removeAdmin-ConfigurationThe removeAdmin utility is pretty neat… It runs your web browser with limited user privileges, in effect it keeps it from writing to your ‘Program Files’ and ‘Windows’ directories. Many malware programs copy themselves to one (or both) of these directories. In effect it can help reduce the amount of malware that gets installed on your system by restricting write access to these directories (they are where important system files are kept and are often an attack vector for malware).

The default installer will attempt to create secure shortcuts on your desktop for Internet Explorer and Firefox web browser. It is my understanding that it can be configured (with minimal effort) to run with other browsers as well. Here is a screenshot example showing how I have it configured for use with Firefox.

1. Install RemoveAdmin.
2. (Optional: for if you are using a browser other than Firefox or IE) If you right click on your favorite browser icon you should see a ‘Properties’ entry, click it.
3. (Optional: for if you are using a browser other than Firefox or IE) Under the ‘Shortcut’ tab you can edit the ‘Target’ to run most browsers with reduced privileges. You just need to edit the ‘Target’ and ‘Start in’ entries (here is a screenshot example for Firefox and a text example configuration for several browsers [Opera, Safari, IE, and Firefox]).
4. (Optional: for if you are using a browser other than Firefox or IE) Click the ‘OK’ button and you are done! I rename the icon (right click and select ‘Rename’) to ‘Secure xxxx’ (ex.: ‘Secure Firefox’) so that you know that you am running it with reduced privileges.

You can test it by trying to download something to either your ‘Program Files’ or ‘Windows’ directories, if it fails then you have configured it correctly (removeAdmin should configure Firefox and IE when you install it so the extra steps are really only for Opera and Safari).

If you run a browser that supports plug-ins or addons I suggest: ‘NoScript‘ and ‘AdBlock Plus‘ to remove ads and let me control what scripts websites can run on my system (and help reduce vulnerabilities from ‘drive by’ malware installs).

Here are some example configurations for various web browsers (NOTE: Only tested with Firefox and Internet Explorer 6 as these are the only browsers I have installed).

You can get removeAdmin from Download.com.
I think that it can be used with other software as well…
It is freeware and runs on Windows XP and Windows 2000.