Ensure a Windows PC Never Gets Malware By Whitelisting Applications
A whitelist should be a foolproof way to secure a relative’s PC. Select a handful of approved applications and only allow them to run. If someone using the PC downloads another .exe file, Windows will refuse to run it.