prevent my kids from downloading files from the Internet

[kyrathaba]

I have two boys, ages 11 and 9 who, despite past punishment and dire threats have continued to download silly games, toolbars, etc., onto their desktop computer.  Last night I spent over 2 hours in Safe mode running Anti-Maleware and SuperAntiSpyware.  Found and (supposedly) got rid of many trojans, adware, and at least one worm.  It's still not behaving right.

My question, without getting into a discussion of whether they should even BE allowed to have a computer (which my wife and I are also discussing) is:

Is there a way, without shelling out money for specialized software, to prevent them from downloading games, toolbars, etc.?  I still want the computer to be able to download images for webpages, Windows Updates, etc.  I just don't want them to be able to manually download anything.

The kids' computer runs Windows XP SP3 (I know, I know... but it only has 512 Mb of RAM).

[Bamse]

You could start by blocking with dns-service. What they download is probably not covered by OpenDNS so use DynDns http://www.dyndns.com/services/dynguide/ Has the advantage over similar services that you can whitelist/blacklist domains. Set dns service up in router if possible. OpenDNS is way more slick and probably better with parental control but they save "malware" protection for those with too much money to spend. If you need safe mode and antimalware programs to clean up Opendns will not be enough.

Norton has dns-service http://nortondns.com/ and toolbar protection, Safe Web Lite http://safeweb.norton.com/

Also WOT http://www.mywot.com/ will block many unfortunate downloads. Set it up so only RED sites are affected. No warnings, chose block. That way less FPs. They can ignore WOT of course but then they want trouble WOT can insert colored lamps in Google searches and elsewhere - you can turn all that off. Can be as transparent as dns blocking.

Microsoft also have Live Family Safety http://explore.live....s-live-family-safety Don't know how well it filters but obviously more direct control or spying.

Not sure of impact on XP but they should have course not be logged in as Admin. Limited users for them.

Also a good idea to remove ads, probably what they click on to get toolbars. If IE is main browser try Simple Adblock http://simple-adblock.com/ works just as good as Adblock on Firefox.  

[cmpm]

The family safety built into XP, will kill most everything-not recommended.

The rest of Bamse's suggestions are good.

I'd make a backup of the entire system when it's in good shape.
Save yourself the trouble of hunting down changes.
http://www.macrium.com/reflectfree.asp
Macrium free can make a full backup to anywhere you want it.
And it will erase and restore.

I have two boys as well and they started even earlier then those ages.
Which I would say, it is good for them to learn the computer and keyboard early.
But also to learn how to fix what they screwed up.

Malwarebytes and SAS are worth the money for full time protection imo.
Also a firewall will make them think. Plenty of free ones there.

[lanux128]

iirc there's a registry edit that disables file downloads in Internet Explorer. maybe you can try that.. also set the PC on limited user account.

[Bamse]

Yes a Windows wizard can probably lock down any computer to military standards. But when it comes to kids of that age I think it is better to promote freedom and problems than only boring freedom If they screw up best protection could be to take a long long time fixing computer. If you make it impossible to get in trouble, in worst case white list method, or just re-image computer they do not learn how to manage internet and incomings. Easy to say when not a parent perhaps

[daddydave]

Easy to say when not a parent perhaps

-Bamse (September 22, 2010, 09:06 AM)

Ya think?

Before I was a parent, if had any inkling of what an ass I sounded like trying to impose my parenting theories on people who were parents in the real world, I would have kept my little bobblehead mouth shut.

But yeah, there is no way to realize that until you are an actual parent.

That said, I actually AGREE with you, but occasionally you gotta be the mean daddy or the mean mommy if things are not working.

ahhh..sorry if this comes off as offensive. This is normally the type of thread I like to hit ignore on before I say something I'll regret.   (and I think I'll do so now, and I will check back in about a month.) And this is not directed at you personally. I have real life people in mind.

[cmpm]

The earlier kids learn computers the better.
The good bad and ugly.

Keeping a safe guard such as a clean backup is wise.

And, there is no way they are not going to get trouble using the net.
Without locking it down to 'no fun at all'.

Adblock is good, but teaching how to handle the trouble that slips past that is good too.
Just my dealings with it come to mind. And my opinions.

Soon enough they will be teaching you some things that you didn't know about some computer stuff.

[cmpm]

daddydave,

Not offensive at all to me or Bamse's input.

[Darwin]

Before I was a parent, if had any inkling of what an ass I sounded like trying to impose my parenting theories on people who were parents in the real world, I would have kept my little bobblehead mouth shut.

-daddydave (September 22, 2010, 09:21 AM)

I cringe when I think about some of the attitudes I had pre-fatherhood...

Regarding the OP, are there any FOSS equivalents of DeepFreeze? Just a thought.

[Bamse]

You are not offensive daddydave, you just don't did not know too much about how to deal with internet and you became aware when facing reality, like having a kid. Could not care less before right? I am not offensive either Things are not working as of now but perhaps less than nazi-methods (from kids perspective) should be tried out? They actually do work, adblocking is probably enough.

[sajman99]

I use a free version of Returnil (from a few years back) which doesn't have the expanded functionality of the newer versions.

With system virtualization software such as Returnil your kids can go absolutely nuts downloading and installing all the crap they can find, but when the computer is rebooted all their junk will be gone!

Once the parent illustrates this shocker to the child, he/she may understand the futility of their actions. In their minds, it might be--why bother, Dad's just gonna delete everything anyway. Or maybe they will download even more knowing you won't be mad. Hard to say.

[app103]

If you are running XP or Vista, you could use Windows SteadyState (freeware). It's as close as you are going to get to a free version of DeepFreeze. It was intended for protecting computers in schools, libraries, internet cafes, and anywhere else where a heavy duty solution is required.

Once installed and properly configured, all you have to do is reboot to get rid of any changes anyone makes to the system...meaning all the malware and toolbars acquired during a session will just disappear. No more worrying from you.

But you better grab a copy soon, because Microsoft is discontinuing access to download it at the end of this year.

So, grab all 3 of these files and make a good backup of them:

• setup
• FAQ
• handbook

[kyrathaba]

Thank you all for your replies.  Even after a factory restore, it's still acting screwy at boot-up, which makes me thing that there's a hardware issue (AVG, Anti-Malware Bytes, and SuperAntiSpyware all report clean).

When I got it running as good as possible, I put a 30-day trial of Folder Guard on it and disabled downloading.  Seems to be working.

I will also look into SteadyState.  Thanks for the links, app.

[kyrathaba]

Got rid of Folder Guard.  Installed and configured SteadyState, and it seems to be working well.

Also, removed modem and router from kids' bedroom, and they now connect via a Linksys USB wireless device that picks up the router.  Moved router and modem to our room, where they'll be safer.  Am about to get a very nice computer desk/bookshelves hand-made of oak by a guy I went to high school with...

[Arizona Hot]

Does anyone here have any experience with PowerShadow? I have it and have used it a few times on sites I deemed risky.

[Renegade]

I cringe when I think about some of the attitudes I had pre-fatherhood...

-Darwin (September 22, 2010, 11:08 AM)

This seems to be a common thing here.

Since I'm not a father yet, I'm just going to jot down some thoughts and see later on if I think I was an ass...

Hmmm... Buy some nanny software, lock down the computer, disallow all installers... Yep. That's my general attitude at the moment. Let the kid run all over the net for information, but keep the time online set to something like an hour or 2 per day, or whatever seems reasonable at the time. Limit game time as well with the nanny software.

I wonder what I'll think later on...