Friday, April 6, 2007

DropMyRights, or make Internet Explorer safer

As you know, Internet Explorer (rather, the vulnerability it) is a major source of contamination of the computer Trojans and Spyware. Previously, I described a difficult way to start IE human limited user. But recently opened a much simpler way. So is a program from Microsoft-DropMyRights. However, to take advantage of it, only those who have a Windows XP.
Now, close to the case. First you download the software Microsoft. A direct link to download. After downloading set it somewhere not much depth. For example C:\DropMyRights\ . After installation, you can remove all of the files except DropMyRights.exe. Now go to the label through which normally run IE, click on it, right-click and choose Properties. "Set Target (Object)" will be written something like "C:\Program Files\Internet Explorer\iexplore.exe" . So in front of this need to provide a path to DropMyRights. In my case amended reference will be : C:\DropMyRights\DropMyRights.exe "C:\Program Files\Internet Explorer\iexplore.exe". After that, in the Run ("Window") below to make the Minimized that you do not appear terminal window, and click OK. If all of a sudden after this manipulation will change the icon label-at the same point in its properties click on the "Change icon (the change)", and switch it back on the IE icon. That's it. Now that anything harmful to your computer using IE hole will be nearly impossible.
I warn! No update Windows, and all software and Active-X of IE, launched in a way not. To install updates Active-X components, ejavascript:void(0)
Publishtc. need to run IE "clean" label, which label non-DropMyRights.
The work outlines the following : If IE running from the admin, it just takes it all right too, leaving only those people who have limited user. That it is not possible to write in the registry, in the system directory, etc. In general acts as RunAS only comfort : You do not need to submit the password and user choice. As a result, if a vulnerability in IE will be launched trojan, it will not be able to be registered in the register or copy itself in the system directory. That , in most cases, will not be able to do anything.

1 comment:

Anonymous said...

Thank you for this information. I have been using DropMyRights.exe for some time. Although it does help, it does not block the ability to write to the HKCU part of the registry or the ability to read / write to the Documents and Settings\All Users or ...\-current user- profiles. You can verify this by creating shortcuts for C:\windows\regedit.exe and C:\windows\explorer.exe with DropMyRights.exe first in the path as you describe. When you test this, you will see that there are no restrictions on these areas. However, if you run the program as a constrained user, using the "C" switch with DropMyRights.exe, these areas will be restricted, but the programs being used will probably not work (Explorer will not, but I believe that Regedit will, for example; Firefox will not even load with the "C" switch).

CC