Joe Babb;
You will need to tighten up the security level for ActiveX controls, in the Internet Zone, for Internet Explorer, or else do what I did; switch to using Mozilla Firefox as your browser and be done with driveby downloads (no ActiveX at all).
Anyway, back to MSIE: Assuming that you use version IE 6.0+ with all current patches and Service Pack 1 installed, click on the "Tools" menu item, then on "Internet Options," then on "Advanced," on the Internet Properties page.
When the Advanced Options tab opens
UNCHECK these options:
1: Enable Install On Demand (Internet Explorer)
2: Enable Install On Demand (Other)
3: Enable third-party browser extensions
Click
APPLY, but,
DO NOT click OK yet!
Next, click on the "Security" tab. Select the Internet Zone Globe, if it isn't already selected. This activates either the Security Level Slider, and/or a button labeled "Custom Level." Use that button to SELECT the following "radio option" choices:
1: Download signed ActiveX controls -->
Prompt
2: Download unsigned ActiveX controls -->
Disable
3: Initialize and script ActiveX controls not marked as safe -->
Disable
4: Run ActiveX controls and plugins -->
Prompt or Enable. I use Enable with no problems, because "Prompt" will drive you nuts with popup challenges for legitimate controls. If you never intend to use a ActiveX control, like used by Windows Update, and several online virus scanners uses, then Disable this option. I wouldn't disable this option as long as you keep up to date with Microsoft patches.
5: Ditto for Script ActiveX controls marked safe for scripting, Enable, or Prompt.
There are other otions that can be tightened up, or not, according to whether or not you use a firewall, and if you are up to date with all critical patches, hotfixes and service packs.
When you are done selecting the safety level of you choice, click OK, then APPLY, then OK, to close the Internet Properties box.
Close all open IE browsers, then re-open to put your new restrictions into action.
Download the current version of, install and Update
SpywareBlaster, from
www.javacoolsoftware.com . It is like a flu shot; it innoculates IE against ActiveX driveby installers/downloaders/xxx Dialers, etc. Tell it to enable ALL protection for Internet Explorer!
Also download, install and update the newest version of
Spybot Search & Destroy, found at -
http://www.safer-networking.org/en/download/index.html
After checking for and downloading all available updates, click on Immunize, and Immunize all unprotect items. Also select to protect Internet Explorer against Bad Downloads. Then, click "Search & Destroy" and "Search For Problems" - Select ALL, then click "Fix Selected Problems."
Wiz<FONT SIZE=1 COLOR="#8e236b"><p align=CENTER>[This message was edited by Wiz Feinberg on 26 November 2004 at 10:41 AM.]</p></FONT>