What are ActiveX Controls and are they dangerous?
(From CNet)
From time to time web sites will ask you if you want to load an ActiveX control. Many people worry that having these on their computers could leave them open for attack. Here is a run down on what ActiveX controls are and how you can disable them should you want to.
What are ActiveX controls?
ActiveX controls are defined as software components typically used to enrich web pages by calling on the functionality of locally installed Microsoft applications.
Internet Explorer can use these controls to do things with other programs on your computer, for example, open an excel spreadsheet in a browser window. In order to do this, ActiveX controls need full access to your Windows operating system and this does represent a security risk. An ActiveX control on a malicious web site can direct your browser to download a nasty Trojan that could allow someone to take control of your PC.
Windows XP Service Pack 2 addresses this security risk through that little IE Information bar which pops up at the top of your screen and tells you that it has blocked your access to something or other. Then it gives you choices whether to download or not, or to find out more about the risks.
If a website is repeatedly attempting to download ActiveX controls (or any files) before the page has fully loaded and without you being able to see why they need to do so, then this should wave a red flag. You don't need those controls just to play an audio or video file.
If you have downloaded an ActiveX control for a good reason and now you have left that web site, you can easily disable the control if you no longer need it.
- Click Tools on Internet Explorer's toolbar
- Scroll down to Manage Add-ons from the drop-down menu, then
- Select Enable or Disable add-ons
- The Manage Add-ons Window will now open. Select one of the options under Show to view the ActiveX controls in your computer.
- You can now highlight an ActiveX Control from the list, and either disable it in the Settings box, or delete altogether in the Delete box.
- Press OK to perform the appropriate change.
- Repeat as necessary to remove other controls.
One way to avoid the security risks inherent in ActivX Controls is to switch to a browser that does not rely on that technology. Two excellent alternatives are:
|