circumvented, irrespective of when you last changed it.

 

[Warlockz]

I would still get him his own Computer after his restriction is lifted, why should you have to go and disable all kinds of services ect and put a damper on your own user experience. doesnt sound very fun.

One of my main concernes would be why my security software didnt stop the 68 viruses before they infected my machine? And How I got infected? was it a site that was visited? was it pirated software? Could my machine still be infected?

Here are some resources for you to read

READ & RUN ME FIRST Malware Removal Guide (incl. spyware, virus, trojan, hijacker)

Warning about Porn, Keygens, Cracks, and other Illegal Software

And one of the most important ones How to Protect yourself from malware!

The How to protect guide does not cover Virtualization software like Sandboxie, Sandboxie runs your programs in an isolated space which prevents them from making permanent changes to other programs and data in your computer. Or the Comodo Sandbox included in CIS which sandboxes unknown files the first time they are run wich ads an extra layer of protection, or Bufferzone Pro which is free at the moment.

The guide also does not cover HIPS like the Defence + feature in Comodo IS, which I think is vital to keeping a secure machine.

 

[Frank1]

I would still get him his own Computer after his restriction is lifted, why should you have to go and disable all kinds of services ect and put a damper on your own user experience. doesnt sound very fun.

I'm sorry to disagree with you, Warlocks, but rewarding poor behavior is not the way to solve problems. If he's old enough to get a job, then have him earn his own money and buy one. If he's not old enough to work, then give him some sort of reprimand. I, of course, believe that everyone deserves a second chance. After the reprimand, have a talk with him and let him know that he has one more, and only one more, chance to show that he can act responsibly. I certainly am no expert, so I am giving you only a personal opinion--not expert advice.