I've been given permission to setup the security for my grandmother's new laptop and I had a question about how malware could infect her system:
If I were to have Avast running in aggressive hardened mode (basic anti-exe but it's got a big whitelist and requires little user interaction) and I were to disable Windows Script Host, Powershell and Command Prompt via the registry, what else would malware be able to use to allow itself to infect her system and how would I go about disabling it?
I also plan to disable AutoRun and Macros/ActiveX/OLEs in Microsoft Office.
I also have doubts if this is the right way to secure her. I don't use system hardening myself partly due to laziness and partly due to confidence in my own habits and software (although I could be persuaded to harden my system if it wouldn't have an impact on my day-to-day computing needs). I tend to stay away from most vectors of malware delivery and if malware does somehow find its way onto my system either Avast's sigs will catch it or Comodo Firewall will block its execution. I can't say the same for her though.
Would love to get your answers and opinions.
Edit: She refuses to use an ad blocker for whatever reason. Tried to convince her otherwise but she's steadfast.
If I were to have Avast running in aggressive hardened mode (basic anti-exe but it's got a big whitelist and requires little user interaction) and I were to disable Windows Script Host, Powershell and Command Prompt via the registry, what else would malware be able to use to allow itself to infect her system and how would I go about disabling it?
I also plan to disable AutoRun and Macros/ActiveX/OLEs in Microsoft Office.
I also have doubts if this is the right way to secure her. I don't use system hardening myself partly due to laziness and partly due to confidence in my own habits and software (although I could be persuaded to harden my system if it wouldn't have an impact on my day-to-day computing needs). I tend to stay away from most vectors of malware delivery and if malware does somehow find its way onto my system either Avast's sigs will catch it or Comodo Firewall will block its execution. I can't say the same for her though.
Would love to get your answers and opinions.
Edit: She refuses to use an ad blocker for whatever reason. Tried to convince her otherwise but she's steadfast.
Last edited: