Rocket Tab Ads Installed in a "Standard User" W7

[thescreensavers]

I just redid an office computer and wanted to make sure there are no further issues with it.

The User isnt very computer smart so they usually let adware install when installing other things.

So I made sure to make an Admin Account and make this person a "Standard User"

Well first time they used the computer somehow they installed Rocket Tab Ads

this shocks me as how come they were able to install this?
How can I avoid this in the future?

Edit: I see the ad aware was installed to the users profile... so limited account wouldn't stop this. How can I stop this from happening? Removing Full Control of the profile? Read only?

 

[postmortemIA]

yeah, chrome for example, for long time did not need admin rights to install itself. it would simply install itself in user profile, where write and execute rights exist for the user. so many malware/adware runs ok in limited accounts. it is easy to remove because it is already contained to locations where limited user has write access.
there are many things you can do
1. group policy to white list executables that are allowed to run
2. disable running executables from temporary folders
3. disable 3rd party extensions in internet explorer (or browser of your choice)
etc.
unfortunately, windows makes this exceptionally difficult to do by hand, and always there will be some holes that some adware will exploit.