How to never accidentally run Malware: Must Have Windows Tweaks

[@notme232]

file extensions should be enabled by default, the fact that it is even an option is a major windows security flaw.

[@nabieladrian]

​@osniko How can you expect such tiny little startup like MS to simply allow rename A file, not THE file. Of course they can't.

[@IIGrayfoxII]

@osnikoThis was an issue in the XP days, where the whole filename and extension was selected, but since vista the name part is selected and you must manually move the cursor to the extension part.

[@alphatech__]

File extension doesn't have to be at the end of the file ,it can be in the middle, like apdf.exe can be exepdf.a

[@TheLukemcdaniel]

I'm okay with it being an /option/, but it should be an opt-IN not an opt-OUT.

[@TheLukemcdaniel]

@@alphatech__ True. I think I have seen some do that, where they name it "totallynotsketchy.pdf.scr"

[@AviatingRandom]

I would argue it’s best to turn “ask me where to save each file” on because while it may be a little annoying, it will show you the file extension when you download it and it’s useful to ensure a site isn’t downloading files in the background.

[@joepjoep9531]

This is about not instinctively open it in your browser by taking away the button if you don’t you still can

[@rizkyadiyanto7922]

browsers these days actualy warn you if you download exes.

[@theycallmeken]

Great suggestion

[@portman8909]

I have on not just for that but I don’t want to clutter my downloads folder. I only use it for exe. The rest go into other folders.

[@crimsonkarma13]

@@rizkyadiyanto7922 does it? I have only downloaded trustable exe so I have yet to see that error

[@TheNkatsar]

Showing file extensions is the first tip I would suggest, it would immediately distinguish between the 2 files in the video

[@chrisseal1467]

Yes, why is this not step one in the video. The rest of the things are unnecessary.

[@x-user3462]

​​@@chrisseal1467there also maybe file somexe.pdf that is actually an exe (som\u202Efdp.exe) with RTLO in filename, so showing file type in table view is a great tip.

[@gramblor1]

I don’t think he’d have a very long video if he did that. I still found it useful, though.

[@samfkt]

And turning preview pane off..... it can execute malware jyst by previewing it

[@dgggghfhfhfg]

i can spoof the extensions in 10 seconds. also, windows IS malware, if you run windows, youre already selling your privacy, why even care about hackers?

[@lil----lil]

The people that are most in need of watching this video aren't watching it. The people that are hyper-aware of virus/scams (me) are watching it. That's life.

[@Inventors_Toolbox]

Worst thing Microsoft ever did was hide the file extension by default. Would that really have confused anyone? What they should set explorer to do is have all executable show up in an obvious contrast color or highlight scheme with a 'caution this is an app' identifier next to it. Make people look and go why is that highlighted like that.

[@UNcommonSenseAUS]

Microsoft is owned by Israel, so nevermind clicking a pdf, if you're running Windows you're already infected with state sponsored malware

[@DezXereanas]

Wasn't it default in windows xp?

[@ayoCC]

Could maybe show it separately or inside the file icon or recolored as well so that it pops out.

[@Inventors_Toolbox]

@@ayoCCExactly!, the question then becomes if you and I can see this almost immediately multiple people at Microsoft must have as well. They then decided that, no were not going to implement this obvious and simple fix. My question becomes, why? There must be some overriding motivation to not do this, I just don't see what it could be.

[@paulfrayne6519]

Directory opus does this, and sadly it is not cheap to purchase a license in some places

[@TheCocoaDaddy]

I'm fortunate I've never "accidentally" clicked or run an infected file and I've never been hit, personally, with a malware infection. Several of my friends have but I haven't. I think videos like this can really be helpful so thanks for posting!

[@youravghuman5231]

The fact that you watched this video means you are not noob, so the probability of this happening to you is lower. You're not lucky, you're smart enough to use a pc unlike the majority of people.

[@UNcommonSenseAUS]

Well you're obviously not reverse engineering enough malwarw

[@MrMarbles]

Send this to your grandma

[@sdwone]

Think before you click! And scan ANYTHING that you download from the Internet! Be paranoid about it, and opt for a guilty, until proven innocent stance! Works for me!

[@UNcommonSenseAUS]

@@sdwone virus total is a useful tool...

[@AyataHiragi]

I always found Microsofts idea to hide the extensions ridiculous, it was always shown in 95 98 and 2000 after all

[@varski76]

That is the reason more of these attack are like this as normal users don't use the details view anymore

[@tarwod1098]

Most users don't know what it means anyway and they only get irritated

[@ghostnoise1711]

98 SE, hidden by default

[@e1woqf]

@@tarwod1098 Nobody should use a computer without some basic knowledge.

[@dgggghfhfhfg]

i can spoof the extensions in 10 seconds. also, windows IS malware, if you run windows, youre already selling your privacy, why even care about hackers?

[@TeaBurn]

Former game dev here. I've heard horror stories of my colleagues who think they're interacting with a potential business investor, open what they thought was a pdf to check the details in the proposal, and end up losing access to the only PC in the studio that has the one license key for a program that we needed to essentually make sure we can deliver the product on time. They did not make the deadline. Goes to show you should never put all your eggs into one basket. This is a good video to get us used to changing our mindset, and hopefully get rid bad habits of jumping the gun, clicking something we assume to be what it is. I personally use the "Ask to save" and scrutinize it. Way too many instances of saving an image preview, only for it to be a webp I have no use for.

[@arnoldthegreat4138]

holy shit gonna be careful next time.

[@npsit1]

Anytime I have to log into a new computer, I always turn on file extensions. It's a habit from using DOS, I think.. It takes me 10 to 15 minutes changing all the settings from default - because I hate most of the default Windows settings.

[@pleskbruce]

Yes! And many other tweaks, such as resetting registry values, will speed up windows, allow me to reset file locations, etc.

[@dgggghfhfhfg]

i can spoof the extensions in 10 seconds. also, windows IS malware, if you run windows, youre already selling your privacy, why even care about hackers?

[@B0tAcH1]

Adding to this, you can also use the group by type function for files. adding that clear separation that you can collapse and expand at will is very helpful

[@dgggghfhfhfg]

i can spoof the extensions in 10 seconds. also, windows IS malware, if you run windows, youre already selling your privacy, why even care about hackers?

[@wolf1438]

In our country we got bear issues - picking up trash. So they are trying to develop better trash bins. There was an article interview with one of the developer when he was asked question why he just simply do not make more sophisticated mechanism. Here is his answer - you know the boundaries between the smartest bear and dumbest human is pretty narrow. In other words if I set up in our company group policy to show file extensions in few days I will have a dozens of tickets on IT people complaining they cannot open their powerpoint, excel or word document, because during renaming process they deleted file extension.

[@ghoulbuster1]

Sub 80 IQ barely functioning brain 😂

[@romanm.4763]

That developer (a smartest bear?) could write a renaming function which prevents to change a file extension or at least warnings about it

[@dgggghfhfhfg]

lmfao. the truth in this hurts

[@ZeldagigafanMatthew]

Windows gives warnings when you're about to change the extension, and in more modern releases leaves the extension unselected by default when you go to rename the file.

[@leecowell8165]

linux doesn't care it examines the header to determine the default app to use to open it.. but you can override it.

[@x-user3462]

Configuring windows explorer to show file extensions is the first thing I do after windows installation. Show type in the table view is also a great tip because of the RTLO attack.

[@samfkt]

And disabling preview pane, it can execute malware

[@filipetrujeira3359]

@@samfkt Do you have any sources on that?

[@dgggghfhfhfg]

i can spoof the extensions in 10 seconds. also, windows IS malware, if you run windows, youre already selling your privacy, why even care about hackers?

[@Aranimda]

Never ever open ANY file when extensions are hidden.

[@dgggghfhfhfg]

i can spoof the extensions in 10 seconds. also, windows IS malware, if you run windows, youre already selling your privacy, why even care about hackers?

[@photoshopman1972]

The only issue with removing the download prompts on an browser is if you have very poor internet connection, the user will not know if the download has failed and will not allow the user to have a chance to restart the download. On a legit file that is. Guess there is really no full proof way here. It also assumes that the user also knows the differences as well. An older person or person with very little computer knowledge will not know that difference. The true way is for the computer to be smarter than the individual using it with system policies and software that can prevent things like this from occurring. Still I do like some of the tips you provide here and thank you for tips!

[@crollwtide9452]

2:05 This is why I dislike hiding file extensions...it makes it a bit more difficult to tell what the file type is at a glance. If you're not looking at a detail view that shows the Type column, this can be potentially confusing for an end user.

[@noneofyourbusiness1304]

I highly disagree with turning off "Ask to Save" in browsers. Not only can it show the type of file you are even saving, it also can stop random files being downloaded automatically if you happen to click a wrong link, since it now always tries to ask about the file, overall giving the chance of saving you from even having the chance to click the file to begin with.

[@TheLukemcdaniel]

Maybe turn it off temporarily if you're scraping a ton of files from one site real quick, but ftmp, the daily driver setting should be to ask for any downloaded file.

[@mienoni5330]

I can see why he's suggesting this, because it creates the habit of you needing to open explorer before opening anything, meaning you WILL see the extensionand the type for sure (which many non teccy people don't), but yeah it's never a good idea to not be able to stop something to be downloaded.

[@MathiasYmagnus]

Yup. What OP(Nonya) typed

[@ArkenGAMES]

Yeah I am using Chrome and it always shows the file type. If that can be faked too I'm done for.

[@SlinkyD]

​@@ArkenGAMES File extensions can be bogus. Gotta check the magic and default program for each file type. The fact that 30+ years later this is still a problem because of basic computer knowledge being too troublesome to teach (not really) is a problem yet everything being computerized.

[@itenthusiast5988]

Three things I like about your channel 1. Informative for both noobs and pros. 2. Ads placed at start or at the end. 3. Explaining things with an example with less distraction and without external softwares Interesting of them all using your sponsor to showcase your example

[@Seriously_Unserious]

As somebody who's studied network security and as a web developer who makes sure client's websites are secure and had clients get hacked before, I can definitely say these simple steps are a great first line of defense. May hacks like the one that took down Linus Tech Tips last fall could have been prevented just by doing these simple steps.

[@pirateofpacific]

Since you studied network security, let me ask you this. Can I block port 443 and 80 on router without affecting my ability to mange router from web browser on a local PC that has wired connection to router and wifi disabled? I am getting a lot of DoS Attacks on port 443 when I check router log.

[@Ilurk247]

@@pirateofpacific Ask your question to google like this "without affecting my ability to mange router from web browser on a local PC that has wired connection to router and wifi disabled can I block port 443 and 80 on router?" The answer for your particular setup will be on the list of options. (I think probably port forwarding is the answer, but best to see what you need.)

[@izgler]

@@pirateofpacificdepending on what you mean by “block”. If you truly block all 443 and 80 traffic you won’t be able to use the internet. Decent routers should all drop the DDOS packets anyway. If you aren’t hosting anything on 443 or 80 you’ll have nothing to worry about.

[@dgggghfhfhfg]

@@pirateofpacific just send your login page to a defferet port

[@kubbbercraft]

file name extensions enabled is just in general a practical must for so many usecases. mostly to figure out what fileformats you are trying to open where or what they can, especially with photos or videos

[@johnmarmalade4345]

Great video for security awareness! I just keep the "show downloads when a download starts" switched on so that I know when something is downloading when there shouldn't be anything downloading. Using this, I find out about the strange javascript downloads some sites drop on my computer. I've also been using all the other tips since a few years ago. I also scan files typically infected with malware like PDFs, Microsoft office files, and executables before I run them. Kept me pretty safe the past few years.

[@dgggghfhfhfg]

i can spoof the extensions in 10 seconds. also, windows IS malware, if you run windows, youre already selling your privacy, why even care about hackers?

[@ansfridaeyowulfsdottir8095]

I always set my machine to display extensions and file type and always View in Details. It really annoys me when LoseDoze changes it back to Icons or some other view for certain file types. It just wastes my time. {:o:O:}

[@samfkt]

Preview pane should be disabled too

[@dgggghfhfhfg]

i can spoof the extensions in 10 seconds. also, windows IS malware, if you run windows, youre already selling your privacy, why even care about hackers?

[@miro007ist]

your videos put me right to sleep thank you so much. I haven't been able to sleep for the past three years and your videos fixed my sleep

[@lensy6]

its insane that view file extensions not only isn't the default but that its even an option to hide it at all

[@PatrickBijvoet]

The company who build my computer, must have seen your video. All settings where as you said. But thanks for making me aware.

[@alexl7213]

The first thing I do when I sit in front of a new computer is go to file explorer >visualization options> activate - show hidden folders, units, and files, and deactivate - hide extensions+hide operating system protected files. Then I slap an usb drive in it, copy a word file into it and check the usb drive. Most viruses will immediately add their poison into the usb drive, sign of an already infected windows pc.

[@stultuses]

You check the extension but even if they change the type, try opening it up in notepad Notepad never opens it up as an application, even pdf's open up as a pure text file and you can look at the contents header and see a pdf type in the file with pdf version number etc. An application will open as a text file, and you can quickly see the data section of the file and the payload etc, and you can then exit and delete the file

[@DigitalDissident]

no one's be opening or analysing file contents in Notepad. impractical & cannot be understood

[@Anjum9694]

You mean a hex editor? If were going through that route might as well use the proper tool

[@dgggghfhfhfg]

lol, the 2453678765435678 notepad haks that have been evolving since windows 95 would disagree lm fao

[@featheredskeptic1301]

I've always had my system display file extensions and haven't been tricked into running mailware this way. I guess the reason why Windows doesn't come like that by default is because less experienced users can accidently change or delete a file extension while renaming a file, and not know what happened, or how to fix it.

[@ТоварищКамрадовСоциалистКоммун]

it won't happen "accidently" cause explorer asks if you want to change a file extension. But yeah this might be a "security" feature for masses, just in case

[@featheredskeptic1301]

@@ТоварищКамрадовСоциалистКоммун People rarely read warnings like that. It's not beyond the realm of probability that they're just going to click "Ok", and then wonder what happened to their file.

[@TimVels]

I don't understand why people use icon/thumbnails, it is much faster to go through details. Since I have used detail view I had stuck with it for many years now. Never had an issue with any virus.

[@Sonario648]

I use Icon thumbnail for images and videos that I've saved. It helps me know which image/video is what.

[@TimVels]

@@Sonario648 That's good. But for all the files if you use this view you will take time to search through when looking for something. You give a try for detailed view.

[@amaggard14]

I’ve already learned all this the hard way 15 years ago, but I think every kid or teen should learn this before using a computer. Also getting an AdBlocker like ublock origin, an antivirus with realtime protection and shady website alerts like malwarebytes (and the extension), and knowing about fake download buttons on those crappy link shortener websites is also very important for them to know. Learn from my mistakes and don’t kill 2 laptops, and have to factory reset your pc at least 4 different times like I had to when I was younger.

[@ThePretender1]

05:10 This is my default folder view since windows XP, a long time i have reached this conclusion. People are so unaware of the risks! 😥😥

[@inthewoods6271]

Great video, Id only be hesitant to enable preview files since in some cases it was used to launch the malicious file

[@robinweiland7533]

Really useful, espeacially after I realized that just enabling extensions might make me even more vulnerable to tricks with rtlo characters in filenames

[@PGW90RU14]

I recommend change the setting of "File Explorer" to show file extension, and scan any file before open it using right click menu on a file.

[@dgggghfhfhfg]

i can spoof the extensions in 10 seconds. also, windows IS malware, if you run windows, youre already selling your privacy, why even care about hackers?

[@Hutch2Much]

the fact that a malware attack happened RIGHT AFTER windows 95 turned off “show file extensions” by default and they DIDNT immediately switch it back is unbelievable

[@MegaSunspark]

That's just a coincidence. You think an average Joe/Jane blow would know what they are even looking at when it comes to extensions?

[@SMJSmoK]

The sad thing is that we used to joke about "Linkin Park-Numb.mp3.exe" 15 years ago, and apparently, it's still relevant. I guess that Microsoft didn't get the memo that hiding file extensions by default is a horrible idea.

[@portman8909]

Even with that many users will be fooled into downloading it without a check from the IT team.

[@PlutoniumDG]

I always have "ask me where to save each file" on. That way i can see what I'm downloading before it even downloads. One time i clicked on a fake link that automatically tried to download something, thanks to my setting i could prevent that from happening

[@robbiepilot]

Excellent advice - thanks! Have made these changes and tweaks. Must get into cast-iron routine with downloads.

[@nakfan]

Great tips 👍 Thanks too for giving a short glimpse of Malwarebytes.

[@D3K018]

Windows is actively screwing up users by hiding the extensions by default, I never understood the logic of it, it's too annoying! Every linux OS has extensions by default...

[@hifiandrew]

Two other things, if you're really on top of things. Have a completely separate local account for admin rights & do not disable UAC.

[@ТоварищКамрадовСоциалистКоммун]

you are right. he messed with UAC and also probably with MS defender settings

[@juwright1949]

Excellent! Just subscribed. Everything makes total sense. Thanks

[@redvex2114]

File extensions by default is a thing, but also remove the large icons viewing mode. Who uses that ? It's like asking for malware.

[@ZeldagigafanMatthew]

Easier to make sure you hit the one you intend with large icons.

[@joinglobalnetworks]

Most important thing is that to make sure the computer mouse is functioning without any problems in its buttons because sometime if if you click one the file using your moue your mouse buttons got dirt between then there is a chance that you doouble clickj the file/application without noticing that you aleady did that, so the teporary solution is that you still can use your keyboard to move up/down with your arrow keys on your keyboard and when use your keyboard to investigate do normale task whether riht click or double click but with the keyboard capabilities, this will ensure that you don't make anyting wring by mistake to your pc.

[@dgggghfhfhfg]

if you think thats gonna help youre crazy bro. windows IS malware

[@jacfmx1882]

And can a normal PDF include malware? For example, I usually open PDF files on the web browser by default (so the icon changes for the web browser icon instead the one showed in the video) but can I PDF, which displays content, still include malware? P.S. Thanks for the tips

[@Tomas9970_1]

Not sure if it's possible to have an infected PDF (with correct extension) but I think the icon of an EXE file can be dynamically generated (just like picture thumbnails) so the malicious executable could easily look up what is the default app for opening a PDF on your computer and set it's own icon to look exactly the same.

[@machintrucGaming]

Or even have an exe files disguising as a .pdf file extension ? So windows tells you it's a pdf, but when you click on it instead of opening pdf reader it launches itself ? Are we really safer if we display the extension ?

[@vandecasa3795]

@@machintrucGaming No. That won't work. If file extension is indeed pdf then Windows will open it with whatever your default pdf viewer is.

[@tablettablete186]

Yes, it can. In fact, Adobe thought for some reason that is was a good ideia to add a scripting langauge to a PDF document (is is similar to JS). I will later add the name of the scripting langauge, because I don't remember right now. Edit: Adobe added actual support for JavaScrpit... 💀

[@ТоварищКамрадовСоциалистКоммун]

scripts macros and like this are a huge security flaw for any office suit, as well as for pdf suit. Small correction: if file has a .pdf extention, then windows will ATTEMPT to open it with your default pdf reader. However your .pdf file may have some metadata which will open some more information about the file, and windows may automatically find a right way to proceed. Displaying the extension, and - not less important - the size, and other metadata will give you an idea about the file and might become an important signal about the way how to handle it. So answer is Yes, displaying extension, size, creation date, permissions etc are a sign of a good practice for file handling As for JS, and other scripts and macros, for most users it would be advisable to go through your office/adobe or other suits that you use and carefully look through all the security/privacy settings and disable/harden your settings. Disable JS by default. You will get prompt if your file asks to run the script. Disable internet access. You will be asked if file has a link or requires connection. And so on

[@SMASHINGblargharghar]

This is a nice reminder for me. Most users have no idea about shit that seems instinctive to me. I should share this channel with family...

[@juliocesarpereira4325]

Some of these steps I've always done such as always open a recently downloaded file on windows explorer download folder. As I watched the video, I changed the view settings to show the extension. Very useful tips. Thanks.

[@ironkrieg3368]

Thanks for posting this. :) Made a couple of the changes recommended.

[@thelastgeneration102]

Yes! These kinds of details for security are much welcome! Thank you!

[@markoshun]

Totally agree with viewing file extensions before opening new files. But I prefer to use the browser’s download window where it shows the file with extension and I can choose to view it in it’s destination folder before running it. Eliminates a couple steps. And I often like to see download progress and keep track of where file is going. Seems like the browsers have already addressed these issues.. with a couple less steps.

[@rursus8354]

Running Linux here, teaching Windows users how to program and manage their files. This idea of hiding the file extension to the user annoys me no end. Pupils complaining about their hosts files not working (needed for some tasks in network programming) and the file browser hiding the fact that the name is actually hosts.txt. In Linux you cannot get rid of viewing the file extension, you cannot change the icon of the file, and you cannot run exes from the file browser!

[@morarucosmin6776]

When using windows....first, go into Control Panel -> Folder options -> Disable "Hide extensions for known file types"

[@dgggghfhfhfg]

when using wndows, understand that your entire OS is malware from a malicious company. then stop using it.

[@chaos.....]

@@dgggghfhfhfg ok cope

[@TechNow-z7m]

Awsome video! I already had vew file extentions on as i am a software developer and i like that feture already. Nice tips!

[@dgggghfhfhfg]

you develop on windows? no wonder so many softwaare companies cant keep their corporate secrets secret

[@jvanderhorst2011]

Really good video, viewing file ext is a MUST.

[@kane_lives]

Sorry, the entire premise is just wrong. If your big organization relies on individual non-technical workers to be paying attention every minute of every day to which types of files they open, as a deterrence strategy not to get infected, then you are dead lost already. Due to the law of large numbers someone will eventually be inattentive due to some kind of human factor: they were sick/sleepy/inattentive/having stressful family/personal relationship/stressful deadline issues that day and just clicked the infected file without giving security considerations a thought. Big organizations have dedicated security departments with dedicated enterprise security software to prevent exactly this scenario from happening.

[@aryannarotra7487]

You can also group files by their type, there's a banner on top, separating the application from the rest of the PDF/RTF/DOC file or whatever

[@rolandschlossmacher1859]

1. I ever have enabled the option details 2. I never save sensible files on the internal disk 3. I never open for me unknown files 4. I use as much as possible my - especially for bank account transactions - my Mac or my Unix-Based-Machine (with Mate GUI) ….yes I know Mac is based on Unix …I mean my dedicated Unix machine. 5. If I need to use my Windows PC I do the recommended security checks / updates as much as possible 6. If this is a file I need and still unsure safe or not - I transfer it to a special Notebook with minimal software equipped that machine I can re-build quickly Hope this will help as much as possible but I cannot close out my self to make failure too

[@davebrzeski]

One of the advantages to being a computer user since the early 90s is that I was used to all those settings, and didn't like the new less secure defaults when Microsoft introduced them, so I've always changed them back out of preference.

[@GYTCommnts]

I simply can't understand WHY file extensions are hidden on Windows as default. It's stupid and ridiculous.

[@vandecasa3795]

Microsoft desperately wants to copy the look and feel of macOS. The difference is: macOS doesn't need file extensions in the first place because it looks at the file header to determine the file type.

[@xav9793]

My gf reccomend me this and I'm surprised me and you both use an Asus brand PC, shout-out to her and you my good sir!

[@MR_NeKu]

I accidentally opened malware I thought it was a shortcut made by my sister because it was a sister's flash drive. After my PC turned into chaos I checked the drive and I saw that it was an executable file. I didn't see it the first time LoL after that I already enabled the file extension 😅😅😢😢

[@crollwtide9452]

This, in a nutshell, is why you should never open ANY e-mail attachments from unknown/unverifiable sources or from parties you do not expect to hear from. Delete them on the spot.

[@makojuicedaniel9307]

Never look at files in large like that, always look at them in details.

[@PizzaInGame]

I have a question Is exe file with pdf icon, same as pdf virus who infected linustech ? I heard the pdf not in exe extension, but literally pdf, open like pdf, but has malware inside it Second question Are Windows defender not enough ?

[@IIGrayfoxII]

Yeah, you can hide malware in files and as soon as they open, they also execute.

[@PizzaInGame]

​@@IIGrayfoxII windows defender cant detect it ?

[@IIGrayfoxII]

@@PizzaInGameDefender is shit. Plus any anti malware does not do much when you gave something PERMISSION to run

[@PizzaInGame]

@@IIGrayfoxII may explain little bit ? Give permission to malware to run ? Like click the pdf ?

[@IIGrayfoxII]

@@PizzaInGameYeah, opening a file is giving it permission to run since you told it to run.

[@kittentheboss2796]

I have been saying this for ages but Microsoft should enable file extensions by default on their crapy os. I don't care you don't use it or you screw something up. File extensions help users learn different file types early on and are just extremely helpful. Especially for windows 7.

[@jpdemer5]

Most of these suggestions are equally applicable to MacOS machines. The fact that an exe file won't run at all is a bit an added advantage, and the OS does warn you if you double-click on a downloaded application.

[@abdullahaljalil5218]

It's a small tweak but very useful and helpful to have the habit not to rely on thumbnails

[@technicallyme]

Couldn't the preview window run script on for instance a word document with a macro

[@CoolJosh3k]

Windows default prefers “user friendly”, but is it really user friendly when they have such a bad experience that running an anti-virus is considered a must by many? 🤔

[@dONALDBLOOD]

If it's still on my PC at this time, which I would be quite surprised about having proper security software, I usually right-click and scan it with my security software. It's amazing that windows hides file extensions by default since two decades, it's an insanely dangerous practice.

[@juankfayad5788]

If you use other file explorers, check if color filters can be applied to file types. For example, I use Dopus, and every executable file automatically gets a red background.

[@lopzinc]

1:41 the one on the right is slightly brighter, very obvious on the red and the top right corner of the page where it is folded

[@Skeware]

I've always had file extensions turned visible on all my computers over the years, that's one of the first things I do on a new PC. Not only for safety but I also need to see that info quickly while working.

[@ktheodor3968]

Before clicking to open any downloaded file, like a PDF, shouldn't one first right-click on it and run the antivirus/malware software, Windows' own or any such paid software? Wouldn't that save one from any problems? Thanks

[@snazzysailor]

Basic but gold. Thank you for your service.

[@Spark010]

It would be better is Microsoft handled file icons differently ootb

[@frankfields6283]

ABSOLUTELY SPOT ON ! i DO MOST OF THE THINGS THIS GENTLEMAN SUGGESTS AND THEY HELP!!! i LEARNED OVER THE YEARS BY MAKING A FEW BAD MISTAKES TO DO THE SIMPLE THINGS HES SUGGESTING ...DON'T YOU MAKE THE SAME MISTAKES AND FOLLOW THIS MANS ADVICE. THANK YOU!

[@Cesar33-pl]

Another good video for malware security, thank you!

[@abitterberry2149]

YES, thank you !!! I'm forced to harass my entourage because Microsoft chose to hide by default the most important property of a file... Who the F complained about seeing extentions? Even if you're not tech savvy, you've probably heard that .exe can be dangerous, you alse probably know that a pdf ends with .pdf, but you probably don't take the time to go through every settings. Settings pages which are themselves increasingly fragmented and hidden behind layers of menus. This is so frustrating, we're talking about an issue that could be fixed in a few minutes !

[@NinjaRunningWild]

Just turn on “show file extensions”. Barring that, right clicking & going to properties will tell you the details.

[@RudysRetroIntel]

Excellent video and tips! Thanks for sharing

[@mbunds]

These very basic tips are invaluable even for advanced users.

[@dgggghfhfhfg]

i can spoof the extensions in 10 seconds. also, windows IS malware, if you run windows, youre already selling your privacy, why even care about hackers?

[@TroyQwert]

I don't use "type", instead I enable the extensions, always.

[@donturner3239]

Excellent tips, I will share this with my friends.

[@DezXereanas]

My work laptop didn't come with file extensions on by default. They also somehow disabled my ability to turn that option on(group policies maybe?). I had to go fight with those idiots to get it to turned on for me. At least I'm a programmer, so I had 'business justification' otherwise they wouldn't have let me do it.

[@Krlowanigu-mg6eg]

There must be a reason. Probably they spy on employees.

[@portman8909]

@@Krlowanigu-mg6egIt’s company property therefore it’s in our right to track and lockdown said device. We make use of group policies, bios passwords, bitlocker encryption, SSO for their work google account etc. We used to have no restrictions or tracking before but what ends up happening is they start downloading games and if they leave the company take the laptop with them!

[@DaemonForce]

No, do not enable preview. The issues with Explorer and this "feature" are enough to set yourself up with triggering self-executing trojans. Enable detailed view defaults and have a little common sense when reading file types. It will carry you further than probably deserved.

[@sylussquared9724]

preview does not execute any code nor does it visit links Literally all it does it does it read the file and display text and images Nothing more, nothing less If you see someone on ticktock showcasing some insane way to get hacked by previewing malware, its fake

[@DaemonForce]

@@sylussquared9724 Wrong

[@CT-ue4kg]

I follow this guide each time i set up an employee laptop now - thanks

[@justabro2]

I had a virus few months ago. It was just a zip file with exe files and etc in it. i never extracted any of those and never ran any exe file. But few minutes later than screen had red overlay and started to turn dark. I restarted my pc and saw that my monitor some how got damaged ( half of the horizontal pixels were missing one after other ). It again stop my screen and i restarted once more. I immediately deleted the zip and everything went to normal ( expect my monitor). I then tried to send the file to Virusscan and it showed all clear. explorer started download the file to send it to the virusscan site. after 1 minute my pc again started to stop. i could not find the downloaded file and it kept happaning. i tried antivirus . but it stopped all ( even the norton virus remover ). Could repair from windows as the screen kept stopping. My pc after few times when to auto repair. i reinstalled windows from there with keep files and it worked. But my monitor was broken. i also had kaspersky internet security or something like that. premium*.

[@mikinozz]

Thanks very much for this information. I’ve set up my PC accordingly.

[@supecoop]

Simple but effective ideas to make your downloads safe to open. Thanks

[@648]

Edge fortunately already changed the downloaded file behaviour to protect users. You have to explicitly click onto Run file (or similar) now instead of just clicking onto it and having it open instantly.

[@jenb1973]

Very informative! Took me a while to figure out you must be in Edge (not Chrome) to change the download settings. Just wish it had been clarified in the beginning. Thx for the info!

[@Turboflabs]

Was surprised to see you showing off your sponsors older version of Malwarebytes v4 while it recently released v5. So what do you think of the new one, does it perform any better ?

[@StanWu]

macOS or Linux users never worry about this…

[@NobodyNoone-d6w]

Why

[@dotaultimate6607]

Im glad that I'm somehow cannot use large icon to scroll through my files and keep changing my files view as "details" so that i choose the right file with date modified

[@johnrichardson4507]

This is brilliant I have learned how to protect and not accidentally open malware thanks

[@polygonekoma]

This is very valuable. I use those settings for so long time I didnt even thought about it beeing a thing because thats just soooooooo basic things. I can also recommend to not use default browser with you critical logins. Use another browser

[@_lcfiorini]

Instinctively I always modified file viewing options on Windows Explorer to enable me to see the details of each file and sorting them by file type. Another option I always turn on as well is to show file extensions. Just these 2 modifications have been more than enough to avoid me falling for these pests.

[@elirang35]

Does windows security didn't recognize these types of malwares?

[@MeDjezze]

This whole video is just advertisement for Malwarebytes. Microsoft Defender would have detected the malware as well.

[@sutirk]

Microsoft defender and a properly configurer UAC will warn you about running any executable downloaded, specially if not signed. But i do agree that windows default settings make it too easy to not know the actual extension/type of a file before clicking on it

[@ardeof]

I've a question about Windows Defender. Defender has this thing called "Isolated Browsing", or more specifically the Window Defender Application Guard. How effective would that be in preventing viruses? Should I have this enabled?

[@Ilurk247]

It's not 100% effective, you still need anti-virus software but yes it should be enabled.

[@farhangvideo]

This video has a big flaw because it doesn't tell how you have received those two files. This is a very important point because the appearance of the files on the display is different depending how it comes on your system.