What is your security setup these days?

[jmonge]

;D :)

[Kernelwars]

New Setup:
Returnil System Safe
Hitman Pro
Keriver 1-Click Restore

[Ranget]

-{ Quote: "trying SpyShelter Premium again" }-


:thumb: :thumb:

actully i tried the Free Version and it shock me
i did like it
it have something like hips idk it's a bit naggy but naggy mean secure

[tomazyk]

I didn't use AV for years now but will try few to see how they are doing these days.
First one will be NIS 2011 and it will repleace Malware Defender. So my new setup is this:

Resident:
Router with SPI Firewall
Windows 7 firewall
Sandboxie (for browsers)
NIS 2011
Malware Defender
EMET (for internet facing apps and apps that open files)
UAC set on max

On demand:
Hitman PRO
MBAM
Acronis True Image
Sysinspector
Autoruns
Secunia PSI

[Francis93]

Eset Smart Security 5 RC :thumb: :thumb:

[x ZauX x]

Norton gaming edition 2009
Windows firewall

[jmonge]

what i like about spyshelter is the restricted mode:thumb:

[1chaoticadult]

-{ Quote: "what i like about spyshelter is the restricted mode:thumb:" }-

LOL J. You always like restricted mode when you use spyshelter ;D

[tomazyk]

Well, that didn't last long....
Back to my old setup.

[jmonge]

1chaoticadult;D :thumb:

[1chaoticadult]

-{ Quote: "1chaoticadult;D :thumb:" }-

Well its true my friend ;D

[jmonge]

Restricted Mode:thumb: :thumb:

[firzen771]

-{ Quote: "Oh! you can use wsa and avast at the same time. I can assure you that there is no conflict and complement each other. The two are running smoothly in my pc.;)" }-

actually there is a conflict that has been experienced with a few people in the prevx forum, however its not a major one. the problem is that when u have both avast and WRSA installed, u wont see search result ratings that WRSA provides, once u disable avast u can see them again.

but that wasnt why i removed avast, i removed avast cuz i dont like using a lot of security apps running in real-time, its unnecessary IMO.

[jmonge]

good choice man

[The Seeker]

Installed an AV again, just don't feel right not having one. Layered security and all that. Plus, with the good free AVs available, it seems silly not to have one running. Decided on Panda Cloud for the moment as I've read good things about it; running nice and light I must say.

Oh, disabled AppLocker too as I don't like having to run things under Sandboxie as Admin.

[Hungry Man]

Panda is very light.

[Noob]

-{ Quote: "Installed an AV again, just don't feel right not having one." }-
Hahahaha same here ;D
It's a MUST for me :lurking:

[Kid Shamrock]

Real-Time

DefenseWall 3.15
Webroot SA Beta 7.9.0.4
EXE Radar Pro
EMET 2.1

On-Demand

Hitman Pro
MBAM

[Page42]

-{ Quote: "Installed an AV again, just don't feel right not having one. Layered security and all that. Plus, with the good free AVs available, it seems silly not to have one running." }-
-{ Quote: "Hahahaha same here ;D
It's a MUST for me :lurking:" }-
Me too.
There seems to be no drag on my system and I feel much better with VIPRE there.
And isn't that what most people around here all agree on?
That if it makes you feel better, then go with it?
:thumb:

[ExtremeGamerBR]

-{ Quote: "Real-Time

DefenseWall 3.15
Webroot SA Beta 7.9.0.4
EXE Radar Pro
EMET 2.1

On-Demand

Hitman Pro
MBAM" }-
Good setup! :thumb:

[jmonge]

:thumb: agree;D

[jmonge]

i feel naked ;D

[Kernelwars]

-{ Quote: "i feel naked ;D" }-
why you feel that way my good friend?:o

[1chaoticadult]

-{ Quote: "why you feel that way my good friend?:o" }-

Because he is used to having all those apps on his pc ;D

[Kernelwars]

what happened to your sig?:o

[1chaoticadult]

-{ Quote: "what happened to your sig?:o" }-

I deleted it ;D

[Kernelwars]

why my good friend? it increases paranoia ?:doubt:

[1chaoticadult]

-{ Quote: "why my good friend? it increases paranoia ?:doubt:" }-

Increases whose paranoia lol ;D

[Kernelwars]

-{ Quote: "Increases whose paranoia lol ;D" }-
I dont know you tell me? maybe J's paranoia?:argh: :argh:

[jmonge]

;D ;D maybe or i want to very secure

[Kernelwars]

-{ Quote: ";D ;D maybe or i want to very secure" }-
J man you got to start using chrome then;D

[jmonge]

:thumb: good idea;)

[1chaoticadult]

-{ Quote: "I dont know you tell me? maybe J's paranoia?:argh: :argh:" }-

Yep J will be so paranoid he will ask me what my security setup every day. ;D

[jmonge]

:thumb: i only run NoVirusThanks EXE Radar Pro and spyshelter

[jmonge]

maybe i will just run NoVirusThanks EXE Radar Pro

[1chaoticadult]

-{ Quote: ":thumb: i only run NoVirusThanks EXE Radar Pro and spyshelter" }-

This will change ;D

[jmonge]

;D ;D

[Francis93]

DefenseWall Personal Firewall and HIPS 3.15 :thumb: :thumb:

[cm1971]

-{ Quote: "DefenseWall Personal Firewall and HIPS 3.15 Beta :thumb: :thumb:" }-
Nice but why the beta? 3.15 is the current stable release.

[Francis93]

-{ Quote: "Nice but why the beta? 3.15 is the current stable release." }-

Oh sorry, yes, I was using the beta but I didn't know that 3.15 is the current stable release. It's been a loooonngg time indeed. :thumb: :thumb:
Will edit my post after installation.

[Kees1958]

-{ Quote: "oh how I envy people with paid Sandboxie :(" }-

Try GeSWall pro (after trial it becomes free with Pro rules data base). Make sure you install everything with UAC disabled. After GeSWall works, enable UAC. Applying REDIRECT rules on selected directories have the same effect as SBIE (after program shut down it is flushed)

Under UAC the option to change a file from untrusted to trusted does not work. Use the disadvantage of GW (no total file containment) versus DW to make it trusted (with 1806 trick as backup).

Download with browser in Downloads on C, move downloaded file to D:\Install (on other partition) and you will notice the red box on the file icon is gone (but 1806 block is still on).

Beyond Trust service (btservice.exe) and GeSWall service (gswerv.exe) have practically no system impact (GsWall User Interface, gswui.exe uses some CPU on startup, but that's also minimal)

[Yanick]

-{ Quote: "Try GeSWall pro (after trial it becomes free with Pro rules data base). Make sure you install everything with UAC disabled. After GeSWall works, enable UAC. Applying REDIRECT rules on selected directories have the same effect as SBIE (after program shut down it is flushed)

Under UAC the option to change a file from untrusted to trusted does not work. Use the disadvantage of GW (no total file containment) versus DW to make it trusted (with 1806 trick as backup).

Download with browser in Downloads on C, move downloaded file to D:\Install (on other partition) and you will notice the red box on the file icon is gone (but 1806 block is still on).

Beyond Trust service (btservice.exe) and GeSWall service (gswerv.exe) have practically no system impact (GsWall User Interface, gswui.exe uses some CPU on startup, but that's also minimal)" }-

Excellent advice! :thumb:
Gonna set this into anathor comp! Thanks! :thumb:

[RollzRoyce]

Hey guys I just got a new laptop. My school requires we use Symantec Endpoint 11. On top of it I am using Norton DNS and Sandboxie (soon to be paid). I'm planning on using Mr. Brian's applocker ruleset here

http://www.wilderssecurity.com/showpost.php?p=1679077&postcount=7

I've set UAC to high. Any other suggestions on how I setup up Symantec Endpoint or additional programs? I also plan on doing multiplayer gaming on this system and don't want to screw that up with my securty settings.

[Konata Izumi]

-{ Quote: "Applying REDIRECT rules on selected directories have the same effect as SBIE (after program shut down it is flushed)
" }-

thanks I'll try this. Can I make a REDIRECT rule for all inserted USB?

[acr1965]

-{ Quote: "Hey guys I just got a new laptop. My school requires we use Symantec Endpoint 11. On top of it I am using Norton DNS and Sandboxie (soon to be paid). I'm planning on using Mr. Brian's applocker ruleset here

http://www.wilderssecurity.com/showpost.php?p=1679077&postcount=7

I've set UAC to high. Any other suggestions on how I setup up Symantec Endpoint or additional programs? I also plan on doing multiplayer gaming on this system and don't want to screw that up with my securty settings." }-
You may want to add an image program. Personally I had a real headache with Applocker and stopped using it. I would think with SBie you would be fine without Applocker although I'm not sure what limitations of SBie on x64 systems are as of now. I'm sure Applocker works fine for some people but for me it was too much to deal with all the time.

[Eru]

Update:

PC:

Realtime: DefenseWall Personal Firewall + SpyShelter Premium
Web browser: Nightly 8.0a1 PL
BackUp: Keriver 1-Click Restore Free
Password Manager: S10 Password Vault PL

Notebook:

Realtime: Avast! 6 Free Antivirus + SpyShelter Premium + WinPatrol PLUS
Web browser: Google Chrome
Password Manager: S10 Password Vault PL

[adam993]

Online Armor Premium + Vipre Antivirus :thumb:

[jmonge]

running sandboxie again;)

[Page42]

-{ Quote: "Online Armor Premium + Vipre Antivirus :thumb:" }-
Nice!

[Page42]

-{ Quote: "running sandboxie again;)" }-
WTG! 8)

[Hungry Man]

-{ Quote: "running sandboxie again;)" }-
Why ever stop? =p

[treehouse786]

full disk imaging with 9 on-demand scanners..if anything gets through (nothing yet) then i would just put clean image back..fastest setup ever 8)

(firefox hardened)

[RollzRoyce]

-{ Quote: "You may want to add an image program. Personally I had a real headache with Applocker and stopped using it. I would think with SBie you would be fine without Applocker although I'm not sure what limitations of SBie on x64 systems are as of now. I'm sure Applocker works fine for some people but for me it was too much to deal with all the time." }-

Ok. The more I look into setting up the AppLocker Lua+Srp stuff the more complicated it seems. Anyway I think I'm going to use Keriver 1-Click Restore for data backup.

On a side note. I have a External Hard Drive I've been using for a few years on my old comp. that I'm trying to make sure is clean b4 I start using it with my new laptop. I'm testing it on my parents windows xp desktop that I have also been trying to clean. I've scanned both with updated MBAM, Hitman PRO, and SAS and an online scanner. 100% Clean. I just downloaded Emisoft's anti-malware and it found Trojan.Win32.MonderA! on the old desktop. WTF.

[andyman35]

Current set-up on my main daily system:

Realtime: Webroot SecureAnywhere Beta
On-demand: Hitman Pro daily scan,occasional Mbam scans.

Other measures:Sandboxie,EMET.

System Recovery: Comodo Time Machine.

In case of disaster: Macrium Reflect Baseline Image.

[jmonge]

;D ;D :thumb:

[jmonge]

what about sandboxie and hitman pro;)

[jmonge]

trying PEGuard2 ;)

[trjam]

settle in on my Ultimate Solution. ;) light as a whip and very secure.

lets see Kees beat this.:thumb:

[trjam]

this setup reminds me of the "good ole days." :-\

[jmonge]

;) :thumb:

[1chaoticadult]

-{ Quote: "running sandboxie again;)" }-

Again J? LOL.. ;D

[jmonge]

8) ;D i know :) i know;D

[Kernelwars]

-{ Quote: "this setup reminds me of the "good ole days." :-\" }-
trjam is online armor resource friendly?;)

[Kernelwars]

-{ Quote: ";) :thumb:" }-
J did you put all this in one machine or separate machines?:doubt:

[Kernelwars]

-{ Quote: "Again J? LOL.. ;D" }-
I thought u were using MSE..how u liking eset my friend?:)

[trjam]

-{ Quote: "trjam is online armor resource friendly?;)" }-
very, using very little ram.

[Kernelwars]

-{ Quote: "very, using very little ram." }-
i will give the free version a try..thanks trjam :thumb: :argh:

[jmonge]

w0000 sandboxie didnt last that long here;D it conflict with the X-rays pro;D

[1chaoticadult]

-{ Quote: "I thought u were using MSE..how u liking eset my friend?:)" }-

Just removed Eset. Feels more bloated than 4.2 and MSE. Back to MSE for me :P

-{ Quote: "w0000 sandboxie didnt last that long here it conflict with the X-rays pro" }-

whats x-rays pro?

[jmonge]

;D NoVirusThanks EXE Radar Pro;D

[1chaoticadult]

-{ Quote: ";D NoVirusThanks EXE Radar Pro;D" }-

Hahaha x-rays pro huh ;D

[jmonge]

yeap;)

[Hungry Man]

I'd rather sandboxie than novirusthanks =p

[Page42]

Added KeyScrambler Premium.
60-day money back guarantee in place.
:thumb:

[m00nbl00d]

-{ Quote: "Added KeyScrambler Premium.
60-day money back guarantee in place.
:thumb:" }-

I'll cross my fingers, so that nothing bad happens on the 61 day. ;D ;)

[1chaoticadult]

-{ Quote: "I'll cross my fingers, so that nothing bad happens on the 61 day. ;D ;)" }-

Thats usually when something happens. ;D

[Kid Shamrock]

-{ Quote: "w0000 sandboxie didnt last that long here;D it conflict with the X-rays pro;D" }-

How was it conflicting? I've run both together and haven't seen anything strange. ???

[Page42]

-{ Quote: "I'll cross my fingers, so that nothing bad happens on the 61 day. ;D ;)" }-
-{ Quote: "Thats usually when something happens. ;D" }-
Okay, I just asked for a refund.
The dev wanted to know why and I pointed to this thread.
;) ;D 8)

[Hungry Man]

I'm surprised that so many software companies allow for refunds.

[Page42]

Not me, man.
I wouldn't have purchased without that option
and vendors know it.
The good ones have confidence in their product... like Sandboxie, which you ought to buy one of these days.
:o

[1chaoticadult]

-{ Quote: "Okay, I just asked for a refund.
The dev wanted to know why and I pointed to this thread.
;) ;D 8)" }-

LOL Page42. Too funny. That was quick ;D

[acr1965]

Avast AV Pro, MBAM, Ad Muncher, Windows firewall, UAC Max. Windows 7, 32 bit.

[Hungry Man]

Yeah... I really do want to buy sandboxie >_<

[Page42]

Maybe one day we'll all see the grand announcement...

8)

[Hungry Man]

bleh too much money, I am but a poor student! =p

[acr1965]

So is pretty much everyone using Norton DNS these days?

[Hungry Man]

Google DNS.

Just finished scanning my computer with all of my scanners. Clean =p

[DHCPme]

Just bought Sandboxie! I'm a working student too so I did think twice, but years of using it for free has convinced me to buy it. Just hope it helps continued development.

[jmonge]

i have my documents sandboxed and when x-pro on sandboxie doesnt sandbox that location;D

[Page42]

-{ Quote: "Just bought Sandboxie! I'm a working student too so I did think twice, but years of using it for free has convinced me to buy it. Just hope it helps continued development." }-
WTG!! You made a very wise decision.
You have renewed my faith in today's youth!
;D ;)

[Hungry Man]

I'm jealous!

Can you do sandboxes in sandboxes?

idk how that would work >_> like tow programs in two separate sandboxes and then allow them access to each other and sandbox theboth of them o_o idk

[Page42]

Man, you really do need a license.
Then you can answer that question yourself
and tell us how (and why) you did it. :)

[Hungry Man]

Yeah I want it just to mess around haha

[Hungry Man]

I want a 64bit Defensewall, Sandboxie, and Comodo Defense+

invincible to any user or malware =p

[1chaoticadult]

-{ Quote: "I want a 64bit Defensewall, Sandboxie, and Comodo Defense+

invincible to any user or malware =p" }-

Would be a very nice setup.

[umbrapolaris]

lol Hungry, did you watch Inception? ;D

[Hungry Man]

=p sandbox in a sandbox in a sandbox (in a sandbox? O_O)

-{ Quote: "
Would be a very nice setup." }-
It would be perfect if it were all handled by the kernel as well, packaged in there with EMET :D

[umbrapolaris]

-{ Quote: "=p sandbox in a sandbox in a sandbox (in a sandbox? O_O)
" }-

exactly 8)

i rather prefer my solution: SB inside SD shadow mode

[Kernelwars]

Hungry are you expecting a sudden malware thunder storm?;D ;D

[Kernelwars]

trying emsisoft antimalware :)

[1chaoticadult]

-{ Quote: "trying emsisoft antimalware :)" }-

About time my good friend ;D

[Kernelwars]

-{ Quote: "About time my good friend ;D" }-
why is that I was just thinking you are going to say that?:argh: :argh:

[1chaoticadult]

-{ Quote: "why is that I was just thinking you are going to say that?:argh: :argh:" }-

Because you know I like EAM ;D

[Kernelwars]

-{ Quote: "Because you know I like EAM ;D" }-
indeed my good friend:thumb: tell me something howz MSE on resource usage..I have a new laptop for school work where I am running MS SQL enterprise..do you think I can put mse there? I have no realtime protection in that machine just hitman..

[1chaoticadult]

-{ Quote: "indeed my good friend:thumb: tell me something howz MSE on resource usage..I have a new laptop for school work where I am running MS SQL enterprise..do you think I can put mse there? I have no realtime protection in that machine just hitman.." }-

Right now MSE is using about 90mb of ram, but i/o read and writes are very low for me. You could put MSE there but I would add something in addition to MSE.

[JoeBlack40]

Installed OA++ along Avira free and Sanboxie.I assume it's far more better to use SBIE instead Run Safer option of OA.

[1chaoticadult]

-{ Quote: "I assume it's far more better to use SBIE instead Run Safer option of OA." }-

I would say you assumed correct ;)

[Hungry Man]

-{ Quote: "Hungry are you expecting a sudden malware thunder storm?;D ;D" }-
=p Always better to be prepared. Not that I'm insecure right now but I'd like to really lock down any attack vector be it local or not.

[Page42]

-{ Quote: "Installed OA++ along Avira free and Sanboxie.I assume it's far more better to use SBIE instead Run Safer option of OA." }-
Use both RunSafer and SBIE, if you'd like.
There may be times you wish to start a browser (for example) unsandboxed, and you will still have the reduced rights of RunSafer.

[Hungry Man]

What is Run Safer?

[1chaoticadult]

-{ Quote: "What is Run Safer?" }-

Runs an app with limited account restrictions.

[Page42]

Very similar to Sandboxie's DropRights.
RunSafer (http://www.emsisoft.com/en/info/oa/KF-RunSafer.html)

[Hungry Man]

Interesting. Thanks.

[JoeBlack40]

Thank you guys for your replies.:)

[SweX]

-{ Quote: "The good ones have confidence in their product... like Sandboxie, which you ought to buy one of these days.
:o" }-
Haha that's not gonna happen ;D Maybe he could ask the school principal kindly :P

[nikanthpromod]

Removed WSA beta. soon will come back:)


Eset Nod32 v4
Look n Stop
Appguard
Rollback RX
Norton DNS
Sandboxie
Hitman Pro
SUMo

[acr1965]

-{ Quote: "Originally Posted by Hungry Man
What is Run Safer?
" }-

-{ Quote: "Runs an app with limited account restrictions." }-

I hear if a person has Windows UAC enabled there is no reason for "run safer". Is this correct?

[jmonge]

remoed radar pro and my new system shield is Peg2;)

[1chaoticadult]

-{ Quote: "remoed radar pro and my new system shield is Peg2;)" }-

LOL J. Changed again huh :P I thought PEGuard development was slowed???

[jmonge]

;) ;D

[jmonge]

removed peg2,spyshelter and got a new set up and now it is very light and fast

[Konata Izumi]

-{ Quote: "I hear if a person has Windows UAC enabled there is no reason for "run safer". Is this correct?" }-

no. :)

[Kees1958]

Added GeSWall for Chromium only

At last Safe-Admin on Windows 7 is as good as with Vista, running Windows 7 x 32 Ultimate

Real time
1. Border medium rights (LUA) to high (Admin)
a) UAC full
- Disabled installer detection
- Only allow signed applications to elevate
b) Beyond trust power broker, run as LUA (unable to elevate)
- Internet facing aps (IE9, WMP, Mail)
- Office 2003 programs (Word, Excel, Powerpoint)
c) Virtualizing WMP MAIL through RUNASINVOKER (also set WMP and MAIL with mandotory Medium rights with no write up through CHML.EXE)

2. Medium rights world protection (also applicable for admins and untrusted users )
a) Deny Execute for all users
- For all drives containing data (D, E) through icacls.exe
- For Download directory, Program Auto start and Public Users directory through icacls.exe
- For Local intranet and Restricted sites zones through SRP
- For USB drives through SRP
b) Drive by protection for Mail and Browsers (IE9 and Chrome)
- 1806 default deny block of downloaded executables (removable with right click properties)
- This closes gap for all unsafe user directories on C-drive (e.g. Users\Kees\etc)
c) Taken away write access of all HKCU autorun entries for users with REGIL.EXE (only admin may change them)

3. Border from low to medium rights
a) Running IE9 hardened through Group Policy (no user changes allowed, forced in zone and allways running Protected Mode)
b) Running Chromium with --safe-plugins switch (Chromium is unsigned has internal sandbox containing tabs in low rights, job objects and alternate desktop = total isolation), using McFee site advisor extension

4. Chromium guarded by GeSWall Pro, saving to C:\Downloads, moving to D:\Install removes the geswall block, but still keeps the 1806 block

5. Windows FW 2 way

6. EMET 2.1
- Internet Facing: E9, Chrome, Mail, WMP
- Office Aps: Word, Excel, PPT
- Acrobat Reader

On demand
1. Antivirus scans
a) Hitman Pro
b) Bitdefender extension for Chrome
c) Jiotti upload for Chrome

2. Backup
a) Paragon for Image Backup
b) Syncback for Data Backup


Third Party real time BTSERVICE (of Beyond Trust) uses less than 0.001 percent of CPU capacity (so not complete Windows only ), using UAC full (have allowed CCleaner, Auturuns, ProcesExplorer, Paragon Image Backup and HitmanPro to elevate without prompt through Beyond Trust Power Broker). When I want to install an application I move it to Temp and remove 1806 block (got all the flexibility of running admin with LUA/denny execute security), check it with HMP and Jotti

Links for background info
1. Beyond Trust see
- http://www.wilderssecurity.com/showp...11&postcount=1
2. Safe-Admin see
- http://www.wilderssecurity.com/showp...17&postcount=2
- http://www.wilderssecurity.com/showp...18&postcount=3
- http://www.wilderssecurity.com/showp...24&postcount=5
__________________

[1chaoticadult]

-{ Quote: "Added GeSWall" }-

I thought you were already using it?

[Kees1958]

-{ Quote: "I thought you were already using it?" }-

;D Yeah for a test drive, but did some darkside browsing and liked what the GeeSWall log showed was blocked. So updated setup.

There is one funny thing on Chromium though. Normally when I have Chromium without the Chrome pdf plug-in, it downloads pdf files. With the rule

\Device\NamedPipe\AIPC_SRV\AcroSBL
File - Allow

It displays the PDFs

[siberianwolf]

-{ Quote: "removed peg2,spyshelter and got a new set up and now it is very light and fast" }-
if your sig is your current setup, sounds good 'nuff.

[CogitoTesting]

-{ Quote: "removed peg2,spyshelter and got a new set up and now it is very light and fast" }-

Oh! jmonge when will you find solace and feel content with what you have? Beside, why being a security nomad? When will you find your security peace of mind and finally rest? Oh! jmonge. ;D.

Wait a minute I've got an idea listen to: "La Folie des Grandeurs: Theme D'amour" by Michel Polnareff. Maybe that music will give some hints on how to find your security peace, since it is such a beautiful composition. If thou google it thou should find it. :argh:.

Thanks.

[1chaoticadult]

-{ Quote: ";D Yeah for a test drive, but did some darkside browsing and liked what the GeeSWall log showed was blocked. So updated setup.

There is one funny thing on Chromium though. Normally when I have Chromium without the Chrome pdf plug-in, it downloads pdf files. With the rule

\Device\NamedPipe\AIPC_SRV\AcroSBL
File - Allow

It displays the PDFs" }-


Hehehe I thought so. ;D I was looking at your posts in that Geswall thread.

[acr1965]

-{ Quote: "Originally Posted by acr1965
I hear if a person has Windows UAC enabled there is no reason for "run safer". Is this correct?" }-

-{ Quote: "no. :)" }-

care to explain? BTW I have UAC on highest settings if that makes any difference in the discussion.

[Hungry Man]

Autosandboxing off until V6. I don't trust my setup enough to test it since there's no sandboxing =p but that's alright.

[Konata Izumi]

-{ Quote: "care to explain? BTW I have UAC on highest settings if that makes any difference in the discussion." }-

I think UAC on any level (except disabled) makes everything run at medium integrity level (IL).
OA's Run Safer has more reduced rights than medium IL.

I'm not sure. :)

[RollzRoyce]

Right now I've got...

Sandboxie
No Autorun
Bit Defender USB immunizer
Foxit Reader and uninstalled Adobe
Hitman Pro, MBAM
Keriver 1-Click Restore Free
Norton DNS
FF Nightly Plugins: Adblock, NoScript, Ghostery, Https-Everywhere, Request Policy (CSRF protection, might have a small bug w/ Nightly)
Ixquick -Https Search Engine
Xp-Antispy on Recommended Settings


Looking at how to configure Keepass for password protection.

I just set EMET 2.1 to Maximum...Startup slowed down by a minute or two but nothing too drastic.

Proactive Threat Protection was disabled in Symantec Endpoint Protection. It's supposed to protect from 0days but that's what EMET is for right?

Also should USB Immunizer and No Autorun run automatically?

Finally would I be able to play Online MP games with this setup? AmIdoinItRight? ???

[Konata Izumi]

-{ Quote: "
4. Chromium guarded by GeSWall Pro, saving to C:\Downloads, moving to D:\Install removes the geswall block, but still keeps the 1806 block
" }-

As always excellent setup!

icacls deny execute will also follow when you move files from C:\Downloads to D:\Install?

what icacls command did you apply on "D:\Install"?

I haven't tried CHML and REGIL yet.

[Hungry Man]

EMET slowed your boot? o_o

Haven't had any slowdowns with EMET...

[RollzRoyce]

It didn't while it was on recommended settings but when I changed it to maximum settings there definitely a slow down. That was the only change I made. Next time I restart I'll see if it's as long.

Outside of mandatory Symantec I'm trying to keep this as light as possible. Would adding Threatfire or Mamutu be overkill at this point?

[Hungry Man]

Strange.

Just updated Comodo.

Mamutu is insanely lightweight... I had it monitored for a while because I don't think it adds too much protection but I didn't know how much resources it used. It uses so little... it's insane.

[RJK3]

-{ Quote: "Would adding Threatfire [...] be overkill at this point?" }-

Definitely, slow and not very useful anymore IMO.

[Hungry Man]

If you can get your hands on a free Mamutu or if you're willing to pay it's definitely a nice program.

[malexous]

RollzRoyce, is there a requirement on the product version? If not, I suggest updating to Symantec Endpoint Protection 12.

[kjdemuth]

Thinking of adding mamutu to my setup. I think it might be overkill. I already have sandboxie and CIS and norton DNS. I really don't think mamutu will add anything else.

[jmonge]

i feel good now;D :thumb:

[CogitoTesting]

-{ Quote: "i feel good now;D :thumb:" }-

I'm glad that I could help. ;).

Thanks.

[Kernelwars]

added mamutu to my existing setup:) very light I must say:thumb:

[jmonge]

thanks:thumb:

[Hungry Man]

-{ Quote: "Thinking of adding mamutu to my setup. I think it might be overkill. I already have sandboxie and CIS and norton DNS. I really don't think mamutu will add anything else." }-
Yeah I have CIS as well. I don't use Mamutu much but it's so damn light... and I got it for free.

I like that I can monitor applications, I have certain behaviors on certain internet-facing programs blocked and I have them monitored and protected via Mamutu as well as sandboxed by CIS.

I use it more as a system hardening tool than a behavioral blocker.

[jmonge]

good idea;)

[kjdemuth]

Added mamutu.
We'll see how it goes.

[Hungry Man]

Just set all programs up with Mamutu so that anything that hasn't already been explicitly allowed is now explicitly denied.

Setting it to Paranoid mode so I can make sure everything in my system apps is allowed before I block all of their suspicious behaviors as well.

This means that if any program is hijacked or compromised it's limited to only the actions that the legitimate program was allowed, it's denied any other suspicious activities.

[jmonge]

http://westcoastlabs.com/checkmark/productList/checkmarkTestResult/?productID=444&techGroupID=27&from=v
is it an antivirus?

[moontan]

i got meself a gift and bought Password Depot.

it's not cheap but it's got all the features i want and it's pretty good security-wise:
it's got a virtual keyboard, key-logger and clipboard protection.

[jmonge]

:thumb: good choice man

[jmonge]

trying out Webroot AntiVirus Beta ;) in my xp system

[moontan]

-{ Quote: ":thumb: good choice man" }-

tnx m8! :)

Password Depot passed the tests from the Spyshelter testing app (Anti Test) regarding keylogging and clipboard protection for all auto-type, drag & drop and copy and paste operations. :thumb:

[jmonge]

:thumb: good anti-hack tool:thumb:

[jmonge]

SanDBoxie is fun;)

[The_ChamP]

Keep switching between the 3 av's in my sig

[cm1971]

Just replaced Private Firewall with Outpost Pro from one of the giveaways. I like how it does full screen games a lot better. :thumb:

[Hayki_]

Hi, i am using

Eset Nod32 5 - Malwarebytes - Hitman Pro

;)

[The Seeker]

After a format last night I'm now testing Emsisoft Anti-Malware 6.0 Beta. I'm running it alone so as not to conflict with any other security apps. Seems to be running nicely so far; certainly a lot snappier than 5.1.

The only change I've had to make was to exclude Google Chrome under Guard > Application Rules as it was causing a huge delay in pages loading. (I expected this as the same thing happened under Mamutu.) Initial impressions are good :)

[Kernelwars]

-{ Quote: "Added mamutu.
We'll see how it goes." }-
how is it going with mamutu..;D

[1chaoticadult]

-{ Quote: "how is it going with mamutu..;D" }-

I ask you the same thing, my good friend ;D

[kjdemuth]

Its running very light. I can't even tell that its there. I haven't had a chance to configure it yet though. I have it monitoring firefox.

[Kernelwars]

-{ Quote: "I ask you the same thing, my good friend ;D" }-
its going great. its light.. but I have no clue how to configure this thing tho:doubt:

[1chaoticadult]

-{ Quote: "its going great. its light.. but I have no clue how to configure this thing tho:doubt:" }-

Its not much to configure my good friend ;D

[The Seeker]

As is the norm here at Wilders, I've swapped again - EAM 6.0 Beta has been replaced by CIS 5.8 Beta. Early I know but I think I actually prefer CIS. And it's free! Defense+ is really cool.

[1chaoticadult]

-{ Quote: "After a format last night I'm now testing Emsisoft Anti-Malware 6.0 Beta. I'm running it alone so as not to conflict with any other security apps. Seems to be running nicely so far; certainly a lot snappier than 5.1.

The only change I've had to make was to exclude Google Chrome under Guard > Application Rules as it was causing a huge delay in pages loading. (I expected this as the same thing happened under Mamutu.) Initial impressions are good :)" }-

I did a format last night as well. Have my imaging setup the way I want now and will be testing software in VM from now on ;D

-{ Quote: "As is the norm here at Wilders, I've swapped again - EAM 6.0 Beta has been replaced by CIS 5.8 Beta. Early I know but I think I actually prefer CIS. And it's free! Defense+ is really cool." }-

Its hard not to use Comodo IMO. ;D

[Ed_H]

Trying out ESET Smart Security 5 RC
I haven't changed any of the default settings yet but this really runs light!

Sandboxie
Shadow Defender
ShadowProtect

[jmonge]

change my set up and now it is as simple as just using Prevx and Mbam Pro:thumb:
does any one is using this combo? ofcourse i am using hitman pro as ondemand scaner

[Ranget]

-{ Quote: "change my set up and now it is as simple as just using Prevx and Mbam Pro
does any one is using this combo? ofcourse i am using hitman pro as ondemand scaner" }-

what about Firewall ???

anyway Prevex is my Best Friend it's so good IF i would have to use only one Product
i will chose MBAm :blink:

Just kidding i will use Prevex

[jmonge]

yeah i was thinking of only using Mbam Pro and hitman pro but i feel naked still

[Kernelwars]

-{ Quote: "change my set up and now it is as simple as just using Prevx and Mbam Pro:thumb:
does any one is using this combo? ofcourse i am using hitman pro as ondemand scaner" }-
are u using prevx or webroot cloud av J?:)

[Ranget]

:dry:

i use this setup and still i feel Naked

Avast Maximum stuff
Prevex Maximum Stuff
Comodo Maximum stuff
Mamutu
:doubt: what else couple of on demand scanners

what do you think ??

[cm1971]

-{ Quote: ":dry:

i use this setup and still i feel Naked

Avast Maximum stuff
Prevex Maximum Stuff
Comodo Maximum stuff
Mamutu
:doubt: what else couple of on demand scanners

what do you think ??" }-
Maybe MBAM or Hitman Pro. That is a nice setup though. :thumb:

[LoneWolf]

-{ Quote: "i got meself a gift and bought Password Depot.

it's not cheap but it's got all the features i want and it's pretty good security-wise:
it's got a virtual keyboard, key-logger and clipboard protection." }-

Looks interesting......I'll have to give the trial a shot.

[jmonge]

lol;D

[jmonge]

prevx:)

[cm1971]

-{ Quote: "i got meself a gift and bought Password Depot.

it's not cheap but it's got all the features i want and it's pretty good security-wise:
it's got a virtual keyboard, key-logger and clipboard protection." }-
It sounds interesting. I assume this is similar to Zemana?

[1chaoticadult]

-{ Quote: "It sounds interesting. I assume this is similar to Zemana?" }-

Thats a good question as I was wondering the same..

[jmonge]

added AppGuard;)

[luciddream]

Added a VPN service (iVPN).

Added Sandboxie - turned off the sandbox in Comodo FW/HIPS

Both measures were long overdue, I think.

[Page42]

Did you buy the SBIE license, luciddream? :)

[luciddream]

Not yet. I wanted to get a feel for it first. I was just about to pull the trigger, but decided to get my feet wet first. I will almost certainly be purchasing it though. $40 for a lifetime license = heckuva deal.

Same with my VPN. I just signed up for a month, no plan or commitment. If things continue this way for the next 20 days or so I'll be signing up for a year. It's a really good service.

Up until a month ago or so I hadn't payed for any computer software/services for years... since way back when McAfee & Norton were the only 2 AV's I'd heard of. I used Comodo Firewall and the free versions of either Avira or Avast. Use Open Office. Use all free programs. Then after trialing Avira Premium and seeing how light it was, I saw 2 licenses for $25 and me and a friend split it up, $12.50 each. Now it's like I created a monster. I'm purchasing Sandboxie, and a VPN service too. I considered paying for an anti-logging program too (i.e. Keyscrambler paid), but the price is just too steep.

Once you break the seal it's hard to stop ;) I'm a fiend for security. Better than some habits, I guess.

[Page42]

-{ Quote: "Once you break the seal it's hard to stop ;) I'm a fiend for security. Better than some habits, I guess." }-
Yes, I understand. If you ever want to start a support group, just take a quick look around this thread, right? ;)

Definitely agree that this is better than some habits, too.

And I also believe that it is entirely possible to eventually settle down with a core group of programs, and the spending can pretty much come to a halt, once that state of security nirvana is achieved. The key might be to recognize when you have arrived. 8)

[Page42]

Removed VIPRE AV Premium from one setup and installed VIPRE AV Standard and OA firewall (+HIPS) in its place. Both machines now running setup in my sig. :)

[jmonge]

i have it very simple now:)

[Kernelwars]

-{ Quote: "i have it very simple now:)" }-
yes for now..indeed:argh:

[jmonge]

;) yes 4 now

[NodKiller]

Standard User Account, AppLocker, EMET, disabled autoruns, Windows Firewall 2-way, UAC with max setting

[1chaoticadult]

-{ Quote: ";) yes 4 now" }-

I will say this again, it will change my friend ;D

[jmonge]

i am very happy my new set up in my sig

[adam993]

Appguard now 8)

[1chaoticadult]

-{ Quote: "i am very happy my new set up in my sig" }-

Good J you should be

[jmonge]

i am going to keep it long;)

[Kernelwars]

-{ Quote: "i am very happy my new set up in my sig" }-
happy for now J..it will change in couple of hours..:argh:

[trjam]

yeah right jmonge :dry: :thumb:

[raven211]

Haha! Everybody knows how you work by now! ;D

[Konata Izumi]

waiting for next Returnil release (REL15).
using GesWall for now.

[The Seeker]

Finished testing CIS Beta. Impressed overall, it's shaping up to be a good program. I'm now back to my usual setup minus WinPatrol PLUS; there should be a new build out in a few days so I'll re-install then.

[1chaoticadult]

-{ Quote: "happy for now J..it will change in couple of hours..:argh:" }-

Exactly my good friend :P ;D

[jmonge]

;D ;D no way jose

[1chaoticadult]

-{ Quote: ";D ;D no way jose" }-

We shall see my good friend. ;D

[Kernelwars]

-{ Quote: "We shall see my good friend. ;D" }-
lol..he already uninstalled it.. he is planning to install lavasoft internet security..;D ;D

[jmonge]

to be honest this is my perfect combo:thumb:
if some thing get passed mbam pro i will destroy it with the file asessing
then scan with hitman

[1chaoticadult]

-{ Quote: "lol..he already uninstalled it.. he is planning to install lavasoft internet security..;D ;D" }-

If J wants the beast on his pc let him do it. ;D

[jmonge]

i love the FileASSASSIN;) :thumb:

[raven211]

-{ Quote: "to be honest this is my perfect combo:thumb:
if some thing get passed mbam pro i will destroy it with the file asessing
then scan with hitman" }-

J, I got a very good memory, and I know that you've already run Malwarebytes before.

I'm just saying. ::)

[Hungry Man]

What does File Assassin do?

[1chaoticadult]

-{ Quote: "What does File Assassin do?" }-

removed locked files

http://www.malwarebytes.org/products/fileassassin

[Hungry Man]

Oh nice. Thanks.

[1chaoticadult]

-{ Quote: "Oh nice. Thanks." }-

Welcome.

[gery]

Outpost Firewall Pro Avast Antivirus Pro MBAM pro

[Page42]

Removed OA Free from one machine.
It was a fresh install but it had slowed everything down to a crawl.
Sometimes it comes down to order of installation as to how well everything runs together.
Now just going with Sandboxie and VIPRE AV.
Moving right along, nice and snappy.
:)

[jmonge]

trying ByteHero Anti-Virus ;)

[Amit]

hitman pro and easeus todo backup8)

[Ranget]

Bitdefender 2012 is still working well ;)

[nord1]

Am down to OutPost 2009 Free, Malwarebytes Pro and Avast 6... anyone think I should run something else interactively?

[Konata Izumi]

-{ Quote: "Am down to OutPost 2009 Free, Malwarebytes Pro and Avast 6... anyone think I should run something else interactively?" }-

nope you dont need more.

[jmonge]

you are good to go;)

[Hungry Man]

I'm tempted to try the beta AV by Comodo. It's very light.

[kjdemuth]

Joli Cloud OS
Lovin' it.

[jmonge]

go for it man;) be brave

[1chaoticadult]

-{ Quote: "I'm tempted to try the beta AV by Comodo. It's very light." }-

Wow I'm surprised to hear this coming from you. :P I tried it and it is pretty light but I tend to prefer MSE at the moment ;D

[Kernelwars]

Avira Premium :)

[1chaoticadult]

-{ Quote: "Avira Premium :)" }-

What you didn't like the dancing panda anymore ;D

[Kernelwars]

-{ Quote: "What you didn't like the dancing panda anymore ;D" }-
I like it..Just changing a little..:) I haven't used the red umbrella for a while;D

[JoeBlack40]

Back to my fav's
Avira free
Rising FW free
SBIE Pro

[nord1]

-{ Quote: "nope you dont need more." }-

Konata,

Thanks much. I like my current setup and when needed, run standalone apps too.

[nord1]

-{ Quote: "you are good to go;)" }-

jmonge,

Thanks, confirms my feelings on security. As I said above, I'll run other standalone apps when needed, like HitManPro. <g>

[adam993]

Online Armor Premium (Opera in runsafer :thumb: )
Hmm I'm looking for addons to my HIPS :) probably Avast and Sbie paid :thumb:

[tomazyk]

I added Nod 32 to my setup. I must say that this AV is really light as a feather. If it plays along with other apps I will probably buy it.

My new setup:

Resident:
Router with SPI Firewall
Windows 7 firewall
ESET Nod32
Sandboxie (for browsers)
Malware Defender
EMET (for internet facing apps and apps that open files)

On demand:
Hitman PRO
MBAM
Acronis True Image
Autoruns
Secunia PSI

[1chaoticadult]

-{ Quote: "I like it..Just changing a little..:) I haven't used the red umbrella for a while;D" }-

Hahaha my friend ;D

[jmonge]

;D :argh:not only me change my set up often i guez

[jack76]

Testing trend micro titanium av 2012.......

[1chaoticadult]

-{ Quote: ";D :argh:not only me change my set up often i guez" }-

Thats true J, but you change so much I lose count ;D

[jmonge]

8) 8)

[Kernelwars]

back to dancing panda8)

[raven211]

-{ Quote: "back to dancing panda8)" }-

Haha ;D

[Hungry Man]

-{ Quote: "Wow I'm surprised to hear this coming from you. :P I tried it and it is pretty light but I tend to prefer MSE at the moment ;D" }-
Sometimes it's nice to just have the AV do all of the work, even if it is a resource hog and not super effective =p but I do enjoy some of the features in Comodo's AV.

I'll pass for now but maybe another time.

[1chaoticadult]

-{ Quote: "back to dancing panda8)" }-

I knew it would happen ;D

[jmonge]

you see;D

[Kernelwars]

-{ Quote: "you see;D" }-
I see a lot of smoke coming out of your house J..wat you upto?;D

[jmonge]

it's Mbam Pro destroying malware;)

[Kernelwars]

-{ Quote: "I knew it would happen ;D" }-
but did you see this happening- J testing bulldog internet security? what you think about that my good friend?:argh: ;D

[SweX]

-{ Quote: "bulldog internet security?" }-
That must be a new one, No? ;D Vendor from Texas ::)

[1chaoticadult]

-{ Quote: "but did you see this happening- J testing bulldog internet security? what you think about that my good friend?:argh: ;D" }-

Sure I could see it. J likes to test security software. I think I will go test Ashampoo Anti-Malware now :P ;D

[Ranget]

-{ Quote: "Sure I could see it. J likes to test security software. I think I will go test Ashampoo Anti-Malware now :P ;D" }-


i did try it it's not that Bad

Shampoo in my mail :what:
Very very Large Database Update procedure is discusting

anyway i didn't try it against malware
didn't work well with panda free

mmm
Good interface
include Rootkit scanner :isay: not too bad to give a try

[Kernelwars]

-{ Quote: "That must be a new one, No? ;D Vendor from Texas ::)" }-
lol :argh: my good friend;D dont know if bullguard is from texas though rofl;D

[Kernelwars]

-{ Quote: "Sure I could see it. J likes to test security software. I think I will go test Ashampoo Anti-Malware now :P ;D" }-
test it as much as you like just dont get shampoo in ur eyes though;D

[shadek]

There is only one solution to the complete malware crush at the moment (testing about 100 0-day malware samples a day on-execution, and no, I am not going to share samples nor am I going to test even more since I don't have time!);

WSA (for not very well known software - which I use rarely - I use the 'sandbox' as well to be extra, extra safe).
MBAM Pro

[1chaoticadult]

-{ Quote: "i did try it it's not that Bad

Shampoo in my mail :what:
Very very Large Database Update procedure is discusting

anyway i didn't try it against malware
didn't work well with panda free

mmm
Good interface
include Rootkit scanner :isay: not too bad to give a try" }-

I tried it as well too. Uses alot of memory and sig updates are slow. I wouldn't use it. Although one thing I do like is you have the option to use both engines or one engine by itself.


-{ Quote: "test it as much as you like just dont get shampoo in ur eyes though;D" }-

I already tested in my VM. Just wanted to see if they improved anything since last version. I didn't like it so my VM is restored back to my snapshot ;D