# How do I Prevent a Child From Downloading Viruses? **URL:** \ **Category:** Factual Questions\ **Created:** [September 11, 2012, 12:59pm UTC](https://boards.straightdope.com/t/how-do-i-prevent-a-child-from-downloading-viruses/634389 "2012-09-11T12:59:49Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![brazil84](https://avatars.discourse-cdn.com/v4/letter/b/8491ac/32.png) [@brazil84](https://boards.straightdope.com/u/brazil84)\ **Post date:** [September 11, 2012, 12:59pm UTC](https://boards.straightdope.com/t/how-do-i-prevent-a-child-from-downloading-viruses/634389/1 "2012-09-11T12:59:49Z")
Is there any way to set things up so a child can safely search the internet for school work without harming the computer? ---
**Author:** ![The\_Hamster\_King](https://avatars.discourse-cdn.com/v4/letter/t/8edcca/32.png) [@The\_Hamster\_King](https://boards.straightdope.com/u/The_Hamster_King)\ **Post date:** [September 11, 2012, 1:32pm UTC](https://boards.straightdope.com/t/how-do-i-prevent-a-child-from-downloading-viruses/634389/2 "2012-09-11T13:32:50Z")
I’ve had great luck with using Firefox and installing the NoScript add-on. Basically it shuts off all Java scripts globally and then allows you turn them back on on a website-by-website basis. You can surf most of the web just fine with scripts turned off, and if your kid does need to access to a site that requires Java they can ask you to check it out before switching scripting back on. ---
**Author:** ![Alley\_Dweller](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/alley_dweller/32/430_2.png) [@Alley\_Dweller](https://boards.straightdope.com/u/Alley_Dweller)\ **Post date:** [September 11, 2012, 1:43pm UTC](https://boards.straightdope.com/t/how-do-i-prevent-a-child-from-downloading-viruses/634389/3 "2012-09-11T13:43:28Z")
Use sandbox software such as [Sandboxie](http://www.sandboxie.com/) or the paid version of [Avast!](http://www.avast.com/en-us/free-antivirus-download). However, the downside is that the child will not be able to save anything to the computer permanently. When the session ends, everything written to the disk will be lost. ---
**Author:** ![Mr.Kobayashi](https://avatars.discourse-cdn.com/v4/letter/m/4af34b/32.png) [@Mr.Kobayashi](https://boards.straightdope.com/u/Mr.Kobayashi)\ **Post date:** [September 11, 2012, 1:46pm UTC](https://boards.straightdope.com/t/how-do-i-prevent-a-child-from-downloading-viruses/634389/4 "2012-09-11T13:46:26Z")
> [@The\_Hamster\_King](#): > > I’ve had great luck with using Firefox and installing the NoScript add-on. Basically it shuts off all Java scripts globally and then allows you turn them back on on a website-by-website basis. You can surf most of the web just fine with scripts turned off, and if your kid does need to access to a site that requires Java they can ask you to check it out before switching scripting back on. Second that. Installing AdBlock plus isn’t a bad idea either. ---
**Author:** ![Quartz](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/quartz/32/267_2.png) [@Quartz](https://boards.straightdope.com/u/Quartz)\ **Post date:** [September 11, 2012, 1:48pm UTC](https://boards.straightdope.com/t/how-do-i-prevent-a-child-from-downloading-viruses/634389/5 "2012-09-11T13:48:40Z")
The first thing to do is to not let them run as an admin-level user. Secondly, turn UAC on full for the child’s user id if the computer runs Vista or Windows 7. ---
**Author:** ![Kinthalis](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/kinthalis/32/16084_2.png) [@Kinthalis](https://boards.straightdope.com/u/Kinthalis)\ **Post date:** [September 11, 2012, 2:45pm UTC](https://boards.straightdope.com/t/how-do-i-prevent-a-child-from-downloading-viruses/634389/6 "2012-09-11T14:45:27Z")
Yep, a non-admin account would be the best security measure (assuming a modern OS like vista or windows 7/8). I believe most modern browser sandbox their sessions, but I’d turn off flash before bothering with javascript. Flash is usually the gateway to hackers, Javascript not so. Java, is different, it requires a plugin just like flash, and could be exploitable. ---
**Author:** ![control-z](https://avatars.discourse-cdn.com/v4/letter/c/eada6e/32.png) [@control-z](https://boards.straightdope.com/u/control-z)\ **Post date:** [September 11, 2012, 2:45pm UTC](https://boards.straightdope.com/t/how-do-i-prevent-a-child-from-downloading-viruses/634389/7 "2012-09-11T14:45:57Z")
> [@Alley\_Dweller](#): > > Use sandbox software such as [Sandboxie](http://www.sandboxie.com/) or the paid version of [Avast!](http://www.avast.com/en-us/free-antivirus-download). > > However, the downside is that the child will not be able to save anything to the computer permanently. When the session ends, everything written to the disk will be lost. Second this. If they don’t need to download files, Sandboxie is awesome. It will keep the browser completely separate from the rest of the PC. ---
**Author:** ![Mdcastle](https://avatars.discourse-cdn.com/v4/letter/m/958977/32.png) [@Mdcastle](https://boards.straightdope.com/u/Mdcastle)\ **Post date:** [September 11, 2012, 5:07pm UTC](https://boards.straightdope.com/t/how-do-i-prevent-a-child-from-downloading-viruses/634389/8 "2012-09-11T17:07:48Z")
User account control isn’t a reliable way of preventing viruses. I’ve gotten malware from the major newspaper website in my city with a non-admin account and IE sandboxing enabled. ---
**Author:** ![Myglaren](https://avatars.discourse-cdn.com/v4/letter/m/f1d935/32.png) [@Myglaren](https://boards.straightdope.com/u/Myglaren)\ **Post date:** [September 11, 2012, 6:22pm UTC](https://boards.straightdope.com/t/how-do-i-prevent-a-child-from-downloading-viruses/634389/9 "2012-09-11T18:22:58Z")
Install Linux! Well, somebody had to say it. All my grandchildren can use Ubuntu with no problems whatsoever and no tuition, in fact they show Granny how do do stuff. Viruses? What viruses! ---
**Author:** ![Quartz](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/quartz/32/267_2.png) [@Quartz](https://boards.straightdope.com/u/Quartz)\ **Post date:** [September 11, 2012, 6:51pm UTC](https://boards.straightdope.com/t/how-do-i-prevent-a-child-from-downloading-viruses/634389/10 "2012-09-11T18:51:12Z")
> [@Mdcastleman](#): > > User account control isn’t a reliable way of preventing viruses. Agreed, but it’s a vital part of a layered defence. ---
**Author:** ![Blakeyrat](https://avatars.discourse-cdn.com/v4/letter/b/ecd19e/32.png) [@Blakeyrat](https://boards.straightdope.com/u/Blakeyrat)\ **Post date:** [September 11, 2012, 8:37pm UTC](https://boards.straightdope.com/t/how-do-i-prevent-a-child-from-downloading-viruses/634389/11 "2012-09-11T20:37:18Z")
> [@brazil84](#): > > Is there any way to set things up so a child can safely search the internet for school work without harming the computer? I 100% concur that by far the best thing to do is to give them their own user account, make sure it does \*not \*have administrative permissions, and never, ever give them the password to your (administrative) user account. That’s 90% of the battle right there, and that advice applies equally well to Windows, OS X and Linux. Beyond that I’d ask what OS you’re using, because they all have different features and problems that come into play here. ---
**Author:** ![Kenm](https://avatars.discourse-cdn.com/v4/letter/k/bc79bd/32.png) [@Kenm](https://boards.straightdope.com/u/Kenm)\ **Post date:** [September 11, 2012, 10:38pm UTC](https://boards.straightdope.com/t/how-do-i-prevent-a-child-from-downloading-viruses/634389/12 "2012-09-11T22:38:51Z")
> [@The\_Hamster\_King](#): > > I’ve had great luck with using Firefox and installing the NoScript add-on. Basically it shuts off all Java scripts globally and then allows you turn them back on on a website-by-website basis. You can surf most of the web just fine with scripts turned off, and if your kid does need to access to a site that requires Java they can ask you to check it out before switching scripting back on. Don’t confuse Java with JavaScript, though. They are separate entities. Writing a reply on this board with JavaScript turned off, for example, causes paragraph problems. There aren’t any, at least with Firefox on my Mac, though it may look like there are when typing. Java, though, on or off, makes no difference. ---
**Author:** ![Quartz](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/quartz/32/267_2.png) [@Quartz](https://boards.straightdope.com/u/Quartz)\ **Post date:** [September 11, 2012, 11:32pm UTC](https://boards.straightdope.com/t/how-do-i-prevent-a-child-from-downloading-viruses/634389/13 "2012-09-11T23:32:08Z")
Probably the very best way is to spend time with the child and teach them. ---
**Author:** ![carnivorousplant](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/carnivorousplant/32/3563_2.png) [@carnivorousplant](https://boards.straightdope.com/u/carnivorousplant)\ **Post date:** [September 11, 2012, 11:40pm UTC](https://boards.straightdope.com/t/how-do-i-prevent-a-child-from-downloading-viruses/634389/14 "2012-09-11T23:40:12Z")
I second giving them a limited account. If the PC is infected, only the limited account is compromised. You can move the saved stuff, delete the limited account and make a hew one. This is one of the last resorts I use at work, but I have to dealt with irate users. 🙂 ---
**Author:** ![Senegoid](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/senegoid/32/6606_2.png) [@Senegoid](https://boards.straightdope.com/u/Senegoid)\ **Post date:** [September 12, 2012, 5:40am UTC](https://boards.straightdope.com/t/how-do-i-prevent-a-child-from-downloading-viruses/634389/15 "2012-09-12T05:40:52Z")
> [@control-z](#): > > Second this. If they don’t need to download files, Sandboxie is awesome. It will keep the browser completely separate from the rest of the PC. Another similar approach: Install a virtual machine, and work in that. Last I looked, you can still get a freeware version of Oracle (formerly Sun) Virtual Box from [https://www.virtualbox.org/](https://www.virtualbox.org/) The entire virtual machine constitutes a sandbox, and when it gets contaminated you can just delete the whole thing and start over. You can also transfer files into and out of your VM (between it and the surrounding “host” machine, or even between your VM and other machines on your LAN), once you decide that a file is safe. ---
**Author:** ![AndyLee](https://avatars.discourse-cdn.com/v4/letter/a/898d66/32.png) [@AndyLee](https://boards.straightdope.com/u/AndyLee)\ **Post date:** [September 12, 2012, 4:50pm UTC](https://boards.straightdope.com/t/how-do-i-prevent-a-child-from-downloading-viruses/634389/16 "2012-09-12T16:50:35Z")
It’s called dial up. Text loads slow but it loads fast enough to read. And viruses will download too but it’ll take a long time and be fairly obvious that that’s something is wrong. Of course it’s not fool proof but it helps a lot. ---
**Author:** ![Covered\_In\_Bees](https://avatars.discourse-cdn.com/v4/letter/c/7ab992/32.png) [@Covered\_In\_Bees](https://boards.straightdope.com/u/Covered_In_Bees)\ **Post date:** [September 12, 2012, 4:59pm UTC](https://boards.straightdope.com/t/how-do-i-prevent-a-child-from-downloading-viruses/634389/17 "2012-09-12T16:59:40Z")
Dial-up even has the side bonus of being so worthless now that the child won’t even want to be on the internet. ---
**Author:** ![johnpost](https://avatars.discourse-cdn.com/v4/letter/j/f17d59/32.png) [@johnpost](https://boards.straightdope.com/u/johnpost)\ **Post date:** [September 12, 2012, 5:33pm UTC](https://boards.straightdope.com/t/how-do-i-prevent-a-child-from-downloading-viruses/634389/18 "2012-09-12T17:33:04Z")
> [@Mdcastleman](#): > > User account control isn’t a reliable way of preventing viruses. that’s true. a users account could prevent you from having to redo the computer from the start though. also user account for kids keeps them from causing damage to programs or data. if you care about the condition of the computer even if the kid is the only user, they should be in a user account. ---
**Author:** ![drachillix](https://avatars.discourse-cdn.com/v4/letter/d/48db29/32.png) [@drachillix](https://boards.straightdope.com/u/drachillix)\ **Post date:** [September 12, 2012, 6:00pm UTC](https://boards.straightdope.com/t/how-do-i-prevent-a-child-from-downloading-viruses/634389/19 "2012-09-12T18:00:05Z")
> [@Senegoid](#): > > Another similar approach: Install a virtual machine, and work in that. Last I looked, you can still get a freeware version of Oracle (formerly Sun) Virtual Box from [https://www.virtualbox.org/](https://www.virtualbox.org/) > > The entire virtual machine constitutes a sandbox, and when it gets contaminated you can just delete the whole thing and start over. You can also transfer files into and out of your VM (between it and the surrounding “host” machine, or even between your VM and other machines on your LAN), once you decide that a file is safe. This is a damn near bulletproof way to do things and its a little techie, but you can get the PC to open a VM as part of the start sequence. You keep a Clean copy of the VM set aside and if Jr viruses out a VM, delete virused VM, make copy of clean VM, launch clean VM… Another fairly simple method for bulletproof browsing in a live CD, no matter what happens you are a reboot away from back to normal. ---
**Author:** ![Blakeyrat](https://avatars.discourse-cdn.com/v4/letter/b/ecd19e/32.png) [@Blakeyrat](https://boards.straightdope.com/u/Blakeyrat)\ **Post date:** [September 12, 2012, 6:16pm UTC](https://boards.straightdope.com/t/how-do-i-prevent-a-child-from-downloading-viruses/634389/20 "2012-09-12T18:16:01Z")
> [@Senegoid](#): > > Another similar approach: Install a virtual machine, and work in that. Last I looked, you can still get a freeware version of Oracle (formerly Sun) Virtual Box from [https://www.virtualbox.org/](https://www.virtualbox.org/) > > The entire virtual machine constitutes a sandbox, and when it gets contaminated you can just delete the whole thing and start over. You can also transfer files into and out of your VM (between it and the surrounding “host” machine, or even between your VM and other machines on your LAN), once you decide that a file is safe. But there’s no way to force your kid to use the VM. With a user account, you can force them to use it by not giving them the password to any other account. [Next page](https://boards.straightdope.com/t/how-do-i-prevent-a-child-from-downloading-viruses/634389.md?page=2)