administrative / limited dual accounts & the internet

In Windows XP, in addition to an administrative account, I have a limited account for the internet (to help safeguard against malware).

Should I log off of my administrative account before accessing the net via my limited account?

And is there any way for a website to infect you other than actually going to that website?

 

Yes, the safest is to log off, then back on under the limited account. (I believe you can also change users in the control panel, but I don't have XP in front of me).

On the second, merely visiting a web-site doesn't infect you, it's usually what you do or respond to when you get there. Like a pop-up warning you of an infection, click here to scan, etc. And most viruses require admin privileges to install.

I believe this is true as long as you've got your OS, anti-virus, firewall, and browser protection settings on and up to date. As least, I've never seen an infection by a visit, not including tracking cookies. But, that is still a list requiring constant vigilance.

Maybe somebody knows better?:wave:wave

 

This is no longer true. There are drive-by infections. Scary.
http://www.ebankingabersicher.ch/index.php?option=com_content&view=article&id=75&Itemid=0&lang=en
http://www.nocdesigns.com/driveby_white_paper.htm