PDA

View Full Version : how far can we go without AV+AS?


testsoso
January 2nd, 2008, 08:33 PM
Please suggest a setup for this:

Win XP with 512 MB RAM, without AV or AS, use free apps if posible. I'm thinking of following setups:

1) Comodo Firewall and Defence+ after training, add Returnil Free.

2) Comodo Firewall and Defence+ after training, add Returnil Free + SafeSpace Free.

3) Comodo Firewall without D+, ThreatFire Free, Sandboxie, Returnil Free.

Are the above Idea any good? and Any other Suggestions?

Thanx!

Franklin
January 2nd, 2008, 08:56 PM
If no hardware firewall.
Comodo or Online Armour, Sandboxie and Returnil.

With a hardware firewall.
Sandboxie configured to stop all outbounds from within a sandboxed environment except for your browser and Returnil.

These are my personal choice and all your other setups seem to be ok.Just go with the one that suits your needs and resources.

An imaging app for backups can come in handy as well.

trjam
January 2nd, 2008, 09:16 PM
you can go real far. I am using Shadow Defender, Sandboxie and Threafire.

Diver
January 2nd, 2008, 11:08 PM
If you don't want to run a firewall due to system slow down and resource issues, just remember all this resident security software slows things down too. If it were me I would go with a free AV, one of the three A's. Personally I can't live with something like Comodo 3 With D+ on, but its pretty comprehensive and the price is right.

I honestly do not see the need for multiple virtualization solutions.

An alternative to HIPS that is free and light is to set up a LUA with a software restriction policy.

AKAJohnDoe
January 2nd, 2008, 11:26 PM
I am not overly impressed by Comodo

Kees1958
January 3rd, 2008, 03:48 AM
-{ Quote: "Please suggest a setup for this:

Win XP with 512 MB RAM, without AV or AS, use free apps if posible. I'm thinking of following setups:

1) Comodo Firewall and Defence+ after training, add Returnil Free.

2) Comodo Firewall and Defence+ after training, add Returnil Free + SafeSpace Free.

3) Comodo Firewall without D+, ThreatFire Free, Sandboxie, Returnil Free.

Are the above Idea any good? and Any other Suggestions?

Thanx!" }-

Testsoso,

Select an extra column (CPU time) in the process list of your XP task manager. Check for instance Tfservice and you will see it uses CPU-time. So I would suggest you try Comodo with D+ and during training use safespace or returnil.

After the training period check CPU time usage to choosebetween returnil or SafeSpace.

Alternative setup would be: http://www.wilderssecurity.com/showthread.php?t=195970

Regards Kees

solcroft
January 3rd, 2008, 05:54 AM
Assuming you know what you're doing, it's entirely possible and very likely that you'll remain malware-free with any of the three setups you mentioned.

Diver
January 3rd, 2008, 08:57 AM
-{ Quote: "Testsoso,

Select an extra column (CPU time) in the process list of your XP task manager. Check for instance Tfservice and you will see it uses CPU-time. So I would suggest you try Comodo with D+ and during training use safespace or returnil.

After the training period check CPU time usage to choosebetween returnil or SafeSpace.

Alternative setup would be: http://www.wilderssecurity.com/showthread.php?t=195970

Regards Kees" }-

Now, that is a cool idea.

Long View
January 3rd, 2008, 09:50 AM
How far can we go without AV+AS ?

Hardware firewall
Firefox
Returnil or deepFreeze in case the 1st 2 let me down
Acronis - in case everything lets me down

For the first 6 months or so I did run the odd on demand AV/AS but finding nothing my plan this year is to check every few months or so.

Franklin
January 3rd, 2008, 10:09 AM
Sandboxie is the best ever security app for inet surfing!

Defensewall is nearly or on par.(Not much Experience}

Returnil is brilliant as the backstop.

trjam
January 3rd, 2008, 10:37 AM
-{ Quote: "
I honestly do not see the need for multiple virtualization solutions." }-

You are right. My setup just got lighter.:thumb:

Peter2150
January 3rd, 2008, 11:01 AM
Just depends. Normally on my desktop I just run Sandboxie. But if I am playing with nasty stuff in my VM machine, I also put ShadowDefense in shadowmode on the desktop. Just in case

Pete