What is your security setup these days?

[justenough]

-{ Quote: "I have found detection with the beta to be very good. Load time at startup is very good and it is light to the feel. Main thing is the improvement in detection." }-

Sounds good, trjam. Looks like it's a closed beta, so I'll put in a request for it.

[JimboW]

-{ Quote: "Sounds good, trjam. Looks like it's a closed beta, so I'll put in a request for it." }-

You can get it here if you want to try it. hxxp://www.softpedia.com/get/Antivirus/Microsoft-Security-Essentials.shtml

[justenough]

-{ Quote: "You can get it here if you want to try it. hxxp://www.softpedia.com/get/Antivirus/Microsoft-Security-Essentials.shtml" }-

Okay, got it, thanks JimboW and trjam.

[happyyarou666]

well removed EMET 2.1 , was making my system unstable as nothing else , its the pure horror!!! -.-'

guess i know now why ams963 striked that through xD


and uninstalled private firewall it was so fn annoying , i thought commodo was bad , well wait till you get this firewall and youll be glad youve had commodo, and i thought microsofts firewall was bad xD,and too top it off like blocked off most of my regular os files couldnt even access my userpic in the end gave me shell32.dll errors and more -.-', blocked most of everything , most of my programs etc and ive set them to fully allowed btw -.-' , POS !!


so any other firewall suggested? perhaps online armor afterall? anyone? or is my wsa complete firewall sufficient ?

[justenough]

Sounds like you were running two firewalls at the same time, which can cause all sorts of problems. Privatefirewall has a HIPS which takes a while to settle down. I never hear from the Windows firewall, so I'm not sure what your problem is there. Good luck sorting it all out.

[happyyarou666]

thanks xD

btw no i was running only one aka private firewall, disabled wsa just to be sure , same problems thou -.-'

and bout windows firewall ive tested it before ive gotten private firewall , way too complex and messy for my taste , guess im spoiled from commodos firewall, ill be waiting for those next suggestions ;)

[gsarang]

Roboscan Internet Security Free v2.5
DefenseWall HIPS v2.56 (gizmo edition)

[Rompin Raider]

-{ Quote: "i will do something diferent i will get comodo instead of emsisoft;)" }-

Every-time I test Comodo, is runs smooth and light. People either seem to love them or hate them...and I don't think it's totally based on performance but I'm sure people have their reasons. :doubt:

[G1111]

-{ Quote: "Roboscan Internet Security Free v2.5
DefenseWall HIPS v2.56 (gizmo edition)" }-
You have an old version of DefenseWall. You should consider updating. There have been a lot of improvements.

[jmonge]

just uninstall it cause it was freezing my browser some times and it is running alone:) i didnt have enough time to test it and judge:) now back to AppGuard{LockDown Mode}:thumb:

[Securon]

Good Evening ! Ikarus Virus Utilities 2.0.127 and WSA Essentials...that's all folks. Sincerely...Securon

[Ed_H]

WSA Complete
Sandboxie

On Demand
ShadowProtect
HitmanPro
MBAM


This setup is very fast. I am not sure yet how good WSA is but it doesn't matter so much with Sandboxie.

[trjam]

-{ Quote: "just uninstall it cause it was freezing my browser some times and it is running alone:) i didnt have enough time to test it and judge:) now back to AppGuard{LockDown Mode}:thumb:" }-


Cuzz, you know your post count would quit growing if you just put ESS back on. Ya know what i am talking about.:thumb:

trojam
your friend

[Amit]

-{ Quote: " guess im spoiled from commodos firewall, ;)" }-
you should stay with comodo fw/d+........it's a very strong fw.....and most of all it suites you......when considering software, I always try different ones and keep the ones that suites me......you're face no prob with comodo and you feel comfortable with it.....no need to disable wsa firewall.....it's outbound connection protection only and is compatible.......if you face any compatible issues you can always open a support ticket and ask for help......

[KelvinW4]

Trying Roboscan Internet Security Free 2.5
Looks great so far.

[jmonge]

trojam:thumb: :thumb:

[Amit]

oh my! trojam changes his avatar, sig and av quicker than I can blink.............saw him using mse beta 4....seconds later he was back to eset.....

many here are infected as well.....the symptoms are getting worse.......

somebody get a mbom for trojam.......

[EASTER]

-{ Quote: "Question: Did you test nProtect MBRGuard with rootkits?

Suggestion: Have a look at Malware Defender, now freeware, might be a viable replacement candidate for EQSecure (development stopped some time ago)." }-

I felt obliged to accept your suggestion on MD as a possible addition in place of EQS, and so far i must concede that it's performing in a true HIPS fashion, since i'm helplessly challenged by the nature of any HIPS that can prove it's metal ongoing without issue.

So i might need to shortly add this permanantly to my arsenal. I tried numerous versions of MD before, when it was really popular in these forums and by some odd stretch for some reason, on my machines it consistently exhibited very unwelcome & unstable results chalked full of issues.

Now that's it's freeware, this model seems perfectly stable as well as proactive in a positive sense. Go Figure ???

[gsarang]

Panda Cloud Antivirus Free 1.5.2
DefenseWall HIPS v2.56 (gizmo edition)
Kerio Personal Firewall 2.15 (BZ ruleset)

[happyyarou666]

ams963 thanks bro thought the same just wanted a second opinion on it and ill keep that protip for wsa firewall in mind ;)

[Amit]

-{ Quote: "ams963 thanks bro thought the same just wanted a second opinion on it and ill keep that protip for wsa firewall in mind ;)" }-
welcome :)

[Rompin Raider]

-{ Quote: "oh my! trojam changes his avatar, sig and av quicker than I can blink.............saw him using mse beta 4....seconds later he was back to eset.....

many here are infected as well.....the symptoms are getting worse.......

somebody get a mbom for trojam......." }-
Maybe he has a couple of computers at home...said the old rooster from Texas. I believe he may have access to Area 51 as well! His last motorcycle came from there!

[KelvinW4]

Anybody know any free software compliments -besides TF and Immunet- to my internet security. I have heard it is not as strong as bitdefender itself.

[gsarang]

Malware Defender 2.8.0.0001
HitmanPro 3.6.0 Build 138

[JoeBlack40]

-{ Quote: "Anybody know any free software compliments -besides TF and Immunet- to my internet security. I have heard it is not as strong as bitdefender itself." }-
Spyware Terminator...?Its HIPS i heard are pretty good.

[acr1965]

-{ Quote: "Anybody know any free software compliments -besides TF and Immunet- to my internet security. I have heard it is not as strong as bitdefender itself." }-
what's your operating system and is it 32 bit or 64 bit?

[Northern Lights]

Panda Cloud Antivirus
Malwarebytes Pro
Comodo Firewall
Sandboxie
Keyscambler Personal

[The_ChamP]

Gone basic
MSE
Windows firewall

[Amit]

-{ Quote: "Maybe he has a couple of computers at home...said the old rooster from Texas. I believe he may have access to Area 51 as well! His last motorcycle came from there!" }-
lol.......

[Amit]

added eam back........

so it's wsa+eam now :thumb:........

[STONEMAN]

just added Appguard in lockedown mode to my sig, after a bit of tweaking
with sandboxie everything running as smoth as silk 8)

[1chaoticadult]

-{ Quote: "added eam back........

so it's wsa+eam now :thumb:........" }-

I knew you would go back to EAM my parallel earth friend ;D

[Amit]

-{ Quote: "I knew you would go back to EAM my parallel earth friend ;D" }-
yeah couldn't resist eam's curvy and flabby touch to my pc ;D

[1chaoticadult]

-{ Quote: "yeah couldn't resist eam's curvy and flabby touch to my pc ;D" }-

Hahaha. Same security setup in my sig. Will be the same for a while.

[trjam]

Back to basics, Eset Antivirus and Windows Firewall.

[KelvinW4]

-{ Quote: "Spyware Terminator...?Its HIPS i heard are pretty good." }-
I just dont trust that company.... nothing much x)
@acr1965
I have 32-bit Vista

[acr1965]

Maybe take a look at stormshield.
http://www.skyrecon.com/en/StormShield-Personal-Edition
http://spe.skyrecon.com/spe/help/En/current/Prerequis.html

[KelvinW4]

Tried that and was not a good experience... (in the past)

[The Seeker]

Webroot SecureAnywhere is perfect, I cannot fault it. I've now put MBAM PRO alongside it for that added peace of mind.

[Amit]

-{ Quote: "Hahaha. Same security setup in my sig. Will be the same for a while." }-
how's online armour?........

[jmonge]

i want to test OA Premium again but my licences expired;D
what happend after the premium version expired?does it convert into free version or is it disable?

[kjdemuth]

Converts to free version

[jmonge]

ok thanks buddy i may try comodo again but without the antivirus;)

[kjdemuth]

I love it and find that nothing else seems to work as well for me. I've looked around at them all.

[jmonge]

:thumb: :thumb:

[Amit]

-{ Quote: "ok thanks buddy i may try comodo again but without the antivirus;)" }-
comodo fw is top notch......good going J....and don't forget to test it in max. settings.......btw, what av/am are you planning on using with it?.....

[KelvinW4]

-{ Quote: ":thumb: :thumb:" }-
Comodo:thumb: :thumb: :dry:

[Rompin Raider]

-{ Quote: ":thumb: :thumb:" }-

You shall now be known as "trjam jr".:argh:

[jmonge]

;D :thumb:

[The Hammer]

::) Comodo.:thumbd:

[jmonge]

:-\ :thumb:

[Rompin Raider]

:thumb: :thumbd: Calgary and Toronto...this is like a hockey game !

[gsarang]

Online Armor Free 5.5.0.1557
HitmanPro 3.6.0.146

[Amit]

-{ Quote: ":thumb: :thumbd: Calgary and Toronto...this is like a hockey game !" }-
no hockey game.......J and Hammer are on the same team...remember Hammer did say :thumbd: sarcastically.......

[jmonge]

well it is running smooth;) :thumb:i have the D+ in Restricted mode

[EASTER]

Added:

Chrome (Beta) 18

http://www.wilderssecurity.com/showpost.php?p=2024129&postcount=11

[Sevens]

Dropped MSE and shut off windows firewall. Just DefenseWall Personal Firewall with mbam on demand. Done playing around this is what works with no suprises for me.

[1chaoticadult]

-{ Quote: "comodo fw is top notch......good going J....and don't forget to test it in max. settings.......btw, what av/am are you planning on using with it?....." }-

It causes my system to BSOD so I stopped using Comodo :thumbd:

-{ Quote: "how's online armour?........" }-

Online Armor is fine. Very light as usual at least for me.

[The Hammer]

-{ Quote: ":thumb: :thumbd: Calgary and Toronto...this is like a hockey game !" }-
I keep my head on a swivel and my elbows up.;)

[kjdemuth]

Yikes calgary and toronto 11th west and east. Not looking good.

[kjdemuth]

Back to what works.
Ditched WSA.
Brought back PCAV and shadowdefender.

[gsarang]

BufferZone Pro 4.01
HitmanPro 3.6.0.146

[Rompin Raider]

-{ Quote: "Back to what works.
Ditched WSA.
Brought back PCAV and shadowdefender." }-
Trouble with WSA?

[kjdemuth]

Wouldn't allow shadowdefender or killswitch to run. That was a deal breaker for me.

[jmonge]

ditch comodo antivirus and went back to my original shield defender in lockdown mode:thumb: :thumb:
reason why was because comodo slowed me down my system

[KelvinW4]

-{ Quote: "ditch comodo antivirus and went back to my original shield defender in lockdown mode:thumb: :thumb:
reason why was because comodo slowed me down my system" }-
me too.

[TigerRaptorFX]

OS
Windows 7 Pro 64

Network
Linksys running Tomato with custom settings.
OpenDNS set in the router
OpenDNS with Malware/Botnet Protection, Phishing Protection, Suspicious Responses enabled

Comodo firewall
Sandbox disabled - Allows me to take full advantage of the HIPS side.
General settings set to Custom Policy
Alert Frequency Level set to Medium
Block Fragmented IP datagrams
Do protocol analysis
Stealth Ports set to block on all incoming connections.

Avast Pro 7
All shields to set to PUP
Few programs set to always run in manual sandbox.
AutoSandbox set to high heuristics with PUP enabled.

On-demand
Malwarebytes
Hitman Pro
Emsisoft Emergency Kit

Firefox 11
No Script
Adblock Plus with Fanboy easylist
Bitdefender TrafficLight
Web Developer - Referrers disabled
Lastpass
Avast WebRep
Ghostery
BetterPrivacy set to 1 second delete
CS Lite aka Cookiesafe - All cookies are set to block by default. Registered sites are set to session.

Chromium 19 Only for multitasking.
ScriptNo
Adblock Plus with Fanboy easylist
Avast WebRep
TrafficLight
Lastpass
Ghostery
non add-ons
All cookies set to disable. Registered sites are set to session.
Referrers disabled
Data sent to Google disabled.
BetterPrivacy works with Chromium when Firefox is active.

Others
EMET set to maximum with high risk programs running inside
Secunia PSI
Foxit reader no browser add-ons
CCleaner
Wise Disk Cleaner

[Lettersentto]

Look'n'Stop 2.07 (Phant0m's Ruleset)
AppGuard 3.2 (Lockdown - Trial)
Sandboxie 3.64 (Lifetime)


Acronis Backup & Recovery


On Demand

Hitman Pro

Browser

Waterfox (Adblock Plus with the lists we who use this add-on all know and love)

RoboForm




I tried Malwarebytes but it wasn't for me. I like my programs to work in the BG and not force me to click on anything if I can help it. AppGuard has been OK but I constantly have to turn it off when I want to use a program, etc. which is annoying. Look n Stop can get a tad annoying as well with the pop ups to authorize but I've already paid for it so it's here to stay. Thankfully the pop ups aren't that frequent.

Sandboxie and Hitman Pro have been perfect.

Is AppGuard a one time payment or a yearly thing? Or is it a lifetime with paid yearly updates like DefenseWall?

I had Vipre Internet Security but it was awful and slow and wasn't nearly as efficient as had been written in reviews. Unfortunately, I found this site a few days too late, so I couldn't cancel my subscription before the 30 day money back guarantee.

Hopefully my current set up works out but if anyone has better options for security programs that aren't intrusive I'd appreciate you mention them via a reply. Thanks.

[Arcanez]

-{ Quote: "Is AppGuard a one time payment or a yearly thing? Or is it a lifetime with paid yearly updates like DefenseWall?" }-

I think it's a lifetime license but I've read in the appguard thread that there could be extra fees when a new version with major changes is released. However I think Barb wrote that you won't have to pay anything for the new version that will be released this month if you already have a valid license.

btt: trying the Exe Radar Free Version on my notebook + Sandboxie + EMET + DNS Advantage :)

[Amit]

-{ Quote: "It causes my system to BSOD so I stopped using Comodo :thumbd:" }-
every comodo product has caused error or given me hassles......except for firewall/d+.......I would never ever use any comodo product except of course fw......it's that damn good........


-{ Quote: "Online Armor is fine. Very light as usual at least for me." }-
good to know buddy......I would use it if my other software had not already covered OA's feature.....

[1chaoticadult]

-{ Quote: "every comodo product has caused error or given me hassles......except for firewall/d+.......I would never ever use any comodo product except of course fw......it's that damn good........" }-

My friend doesn't matter if I install the full suite or just the firewall, it causes a bsod every time. I have not used or tried any other Comodo product except CIS.

[Amit]

-{ Quote: "My friend doesn't matter if I install the full suite or just the firewall, it causes a bsod every time. I have not used or tried any other Comodo product except CIS." }-
that's unfortunate.....oh well, if a thing doesn't work for you it's always a good idea to stay away from it.....I'm just glad OA is not giving you much trouble.......I've not tried OA yet.......that would nicely fit with eam since both are in the same busty pouch....but Zemana along with wsa fw and win fw pretty much cover it all......tell me my good friend....how's OA's apatite?......is it too chummy?........

[happyyarou666]

woah seems as if your pc is allergic agains commodo lols xD

[1chaoticadult]

-{ Quote: "woah seems as if your pc is allergic agains commodo lols xD" }-

lol I know right. I have been using Comodo Firewall for years and now all of a sudden I can't use it. OA is working very well for me, so no big deal there.

-{ Quote: "that's unfortunate.....oh well, if a thing doesn't work for you it's always a good idea to stay away from it.....I'm just glad OA is not giving you much trouble.......I've not tried OA yet.......that would nicely fit with eam since both are in the same busty pouch....but Zemana along with wsa fw and win fw pretty much cover it all......tell me my good friend....how's OA's apatite?......is it too chummy?........" }-

Only time I really get popups with OA is when installing software, whether I'm upgrading or installing new software. Other that than I barely get any popups.

[buckslayr]

I'm liking SpyShelter Firewall with my browsers running restricted. Would it be ok to also run AppGuard? Or would they interfere with each other?

[jmonge]

they both are good:thumb:

[tomazyk]

I haven't been changing my setup for last two months. I think I found my perfect combination:

Router with firewall
Windows 7 firewall (inbound only)

Real time:
Sandboxie (for browsers)
Malware Defender (with locked UI)
Emet (for internet facing apps and apps that open files)
AdBlock Plus for Firefox and Chrome

On-demand:
ESET online scanner
Hitman PRO
MBAM
Acronis TI
Cobian backup
Other various security related apps.

[TigerRaptorFX]

-{ Quote: "I'm liking SpyShelter Firewall with my browsers running restricted. Would it be ok to also run AppGuard? Or would they interfere with each other?" }-

You're good to go. I have notice other people running them together.

[LoneWolf]

-{ Quote: "I'm liking SpyShelter Firewall with my browsers running restricted. Would it be ok to also run AppGuard? Or would they interfere with each other?" }-

I've run both together on XP and all went well.

[The Seeker]

Had to do a fresh install (file corruption) so decided not to reinstall EMET, as I couldn't be arsed setting it up again. I've also left MBAM PRO off for now as I'm loving the lightness Webroot SecureAnywhere brings. This, along with regular image-based backups and I'm good to go.

[The Hammer]

-{ Quote: "Yikes calgary and toronto 11th west and east. Not looking good." }-
There's a new coach in town if you've been watching sportsnews.

[jmonge]

;D :)

[jynx]

Just try new combination right now.

Real Time :

Returnil System Safe 2011 (free)
Stormshield Personal Edition
MCShield2


On Demand:

Emsisoft Emergency Kit
Malwarebytes Anti-Malware (free)
Comodo Cleaning Essentials


also use combination of Hostman + Peerblock + AdFender to block bad website and ad, because i like my browser free of plugin

"i like to keep it light and free"

[The Hammer]

Not familiar with Stormshield. What is it?

[jmonge]

hips;D

[jynx]

Just found and try it some weeks ago and , here is the key features of stormshield :


Vulnerability protection thwarts any attempt to exploit software vulnerabilities. This method of attack is the one most commonly used in the area of data theft and virus propagation.
Keylogging protection blocks keylogging software before it is launched on a computer. Web surfers are protected against these attacks, which are generally aimed at stealing passwords, bank card numbers, and other confidential information.
Registry protection blocks one of the primary means of operating system corruption. One example of this protection is preventing the installation of malware programs present on infected Web pages or in compromised files.
Activity logs monitor operations that have taken place on the protected computer and ensure the establishment of the desired level of security.

[KelvinW4]

-{ Quote: "Not familiar with Stormshield. What is it?" }-
It is sort of a HIPS program.
LINK
http://www.skyrecon.com/en/StormShield-Personal-Edition

[KelvinW4]

-{ Quote: "Just found and try it some weeks ago and , here is the key features of stormshield :


Vulnerability protection thwarts any attempt to exploit software vulnerabilities. This method of attack is the one most commonly used in the area of data theft and virus propagation.
Keylogging protection blocks keylogging software before it is launched on a computer. Web surfers are protected against these attacks, which are generally aimed at stealing passwords, bank card numbers, and other confidential information.
Registry protection blocks one of the primary means of operating system corruption. One example of this protection is preventing the installation of malware programs present on infected Web pages or in compromised files.
Activity logs monitor operations that have taken place on the protected computer and ensure the establishment of the desired level of security.
" }-


Hows your experience with it so far?

[jynx]

-{ Quote: "Hows your experience with it so far?" }-

Its light and not many so many alert (less alert from another hips/bb(i dont know the diferents) that i try last year), i didn't test its effectiveness, is there anyone else that use it here? maybe someone cant test it, because i am not familiar with testing security software.

[jmonge]

i tested it with the security tool fake antivirus and it fail big time,the registry protection is nice feature

[jynx]

Yeah, i like the registry protection to. Any suggestions for something that similar to it, what about spyshellter or maybe malware defender?

[jmonge]

malware defender registry protection is top notch :thumb: :thumb:

[jynx]

i like the way it can delete locked file to and the its network protection, because i think it important in malware cleaning, do you have any suggestion how to setup it, i hear for some people that use it, that they spent some hour to setup it by launch all software in their computer one by one in training mode.
Maybe when i have some spare time, i'll try malware defender again.

Oh yeah, how about spyshellter free, i like its function to run software in restricted mode.

[jmonge]

2 programs i really love and they are here to stay are AppGuard and HitManPro:thumb: :thumb: :thumb: :thumb: :thumb: :thumb: :thumb:

[KelvinW4]

-{ Quote: "Yeah, i like the registry protection to. Any suggestions for something that similar to it, what about spyshellter or maybe malware defender?" }-
Haha Malware Defender is for you if you like to respond to questions all day :):-X
spyshelter is pretty nice but becoming a HIPS of you know what i mean :argh:

[jynx]

No thanks, i prefer to respond when its critical to my system security:)
so, i'll stick with it right now. Maybe i'll try them again when i reinstall my system next time.

[acr1965]

-{ Quote: "2 programs i really love and they are here to stay are AppGuard and HitManPro:thumb: :thumb: :thumb: :thumb: :thumb: :thumb: :thumb:" }-
is Appguard very similar to Applocker? I have Win7 Ultimate but don't like using applocker, mainly because of some updates, dealing with java, etc

[jmonge]

it is more complex:thumb:

[Mongol]

With the new update I went back to the bear. Panda is back on board here..;D

[acr1965]

-{ Quote: "it is more complex:thumb:" }-
can all white listed programs update or does their appguard protection have to be disabled first?

[1chaoticadult]

-{ Quote: "With the new update I went back to the bear. Panda is back on board here..;D" }-

The Panda is dancing for joy because of your return ;D

[jmonge]

google chrome is in the white list and udates with no problems but when i try to udates IE i have to temporary disable AppGuard to updates for me is not a big deal but for others maybe

[jmonge]

trying out Online Armor Free in one computer the rest remain thesame with appguard:thumb:

[Rompin Raider]

-{ Quote: "2 programs i really love and they are here to stay are AppGuard and HitManPro:thumb: :thumb: :thumb: :thumb: :thumb: :thumb: :thumb:" }-
Can I write that down trjam jr.?:argh:

[jmonge]

2 programs i really love and they are here to stay are AppGuard and HitManPro
trying out Online Armor Free in one computer the rest remain thesame with appguard

[acr1965]

-{ Quote: "google chrome is in the white list and udates with no problems but when i try to udates IE i have to temporary disable AppGuard to updates for me is not a big deal but for others maybe" }-
That's the issue I have with applocker but if I was able to find an anti-executable that allowed white listed programs to update I would give it a try. I guess having to allow flash, java, pdf viewers, etc to update is important but I wish their updater component could be white listed. I don't know why an updater cannot be allowed to connect to a specific site and download updates, if available. Then a person could just be notified the program is checking for updates and approve that plus the updated program to be added to the white list. I'm sure I am missing something but the anti-executable programs always seem to lack that simplicity. Guess I'll just stick with sandboxie for now. I think DW has some similar features to what I want but my system always start slowing down after a day or two of running DW.

[Tarantula]

Ad-Aware 10 free (beta)
MBAM (on demand)
Windows 7 firewall
System image

[RSpanky]

I want to Thank dja2k and Wilders for letting this tread grow since 2005. I can't remember how I found this forum but I'm glad I did ;D. I don't do a lot of posting but when I do have a question or have a problem with my machine I have always got the help that I need to resolve my problem. I just want to say Thanks to all the members for helping out. I can honestly say that I feel safe when I am on my machine. Thanks :thumb:

[buckslayr]

-{ Quote: "I'm liking SpyShelter Firewall with my browsers running restricted. Would it be ok to also run AppGuard? Or would they interfere with each other?" }-

Decided to stay with set up. Really like Spyshelter firewall. With browsers restricted it's stopped all malware thrown at it. Keeping MBAM pro for a second opinion.

[jmonge]

buckslayr:thumb: :thumb:

[powerpack]

-{ Quote: "do you have any suggestion how to setup it, i hear for some people that use it, that they spent some hour to setup it by launch all software in their computer one by one in training mode.
" }-

hey jynx,

Here you go,

http://www.wilderssecurity.com/showthread.php?t=226940

Thanks,
PP

[Amit]

with wsa + eam my system feels tough against malware.......I've topped it off with sbie, mbam, sas, hitman pro, zemana al, secunia psi and keriver 1-click restore.........

[jynx]

-{ Quote: "

http://www.wilderssecurity.com/showthread.php?t=226940

" }-

Thanks powerpack, nice tutorial :thumb::thumb:, i'll try MD again someday:D .

[Spruce]

Kaspersky Internet Security
Ad Muncher
OpenDNS
Some on-demand thingy now and then

[Dark Shadow]

So far I love Appguard so much I dropped my beloved Sandboxie a while back and just Added MBAM Real time,Hitman Pro for OD scans and windows firewall set to block all incoming.So far its keeping everything off even when driving through the hood ;D

[jmonge]

Djohn :thumb: :thumb: good choice and less trouble

[Motherroad]

Currently using Online Armor Premium and Webroot Security Essentials. On demand I have MBAM and Emisoft. Also running RollbackRX. Running nice so far.

[The_ChamP]

Changed to easeus todo backup and panda cloud

[FadeAway]

W7 x64 - Hardened

Router
Windows 7 FW (with some custom rules)
W7FC (free)
MSE
WP+
SBIE
FF - with AB+ & BrowserProtect

cports
CCleaner
MBAM free

System images on external drive

[LoneWolf]

SpyShelter Firewall 1.0
AppGuard 3.2
Shadow Defender 1.1.0.325

[Dark Shadow]

-{ Quote: "Djohn :thumb: :thumb: good choice and less trouble" }-
Oh yes,it just works quietly no aggravations.:thumb:

[kjdemuth]

djohn,
Did you have problems with sandboxie and appguard. They work well together from what I've seen.

[Dark Shadow]

-{ Quote: "SpyShelter Firewall 1.0
AppGuard 3.2
Shadow Defender 1.1.0.325" }-
Nice set up and Keeping the excellent XP Rocking.

[buckslayr]

-{ Quote: "SpyShelter Firewall 1.0
AppGuard 3.2
Shadow Defender 1.1.0.325" }-


SpyShelter Firewall:thumb: :thumb: :thumb:

[Dark Shadow]

-{ Quote: "djohn,
Did you have problems with sandboxie and appguard. They work well together from what I've seen." }-
Other then slower browsing No.I just felt like a change but it was very hard to drop sandboxie,It was like quite smoking having with draws.

[kjdemuth]

Yeah I can't let go of sandboxie. I had both working with Comodo firewall and it seemed to work fine.

[Page42]

-{ Quote: "I just felt like a change but it was very hard to drop sandboxie,It was like quite smoking having with draws." }-
-{ Quote: "Yeah I can't let go of sandboxie." }-
One year and two months now I've been running Sandboxie on my two XP machines, and I don't want to even think about connecting to the internet without it.

[kjdemuth]

+1.
It has a permanent place on my machine. I might go back to appguard at one point. Bouncing back and fourth between av and no av.

[KelvinW4]

I don't know what to use right now ???

[EASTER]

-{ Quote: "I don't know what to use right now ???" }-

No need to fret in the face of other peeps self-confidence in what they might find adequate for the present. :)

I been at this since Windows 98 and even with all my malware research experience and security programs i been through, total PC security still is proving be a very delicate balancing act.

In short, my answer if it helps, is experiment. In other words, trial & error applies to the most seasoned user as well as any first time novice. The only difference is that we're more expecting of the unexpected 8)

Continue to regularly check out posts and reviews and test your own setup as many times as it takes till you're satisfied with it. By then, like the rest of us, another change or new product will again draw us back into it all over again.

[Blues7]

The best combination of protection and low resource usage I have found to date on my XP Pro SP3 setup is the one I am using currently:

PrivateFirewall (Firewall, HIPS, Anti-Logger)
Sandboxie (Sandboxing Browsers & Internet Facing Apps)
Emsisoft Anti-Malware (All Guards Enabled)
Malwarebytes Pro (Anti-Malware & Website Blocking)

These apps all work seamlessly with one another and have low to zero CPU and low RAM usage on my system. No drag whatsoever.

[hogndog]

Still using, Sandboxie, Windows Defender, Hostsman & a Router.. light on resources but very effective.. :)

[CogitoTesting]

-{ Quote: "I don't know what to use right now ???" }-

I know it could get confusing. However, let me make a suggestion: keep your security set-up simple, and that's it.

Here are some possible choices for you:

1) No AV:

ZoneAlarm free and BufferZone Pro

2) With AV:

Comodo Firewall and Avast Free.

You should not have more than two security software in your security apparatus. These set-ups will serve you well and will allow you to enjoy your computer and not the other way around. ;).

Thanks.

[1chaoticadult]

@Easter

Thats called the Wilders Syndrome ;D

[Dark Shadow]

-{ Quote: "One year and two months now I've been running Sandboxie on my two XP machines, and I don't want to even think about connecting to the internet without it." }-
I put sandboxie back on my kids computer because I had to restore a image three times in the last couple of months because they infested the machine with a bunch of nasties with antivirus protection.In fact Hitman Pro found a bunch of badies and MBAM On Demand found so much I lost count.Now there on parental lockdown mode no more freedom for the kids there rights are stripped away for a long while.

[zerotox]

Currently trying Trend Micro Titanium Maximum Security 2012. No other security software in real time. I aksed it in the program's thread but I'll ask for help here as well - the biggest issue for me are the severely extended pings - from 25 ms average to ovr 240 ms. Anyone that has had the same experience, anyone with an idea how to reduce the pings would be appreciated or if this is inevitable, please share your experience.

[KelvinW4]

Yes, lol, I have tried many AV's and sandboxes and HIPS but nobody suits me :(
Zone alarm slows down shutdown and boot and BSOD sometime and yeah.
Bufferzone just slow me down a bit regularly.
Comodo I no like too much maybe wait for version 6
Avast caused a BSOD so may wait a while
Sandboxie I just not good a feeling
Avira slow down my computer and I don't want the ad
Unthreat gave me a BSOD on boot
Wish had Emsisoft IS
Online Armor slow down.

Just gonna stick with the trial of Mamutu but and Image and HitmanP/MBAM:thumb: :thumb: :thumb:

[KelvinW4]

-{ Quote: "Currently trying Trend Micro Titanium Maximum Security 2012. No other security software in real time. I aksed it in the program's thread but I'll ask for help here as well - the biggest issue for me are the severely extended pings - from 25 ms average to ovr 240 ms. Anyone that has had the same experience, anyone with an idea how to reduce the pings would be appreciated or if this is inevitable, please share your experience." }-
Extended pings i believe are because of the firewall

[justenough]

-{ Quote: "The best combination of protection and low resource usage I have found to date on my XP Pro SP3 setup is the one I am using currently:

PrivateFirewall (Firewall, HIPS, Anti-Logger)
Sandboxie (Sandboxing Browsers & Internet Facing Apps)
Emsisoft Anti-Malware (All Guards Enabled)
Malwarebytes Pro (Anti-Malware & Website Blocking)

These apps all work seamlessly with one another and have low to zero CPU and low RAM usage on my system. No drag whatsoever." }-

Nice combination there Blues7, think I'll load that up and see how it does on my computer.

[1chaoticadult]

-{ Quote: "Extended pings i believe are because of the firewall" }-

Trend micro does not have a firewall, just a firewall booster which optimizes windows firewall.

[Blues7]

-{ Quote: "Nice combination there Blues7, think I'll load that up and see how it does on my computer." }-


Let me know how it works out for you. (Feel free to send a PM in case I miss it here.) :thumb:

[Amit]

-{ Quote: "One year and two months now I've been running Sandboxie on my two XP machines, and I don't want to even think about connecting to the internet without it." }-
yeah I'd whack any av which would not play nice along with sbie......sbie and an imaging software with images/snapshots on external drives with winpe is all you to sleep tight and roam the dark corners of the web if you ask me.......

[Amit]

-{ Quote: "@Easter

Thats called the Wilders Syndrome ;D" }-
right on.......but you seem to be immune....which vaccine did you use?.......

[Amit]

-{ Quote: "Yes, lol, I have tried many AV's and sandboxes and HIPS but nobody suits me :(
Zone alarm slows down shutdown and boot and BSOD sometime and yeah.
Bufferzone just slow me down a bit regularly.
Comodo I no like too much maybe wait for version 6
Avast caused a BSOD so may wait a while
Sandboxie I just not good a feeling
Avira slow down my computer and I don't want the ad
Unthreat gave me a BSOD on boot
Wish had Emsisoft IS
Online Armor slow down.

Just gonna stick with the trial of Mamutu but and Image and HitmanP/MBAM:thumb: :thumb: :thumb:" }-
what you need my friend is spyshelter firewall.......along with your hitman pro/mbam and image backup......you're good to rock.....you'll not talk about slowdowns....but you'll fly.......

[Amit]

-{ Quote: "
Sandboxie I just not good a feeling" }-
if I were you...I'd try to get sbie to my taste...maybe add some pepper and salt.....

[Amit]

-{ Quote: "SpyShelter Firewall 1.0
AppGuard 3.2
Shadow Defender 1.1.0.325" }-
awesome setup as always..........but wonder why you'd even need appguard and shadow defender when you've got macrium reflect and spyshelter fw......

[Amit]

-{ Quote: "The best combination of protection and low resource usage I have found to date on my XP Pro SP3 setup is the one I am using currently:

PrivateFirewall (Firewall, HIPS, Anti-Logger)
Sandboxie (Sandboxing Browsers & Internet Facing Apps)
Emsisoft Anti-Malware (All Guards Enabled)
Malwarebytes Pro (Anti-Malware & Website Blocking)

These apps all work seamlessly with one another and have low to zero CPU and low RAM usage on my system. No drag whatsoever." }-
nice all round setup :thumb:.......what imaging/backup solution do you use?.......

[AlexC]

Returned to Shadow Defender + Sandboxie. Currently using Windows only for software testing :thumb:

[Blues7]

-{ Quote: "nice all round setup :thumb:.......what imaging/backup solution do you use?......." }-

Thanks. So far, so good. 8)

Macrium or Drive Snapshot for imaging. (I usually alternate one or the other.)

[The Seeker]

Have thrown Malwarebytes Anti-Malware PRO back into the mix. It's just too good a program to not have running alongside Webroot SecureAnywhere (which itself it designed to run nicely alongside other security apps).

[Amit]

-{ Quote: "Thanks. So far, so good. 8)

Macrium or Drive Snapshot for imaging. (I usually alternate one or the other.)" }-
you alternate imaging software from time to time?.....well, chaotic adult is right.....Wilders Syndrome is taking over........

[Blues7]

-{ Quote: "you alternate imaging software from time to time?.....well, chaotic adult is right.....Wilders Syndrome is taking over........" }-

I happen to have each of 'em available so I alternate which one I use to make an image.

If one fails, I have the other.

Restoring my hard drive is not something I look forward to doing and when I have to, I want to make sure I have an image I can rely on.

Of course, YMMV. Me, I like a backup plan, especially since it doesn't cause any issue or extra effort to alternate their use. Wilders Syndrome? I don't think so.

(Think of it as packing an extra pair of clean underwear just in case. ;) )

[Amit]

-{ Quote: "I happen to have each of 'em available so I alternate which one I use to make an image.

If one fails, I have the other.

Restoring my hard drive is not something I look forward to doing and when I have to, I want to make sure I have an image I can rely on.

Of course, YMMV. Me, I like a backup plan, especially since it doesn't cause any issue or extra effort to alternate their use. Wilders Syndrome? I don't think so.

(Think of it as packing an extra pair of clean underwear just in case. ;) )" }-
ah I see......

[1chaoticadult]

-{ Quote: "right on.......but you seem to be immune....which vaccine did you use?......." }-

Its a special breed i cooked up in my private lab ;D

[Amit]

-{ Quote: "Its a special breed i cooked up in my private lab ;D" }-
I'll ask J to cook some fried bacon on his system.......then I'll mix that into your one.....you'll sure be changing av .......

[1chaoticadult]

-{ Quote: "I'll ask J to cook some fried bacon on his system.......then I'll mix that into your one.....you'll sure be changing av ......." }-

I'll be changing laptops lol

[jmonge]

OnLine Armor Free
:thumb: :thumb:

[JoeBlack40]

Switched to...
Avast 7 free
Rising FW
Mamutu
Sandboxie

[KelvinW4]

-{ Quote: "what you need my friend is spyshelter firewall.......along with your hitman pro/mbam and image backup......you're good to rock.....you'll not talk about slowdowns....but you'll fly......." }-
But I am only 15 and cannot simply "Purchase" things online so yeah... If I could would've bought Emsisoft Internet Security Pack already..... ::)

[LoneWolf]

-{ Quote: "awesome setup as always..........but wonder why you'd even need appguard and shadow defender when you've got macrium reflect and spyshelter fw......" }-

Shadow Defender has proven time and time again to be a reliable part of my setup and has a permanent spot here until proven otherwise.
AppGuard is probably not needed with SpyShelter Firewall on board but they co exist just fine with each other plus it adds protection as in nothing new is allowed to execute with out my say so, I just believe a layered security defense is the best defense.

[Boost]

-{ Quote: "awesome setup as always..........but wonder why you'd even need appguard and shadow defender when you've got macrium reflect and spyshelter fw......" }-

Personally,I'd trust Shadowdefender over appguard and a firewall any day of the week or month.

[kjdemuth]

-{ Quote: "Shadow Defender has proven time and time again to be a reliable part of my setup and has a permanent spot here until proven otherwise.
AppGuard is probably not needed with SpyShelter Firewall on board but they co exist just fine with each other plus it adds protection as in nothing new is allowed to execute with out my say so, I just believe a layered security defense is the best defense." }-
:thumb: +1

[jmonge]

how does OA Run-Safer works when the browser is set to Run Safer?is it like sandboxie?defensewall or geswall?what is it exactly is or what does do to protect the browser from?thanks

[Amit]

-{ Quote: "I'll be changing laptops lol" }-
lol.....how's active@disk ?........did it ever save you?........

[Amit]

-{ Quote: "But I am only 15 and cannot simply "Purchase" things online so yeah... If I could would've bought Emsisoft Internet Security Pack already..... ::)" }-
hmm........then why are you trialing mamutu?....:argh: .........anyways......use panda cloud/avast free(new release solves bsod I think)......privatefirewall.......sandboxie(if you set it correctly it's near bullet-proof, you can look in the sandboxing sub-forum for tips)....lastpass/keepass.....truecrypt.....mbam.....hitmanpro..secunia psi....keriver 1-click restore(keep the snapshots in external drives)..........

[Amit]

-{ Quote: "Shadow Defender has proven time and time again to be a reliable part of my setup and has a permanent spot here until proven otherwise.
AppGuard is probably not needed with SpyShelter Firewall on board but they co exist just fine with each other plus it adds protection as in nothing new is allowed to execute with out my say so, I just believe a layered security defense is the best defense." }-
yeah I also believe layered security is the best approach to security......

[Hungry Man]

Set Chrome and downloads folder to low integrity with no read/execute up.

Set SRP to a few areas.

[ichito]

-{ Quote: "how does OA Run-Safer works when the browser is set to Run Safer?is it like sandboxie?defensewall or geswall?what is it exactly is or what does do to protect the browser from?thanks" }-
It's very useful feature and was used always by me both in Free and Premium version. It works very nice and smooth with all apps in RS mode (internet browsers, PIM, pdf-readers, word processors, media players, graphic viewers, etc.) and I think even better than similar feature in SS.
It's compared to the limited user accounts restrictions but only for choosen apps...more info here
-{ Quote: "Limited user accounts offer strong protection, but are rarely used by the majority of computer users. RunSafer makes using an Administrator account safer by running user-selected programs as a Limited user when you are in an Administrator account.

When a program is running using RunSafer, any other program that is launched by this program will also "inherit" the Limited user account restrictions. This means that when your browser is run using RunSafer and a document viewer or media player is automatically launched to view content from the internet, then that program also inherits the same security restrictions; if the document viewer or media player ends up being used to infect your computer then the malware will be heavily restricted in the ways that it could infect your system.

Some malware cannot infect a computer with the restrictions of a Limited user account at all.

Using RunSafer" }-
http://www.emsisoft.com/en/info/oa/KF-RunSafer.shtml
BTW...only OA Free?...you are brave...didn't you think that "you are driving car with only one hand"? ;D

[Amit]

-{ Quote: "It's very useful feature and was used always by me both in Free and Premium version. It works very nice and smooth with all apps in RS mode (internet browsers, PIM, pdf-readers, word processors, media players, graphic viewers, etc.) and I think even better than similar feature in SS.
It's compared to the limited user accounts restrictions but only for choosen apps...more info here" }-
so it's more like spyshelter's restricted apps........

[jmonge]

ichito thanks it is very clear now thanks it is top notch:thumb:
i run my browser safer

[Kees1958]

Online armor used to have an option to run all unknown apps in the 'run safer' mode. I do not know whether this still exists, but this is a very usefull option (when not installing programs that is). I have not used OA for a year or three, so I can't tell where to look for it.

[1chaoticadult]

-{ Quote: "lol.....how's active@disk ?........did it ever save you?........" }-

Yep many times my friend. Just recently it helped me figured what was blue screening my laptop.

-{ Quote: "Online armor used to have an option to run all unknown apps in the 'run safer' mode. I do not know whether this still exists, but this is a very usefull option (when not installing programs that is). I have not used OA for a year or three, so I can't tell where to look for it." }-

It still has this option. It is in the programs section under options.

[jmonge]

yes it is still there and even for the free version under programs options:)

[1chaoticadult]

-{ Quote: "yes it is still there and even for the free version under programs options:)" }-

Yep J. I notice the option is off by default.

[jmonge]

:thumb: :thumb:

[KelvinW4]

I find Mamutu light and quiet :-* :-*

[ichito]

-{ Quote: "I find Mamutu light and quiet :-* :-*" }-
as always...and of course powerful :thumb:

[Amit]

@ichito
what av are you using?......backup solution?......

[ichito]

-{ Quote: "@ichito
what av are you using?......backup solution?......" }-
No AV in real-time on laptop with L'n'S and Mamutu...only BidDefender TL as add-on to Firefox (with AdBlock, NoScript, BetterPrivacy and Ghostery)...and nothing more :) On-demand Wondershare Time Freeze, MBAM, EMK, Runscanner and to system backup/restore 1-Click Keriver.
On the second system in home (W7 32-bit) there are MSE and SpyShelter FW in real-time...on-demand and backup - as above except virtualisation app.
In laptop I'm using - Symantec EP 11 + Shadow Defender + SpyShelter Premium...on-demand MBAM, EMK, Runscanner.
That's all :)

[Amit]

-{ Quote: "No AV in real-time on laptop with L'n'S and Mamutu...only BidDefender TL as add-on to Firefox (with AdBlock, NoScript, BetterPrivacy and Ghostery)...and nothing more :) On-demand Wondershare Time Freeze, MBAM, EMK, Runscanner and to system backup/restore 1-Click Keriver.
On the second system in home (W7 32-bit) there are MSE and SpyShelter FW in real-time...on-demand and backup - as above except virtualisation app.
In laptop I'm using - Symantec EP 11 + Shadow Defender + SpyShelter Premium...on-demand MBAM, EMK, Runscanner.
That's all :)" }-
ah! great:thumb:.......I wonder why do you need time freeze when you've got keriver?

[ichito]

-{ Quote: "ah! great:thumb:.......I wonder why do you need time freeze when you've got keriver?" }-
:)
First...WTF is useful and helpful when I try to test some app that could be sometime very often (few time a day) if I have the "vein" ;)
second...it's not my computer (my wife's) and sometimes all changes made by me have to be removed...you know ;D
Keriver is allways the "last line of defense"...against own "enemy mine" ;D

[Amit]

-{ Quote: ":)
First...WTF is useful and helpful when I try to test some app that could be sometime very often (few time a day) if I have the "vein" ;)
second...it's not my computer (my wife's) and sometimes all changes made by me have to be removed...you know ;D
Keriver is allways the "last line of defense"...against own "enemy mine" ;D" }-
great then....:thumb:

[Mongol]

Well it's back to the "root"...Webroot that is...:thumb: ;D

[eugene91]

Looking to change avast! into something else.. any recommendations?

Add On: Free or 6 months+ license recommendations only :P

[tomazyk]

-{ Quote: "Looking to change avast! into something else.. any recommendations?" }-

I don't use AV for some time now, but as I read on these forums, Webroot has become popular among users.

If you go for free, I would recommend MSE.

[Amit]

-{ Quote: "Looking to change avast! into something else.. any recommendations?

Add On: Free or 6 months+ license recommendations only :P" }-
panda cloud av.....:thumb:

[kjdemuth]

+1 on panda cloud av. If you got to facebook you can still get the pro version for 6 months.
Also if you looking for webroot check this out...http://store.downloadcrew.com/p18885-webroot_internet_security_essentials_2011_3-pc
Upgrades you to WSA after registration. Awesome deal.

[eugene91]

-{ Quote: "panda cloud av.....:thumb:" }-
Recently Panda Security got hacked by Anonymous.. Doesn't sound good for now :lurking:

[KelvinW4]

-{ Quote: "Recently Panda Security got hacked by Anonymous.. Doesn't sound good for now :lurking:" }-
What happened?

[LoneWolf]

DefenseWall 3.17
Zemana 1.9.2.941
Shadow Defender 1.1.0.325

Macrium Reflect ~ System Explorer ~ SeconfigXp ~ AdMuncher ~ OpenDNS ~ Opera

[Rompin Raider]

-{ Quote: "Well it's back to the "root"...Webroot that is...:thumb: ;D" }-
I know the feeling....steady as she goes! I use that and AIS....they both have built in boomerangs!;D

[buckslayr]

Webroot SecureAnywhere Essentials

[beetlebum]

Long time lurker ... first time poster.

I've been lurking on these forums for several months, and I've learned a lot from them.

Onto my security set-up:

For my main laptop:

Windows 7 64-Bit
UAC Max
DEP enabled.

Real Time:

Webroot Secureanywhere Complete
Spyshelter
Malwarebytes Pro

On-Demand:

Shadow Defender
Trend Micro Housecall
Superantispyware (portable)
Dr. Web Cureit
Eset Nod32 online scanner

Browsers:

Google Chrome -- Scriptno and Adblock
Firefox -- NoScript

Other software:

Eraser
Roboform
True Crypt
System Mechanic and CCleaner to clean out the excess stuff.

For my netbook:

Windows 7 32-Bit

Standard account

Real Time:

Webroot Secureanywhere Antivirus
Look 'n' Stop Firewall

On Demand:

Malwarebytes Pro

And the same other scanners that I use on my main laptop. The only exception is Shadow Defender, because my netbook does not support virtualization.

Browsers:

Same as above, except without Adblock for Chrome.

Other software:

Also have nearly the same setup as my laptop, minus Eraser.

For my mom's laptop:

Windows 7 64-Bit

Standard user account (only I have the password and the administrator credentials)

Real Time:

Eset Nod32 (paid for by me).
Threatfire
Malwarebytes Pro (but only in the admin account, and also paid for by me).

On-Demand:

Malwarebytes Pro (for her account).
Shadow Defender

And the same scanners I use as above, as well as the same browsers with the same add-ons.

Other software:

I also have Truecrypt, Eraser, etc installed on hers. The only exception is the absence of Roboform.

So that's my first post, and it is a long one, now innit? I hope to contribute more to the forums.

EDIT: Removed EMET as it was causing problems.

[beetlebum]

I forgot to also add I installed Trusteer Rapport on all three PCs.

[tomazyk]

-{ Quote: "I forgot to also add I installed Trusteer Rapport on all three PCs." }-

What about system backup software as on-demand? It can save you a lot of trouble if something goes wrong.

[beetlebum]

-{ Quote: "What about system backup software as on-demand? It can save you a lot of trouble if something goes wrong." }-

I should add two of the PCs are a Dell, and Dell Datasafe works well as a system backup. My main laptop is an HP, and I have tested out different system backup software for it, though I do have my files saved on Dropbox, ADrive and other sites, as well as backed up to an external source.

[buckslayr]

New setup.....AppGuard and BitDefender Traffic Light. So far so good.

[Hungry Man]

Network
DDWRT Router running recommended build - Remote Access disabled
DDWRT firewall turned on
OpenDNS

Realtime Protection
Built in Windows 8 security - SmartScreen, mitigation techniques, etc
Defender turned off

System Hardening -- Windows 8 64bit
UAC on Max
Disabled some services (netbios, printer, a few others)
As few programs installed as possible.
BitLocker full drive encryption 20+ Character password
BIOS Password
(N)EMET:
DEP Always On
SEHOP Opt Out
ASLR Opt In

All .exe's forced with EMET.dll.

Applocker/ SRP
Deny execution from RAMDisk (see below.) SRP - Disallowed.

Browser -- Chrome Beta
Block 3rd Party Cookies
Built in malware protection
Default PDF reader -- no adobe necessary
Adblock Plus with DNT
HTTPS Everywhere
ScriptNo

All User_Data kept on a RAMDisk. There's a "clean" image, which gets restored at startup. Everything that happens after that clean image is completely wiped.

A "private" profile with more aggressive privacy/ data settings.

Backup Browser -- Chrome Canary

Portable On Demand Scanners/ Tools -- USB Drive
RKILL.com
SuperAntiSpyware Portable
Hitman Pro
Ninite/ FileHippo for updating


Ubuntu 11.10 (Work in progress)
System Hardening
AppArmor configured for Chrome, Java, Pidgin, and various services (44 total enforced profiles)


Browser - Chrome
Seccomp sandbox + AppArmor sandbox enabled.
Adblock Plus
HTTPS Everywhere
Bock 3rd Party Cookies
ScriptNo for my "Secure" Chrome profile as well as stricter cookie/ plugin settings.

[Mongol]

-{ Quote: "Long time lurker ... first time poster.

I've been lurking on these forums for several months, and I've learned a lot from them.

Onto my security set-up:

For my main laptop:

Windows 7 64-Bit
UAC Max
DEP enabled.

Real Time:

Webroot Secureanywhere Complete
Spyshelter
Malwarebytes Pro

On-Demand:

Shadow Defender
Trend Micro Housecall
Superantispyware (portable)
Dr. Web Cureit
Eset Nod32 online scanner

Browsers:

Google Chrome -- Scriptno and Adblock
Firefox -- NoScript

Other software:

Eraser
Roboform
True Crypt
System Mechanic and CCleaner to clean out the excess stuff.

For my netbook:

Windows 7 32-Bit

Standard account

Real Time:

Webroot Secureanywhere Antivirus
Look 'n' Stop Firewall

On Demand:

Malwarebytes Pro

And the same other scanners that I use on my main laptop. The only exception is Shadow Defender, because my netbook does not support virtualization.

Browsers:

Same as above, except without Adblock for Chrome.

Other software:

Also have nearly the same setup as my laptop, minus Eraser.

For my mom's laptop:

Windows 7 64-Bit

Standard user account (only I have the password and the administrator credentials)

Real Time:

Eset Nod32 (paid for by me).
Threatfire
Malwarebytes Pro (but only in the admin account, and also paid for by me).

On-Demand:

Malwarebytes Pro (for her account).
Shadow Defender

And the same scanners I use as above, as well as the same browsers with the same add-ons.

Other software:

I also have Truecrypt, Eraser, etc installed on hers. The only exception is the absence of Roboform.

So that's my first post, and it is a long one, now innit? I hope to contribute more to the forums.

EDIT: Removed EMET as it was causing problems." }-

You've been lurking and have indeed learned a lot. A very solid setup on both computers...:thumb:

[m00nbl00d]

-{ Quote: "[...]
Deny execution from AppData folder, exception to publisher and hashes. (Work in progress)[...]" }-

I've mentioned it before... but, I'll mention it again... just in case... ;)

When you allow by Publisher or Hash, what you're trying to achieve with Deny execution from AppData folder, exception to publisher and hashes.... forget it, it won't work.

A Publisher rule means that any file signed by the Publisher is executed (you can fine tune for specific versions and all that; but malware faking that, gets to be executed, for example).

A Hash rule means that the file will be launched, regardless of where it is located.

[Hungry Man]

Yeah, I should remove that (wasn't paying attention) as I only deny execution from teh ramdisk now.

[The Hammer]

Updated PCAV the other day. Sig has not changed otherwise.

[jmonge]

NoVirusThanks EXE Radar Pro

[Amit]

webroot secureanywhere
malwarebytes antimalware pro
superantispyware pro
sandboxie paid
zemana antilogger
hitman pro paid
keriver 1-click restore
google chrome-lastpass,adp beta & wot
secunia psi

I think I'm all covered.......netbook running fast :thumb:

[Sevens]

Win. 7 x86
Realtime:
DefenseWall Personal Firewall 3.17
BitDefender TrafficLight

On Demand:
Macrium Reflect 5
Malwarebytes Anti-Malware

OFF
Windows Firewall
Windows Defender
UAC

[jmonge]

i am falling in love with IKARUS virus.utilities;) :thumb:

[STONEMAN]

@ jmonge, does that mean it will be gone in a day or two ;)

[G1111]

Windows 7 Home Premium SP1 x86

Firewall:
NAT Router (Password Protected)
Look’n’Stop Firewall 2.07 (Phant0m’s Ruleset)

Anti-Virus:
Emsisoft Anti-Malware 6.5.0.5 Beta
SUPERAntispyware 5.0.1146

HIPS/Blocking/Hardening:
DefenseWall HIPS/Personal Firewall 3.17
VoodooShield 1.00 Beta
EMET 2.1 (Internet facing applications & MS Office)
SpywareBlaster 4.6 (Ad-Aware custom blocking list)

Resident On Demand Scanners:
Malwarebytes Anti Malware Pro 1.60.1.1000
HitmanPro 3.6.0 Build 146
Mischel TrojanHunter 5.5 (1002)
Kaspersky TDSSKiller 2.7.20.0
WinPatrol Plus 24.3.2012.0

[jmonge]

i think it will stay:thumb:

[x942]

New Setup:

Network

- Belkin Router w/DDWRT
- WPA2-CCMP (AES) w/~60 char. password
- WPS Disabled (as per default with DDWRT)
- adblock and malware blocking hosts file at the router level
- Untangle box: Auto scan all packets for malware, block PDF's at firewall, IDS setup to block all internet access if under attack, Filter out all China and Russia based IP addresses, deny all incoming, out going allowed only if requested from inside the LAN and only on select ports (80,443, etc.)


XUbuntu 11.10
- LUKS/LVM FDE (Full Disk Encryption) W/100 Char. password. (I know half and my yubikey types the rest for me giving a pseudo-two-factor authentication.

- Chrome Dev build with ABP and Ghostery, always in incognito mode. (I use this for watching podcasts)

- VirtualBox for web browsing and banking:
2 VM's running AntiX, with firefox configured with noscript, ABP, ghostery, and WOT. I keep one for normal browsing and one for banking.

- Tripwire IDS to ensure nothing has been changed without consent.

- Chkrootkit and rkhunter to check for rootkit's

- UFW to configure iptables

- OpenDNS and DNSCrypt.


Passwords

All passwords are stored in a KeepassX database on my Ironkey which is encrypted a second time with TrueCrypt. 3 passwords and a yubikey are needed to get to it.

Truecrypt is using a cascade algorithm.

Storage

All devices are encrypted with LUKS or TrueCrypt w/ at least a 32 char. password. =)

[KelvinW4]

Added Comodo Firewall/D+ 5.10

[LoneWolf]

DefenseWall 3.17
EXE Radar Pro 1.3.6.5
Shadow Defender 1.1.0.325

Macrium Reflect ~ System Explorer ~ SeconfigXp ~ AdMuncher ~ OpenDNS ~ Opera

[gsarang]

DefenseWall HIPS v2.56 (gizmo edition)
NoVirusThanks Exe Radar Free v1.3.6.5
Kerio Personal Firewall 2.15 (BZ ruleset)

[KelvinW4]

Whats the difference between NovirusthanksFree and the pro version?

[buckslayr]

Added privatefirewall to Appguard. May be overkill but I feel pretty safe.

[trjam]

-{ Quote: "Nice combination there Blues7, think I'll load that up and see how it does on my computer." }-


What happened to MSE Beta.

[jmonge]

OnLine Armor Free
:thumb: :thumb:

[G1111]

-{ Quote: "i am falling in love with IKARUS virus.utilities i think it will stay
OnLine Armor Free :thumb: :thumb:" }-
That was quick. You can never get hacked jmonge because no one can figure out what is on your machine.

[jmonge]

actually i have both install;) but in my signiture i have OA;D

[jmonge]

i also have my browser run safer:thumb: it has a green border:thumb:

[caml light]

Windows 7 x64 SP1 (licensed)

- Chrome + WOT
- EAM 6 (licensed)
- MBAM Pro (licensed)
- Sandboxie (licensed)
- Ad Muncher Premium (licensed)

[Rompin Raider]

-{ Quote: "i am falling in love with IKARUS virus.utilities;) :thumb:" }-
You have been trjam'd! Under the spell!:argh: :argh:

[LoneWolf]

-{ Quote: "Whats the difference between NovirusthanksFree and the pro version?" }-

Not the best distinction between the two but the only one I know of until their website gets updated and they explain a little more in detail.
As I use the pro version I do not know what the free is missing.

http://www.wilderssecurity.com/showpost.php?p=2023738&postcount=464

http://www.wilderssecurity.com/showpost.php?p=2025471&postcount=481

[The_ChamP]

Removed avast
Added Kaspersky Internet Security 2012
Added Zemena Antilogger

[jmonge]

IKARUS virus.utilities and Mbam Pro :thumb:

[Dark Shadow]

I have a very short list of liked Antivirus and IKARUS is one of them. Good choice Jose:thumb:

[The_ChamP]

Do i need to do any setting to make kaspersky and zemena work properly ?

[SLE]

-{ Quote: "Do i need to do any setting to make kaspersky and zemena work properly ?" }-

You don't need Zemana. HIPS and PDM of KIS can handle all the things (and much more) Zemana can.

[beetlebum]

-{ Quote: "You've been lurking and have indeed learned a lot. A very solid setup on both computers...:thumb:" }-

Thanks :)

[hogndog]

I had Zemana Anti Keylogger and Mamutu both from Giveaway Of The Day.. didn't run them together.. I uninstalled them in favor of Sandboxie and Windows Defender.. :)

[tipo]

switched to prevx v3(not webroot) and defensewall.more than enough with solid protection.
oh yeah, incredible light too! ;) :thumb:

[trjam]

is it me, or does anyone else find the detection ability of WSA, weak. I mean real weak. Maybe I am doing something wrong.

[lws]

Added SuRun 1.2.1. Also have been using Sandboxie and Private Firewall.

[Mongol]

-{ Quote: "is it me, or does anyone else find the detection ability of WSA, weak. I mean real weak. Maybe I am doing something wrong." }-

I've found it pretty good at finding false positives. I have had a good half dozen in a few months. All in all though detections have seemed very solid though. I just go with the recommended settings.

[JoeBlack40]

Back (again!) to my (i guess i could really say it ;D ) favorite setup.
Panda Cloud
Privatefirewall
Sandboxie
WinPatrol Plus
8) :thumb:

[jmonge]

good joe:thumb:

[gsarang]

SpyShelter Personal Free 6.1
Kerio Personal Firewall 2.15 (BZ ruleset)

[The_ChamP]

-{ Quote: "You don't need Zemana. HIPS and PDM of KIS can handle all the things (and much more) Zemana can." }-
Thanx for the answer
Removed zemena till i have KIS

[nikanthpromod]

Novirusthanks ERP
Google DNS
Windows FW
Hitmanpro
Spywareblaster
VT uploader
Rollback RX
SUMo
FF 11 with ABP and FB addons

[EASTER]

Testing SeaMonkey (Whatta name) w/ghostery & NoScript --> Searching For snappier Broswer Speed

[nord1]

-{ Quote: "Testing SeaMonkey (Whatta name) w/ghostery & NoScript --> Searching For snappier Broswer Speed" }-

Easter,

Seamonkey, aka Mozilla Suite, aka Allizom (community nickname), aka Netscape Communicator reborn... Lost its name when Mozilla Corp decided to focus on Firefox and wanted no confusion over naming, so an alternative had to be found for the Suite.

<wry grin>

XP PRO SP3, DropMyRights, Avast 6, MalwareBytesPro, WinPatrol, OutPost Firewall 2009 Free

[Kees1958]

Simplified and improved Safe-Admin, based on OS(Win7 x32 ultimate) build-in protection.


----------- from network stack to process stack ------------------
Use Norton DNS through Router and Windows FW both for inbound and outbound
Set a deny execute on receiving folders of browser, e-mail and media player using Access Control Lists (right click folder, use tab security)


----------- from Low Rights (Protected mode) to Medium Rights (LUA) ---------------------
Using Chromium with its internal (low rights) sandbox plus added an extra policy box around Chromium by giving Low rights mandatory label to flash and pdf dll of chrome with ICACLS (the plug-ins are the weak spots IMO).


----------- Medium (LUA) rights to High (Admin) Rights --------------------
Threat Gates captured in Medium Rights:
- Added a Mandatory Medium level to mail and media player with ICACLS
- Chrome folder is outside safe location (UAC elevate from safe places only). Users have Read plus Execute ACL/Admins Full minus Execute ACL.

User space protection (all folders which Limited User has full access)
Set Default level of SRP to basic user. On windows 7, this basic user default effectively is a deny execute outside windows and program files on Windows 7 for users (Medium Level Integrity Level = old fashioned Limited User). With right click "Run as Admin", I can install EXE + MSI now from user space (using Symantec's registry tweak to run MSI as Admin).

Admin space protection (the UAC/SRP "safe places" = Windows and Program File)
UAC deny elevate of unsigned programs from "safe places", GPO deny Users to install unsigned drivers and deny install from removable media.
Lots of GPO hardening (e.g. UAC run all admins in admin approval mode and disable intelligent installer recognition)


----------- Real Time protection ---------------------------------
Using Microsoft's EMET 2.1 Buffer/memory overflow protection (Office, Foxit PDF, and internet facing like e-mail, mediaplayer and browser).
Browsing with Chromium "in private mode", no third party cookies using Google's safe browsing/download Website reputation check. For additional privacy I use Startpage as searchpage and AddBlockPlus extension. For additional web reputation I have added Link-Extend extension.

----------- On Demand ---------------------------------
Image backup (Win7)/Data backup (Ms Sync Toy) to Network Storage and HitmanPro Free scan

[trjam]

back to Ikarus

[JoeBlack40]

-{ Quote: "good joe:thumb:" }-
Thanks.Now that i've seen your sig,you opened my "appetite" to try OA again.I'm going to install it with Avast free.

[jmonge]

joe dont forget to run ur browser safer:thumb:

[JoeBlack40]

-{ Quote: "joe dont forget to run ur browser safer:thumb:" }-
Not good with SBIE?Or i should try without it and run the browsers safer with OA?

[jmonge]

too much protection man:)
with online armor runsafer is very strong and a plus you have a strong firewall also

[Ibrad]

Still rocking just Panda cloud on my two most active used machines, I have an old third desktop that I need to work on but it is barely used anymore so I have not done much to it.

I am thinking about bringing back a side kick of the product. I am debating between Webroot SA or Windows Defender for all the machines. I thought about bringing back KS PC Doc but it slows the boot down to much.

[justenough]

These days I'm running Sandboxie and EAM. MBAM Pro is on demand with scheduled scans.

[The Seeker]

Removed Malwarebytes Anti-Malware PRO as I'm feeling secure enough with WSA. Also, I'm trying to get my system running as lightly as possible. I may add MBAM back as an on-demand scanner at some point.