Is "Just close popup windows" an adequate security instruction for users?

Is "Just close popup windows" an adequate security instruction for users? My security officer came to me yesterday, and said the CEO had clicked a "viruses detected, click yes to scan" popup, after which of course his laptop was crawling with viruses. So the SO wants to distribute directions on how to keep people from making the same mistake.
Asked by: Guest \| Views: 255

Total answers/comments: 1

Comments display order:

Guest [Entry]

Whether you click OK, click cancel, or close the popup, malicious javascript will usually do the same thing either way. One option might be to make a simple program that kills the browser process, put a shortcut on the desktop/quicklaunch, and name it 'CLICK HERE IF THERE'S A WEIRD POPUP'.