How Antivirus Solutions are Bypassed
Tagged with: Hosting & Maintenance, Technical Tips & FAQs
Most of us feel that if we have a good anti-virus and anti-malware solution installed on our computers, we are protected and safe. However, often that’s not the case. Almost every breach via malicious code is done on a brand-name anti-virus or malware-protected system.
The attack works because of how most people use their Windows systems. Most people have a single account that they use to log on and do everything from installing software to conducting personal banking business. Often, that account is a local administrator on the system. When you do this, every single item you open, be it websites, applications, or email attachments, opens with elevated privileges and allows the malicious code greater ability to bypass security. Malicious code can hide in protected system files and hidden directories excluded from scanning. However, for it to do so requires that code to have advanced permissions.
To better protect yourself, you should utilize 2 different accounts. The first is your initial setup account and a Windows Administrator account. This “admin” account should only be used to install new software, run elevated commands such as regedit, and install Windows updates. Additionally, you need another account that is not an administrator account that you will use most of the time. This will be the account you use daily to do everything else like checking email, surfing the internet, and conducting business. When using the “non-admin” account, you may need to use elevated privileges, and you will be able to enter the credentials of the “admin” account to do so.
By separating your admin account from your user account, you significantly limit the ability of malicious code to execute on your computer. Below are general support steps to create a “non-admin” account on a Windows 10 system and add an extra layer of protection to your accounts.
How to Create Limited-Privilege User Accounts in Windows 10
- Click the Windows icon in your taskbar.
- Select Settings.
- Click the Accounts section.
- From the Accounts menu, select Family & other users.
- Click Add someone else to this PC.
- Select I don’t have this person’s sign-in information.
- Select Add a user without a Microsoft account.
- Enter a username, type the account’s password twice, enter a clue, and select Next.
- Click the Windows icon.
- Select the User icon at the upper left corner of the Start menu.
- Select the new user. You’ll then sign in to your account with your password from Step 8.
You’re now using a non-administrator account! Contact our team for more help with system support questions.
