What is your security setup these days?

NoVirusThanks EXE Radar Pro

 

Feburary 23, 2012 - Updated , Added , Removed

Windows 7 Ultimate SP1 x64 - SUA & Applocker (MrBrian Ruleset)

(UAC: MAX , WD: OFF, FW: OFF, DEP: ON, SEHOP: ON, EMET: MAX)

Network

• Three Linksys WRT54G Routers (DD-WRT Firmware)
• Netgear PowerLine AV 500 Adapters
• Wired Cat5e Connection between all 3 Routers
• WPA2-PSK AES Encryption
• SPI Firewall Enabled
• OpenDNS Configuration

Resident

• Online Armor ++ 5.1.1.1485 Beta (Paid)
• Online Armor Premium 5.5.0.1566 Beta (Paid)
• Emsisoft Anti-Malware 6.5.0.3 Beta (Paid)
• Sandboxie 3.64 (Paid)
• Shadow Defender 1.1.0.325* (Paid)
• KeyScrambler Premium 2.9.0.2 (Paid)

On-Demand

• Active@ Disk Image 5.2.5* (Paid)
• VMWare Workstation 8.0.1 build-528992 (Paid)
• Hitman Pro 3.6.0.138

Browser, Immunization, Tweaks

• Firefox 11.0b3 (Fanboy's Blocking Lists via ABP, WOT, BetterPrivacy)
• LastPass 1.90.0 Premium (FireFox)
• Bluetack Safepeer SPLists (via OA for P2P Only)
• Spyware Blaster 4.6 (All Protection Enabled + Customblocking.txt)
• BlackViper's Services Registry Files (Safe W7 Ultimate 64 Start)
• Ultimate Windows Tweaker 2.2 (Customized)
• SpeedGuide.net Vista TcpIp Patch 1.5

*ShadowMode (Enabled) and Active Disk Image (Weekly)

dja2k

 

cant live without WebRo0t 2012

 

Wow the return of the massive post count thread starter has returned,Welcome Back. Nice list of security you have.

 

Thanks!

dja2k

 

Avast 7 free and Sandboxie Paid

 

Network
DDWRT Router running recommended build - Remote Access disabled
DDWRT firewall turned on
OpenDNS

Realtime Protection
Built in Windows 8 security - SmartScreen, mitigation techniques, etc
Defender turned off

System Hardening -- Windows 8 64bit
UAC on Max
Disabled some services (netbios, printer, a few others)
As few programs installed as possible.
BitLocker full drive encryption 20+ Character password
BIOS Password
(N)EMET:
DEP Always On
SEHOP Opt Out
ASLR Opt In

All .exe's forced with EMET.dll.


Applocker/ SRP
Deny execution from RAMDisk (see below.) SRP - Disallowed.
Deny execution from AppData folder, exception to publisher and hashes. (Work in progress)


Browser -- Chrome Beta
Block 3rd Party Cookies
Built in malware protection
Default PDF reader -- no adobe necessary
Adblock Plus with DNT
HTTPS Everywhere
ScriptNo

All User_Data kept on a RAMDisk. There's a "clean" image, which gets restored at startup. Everything that happens after that clean image is completely wiped.

A "private" profile with more aggressive privacy/ data settings.

Backup Browser -- Chrome Canary

Portable On Demand Scanners/ Tools -- USB Drive
RKILL.com
SuperAntiSpyware Portable
Hitman Pro
Ninite/ FileHippo for updating

 

Avast crashed my computer. Time for something new.

 

@dja2k: Nice setup there. Cheers..
@Hungry_Man: lol I'm shocked you are using applocker

 

Yeah, it's not really my type of program but it should be effective for my needs.

 

Sandboxie
VIPRE
MBAM Pro
OA firewall w/HIPS deactivated
KeyScrambler
KeePass
Google Chrome

Been my set up for quite awhile now.

 

Just bought a five PC license for Webroot SecureAnywhere Essentials. I maintain the family's PCs and laptops (of which there are five) so having WSA on them all will make things easier for me. I've also removed UAC from my signature as it's on by default with Win7, so not a change as such.

 

WSA Complete
Shadow Defender 1.1.0.326 x64
Online Armor 5.5.0.1557

 

i am just drinking my hot corn meal drink and enjoying my fast computer security bundle

 

Doesn't get any better than this!!!

 

back to my sandboxie setup

 

Nice set up...I'll bet you sleep well at night!

 

Thanks it really works well for me, yes with this setup I do sleep well at night

 

Thnx for all those return greets back at Page 802 gents. LoL

OK, Seeing how my air-services were greatly curtailed awhile ago, leading to a "Live" absence of current resources as well as the usual superb technical dialog i've grown so accustomed to here, i'm currently managing some altered surgical modifications to my own security setup now that we're, let's say, plugged back in again

Just like one of the famous album labels of the legendary group known to most as Led Zepplin. in my siggy below, some Songs Remain The Same

However, in order to fully come up to par with the current trends of newer, howbeit more dastardly dark inventions designed to bring down our humble little electronic empires "in the wink of an eye", i see some fresh new and more ingenious ideas beginning to surface.

 

Question: Did you test nProtect MBRGuard with rootkits?

Suggestion: Have a look at Malware Defender, now freeware, might be a viable replacement candidate for EQSecure (development stopped some time ago).

 

Not only tested nProtect w/Rooters and the usual MBR disintegrators, but (hands-on) physically opened disks and made attempts at Hex Editing. So it has done well from my tests so far against active MBR destruction on the surface. I am still working however Kees at stripping down nProtects supporting array of various files & drivers though in an attempt to duplicate what a serious targeted attack at the app itself might accomplish and/or if it exhibits some form of AV-Like self-protection techniques in that event.

Oh BTW, i can never part with EQS, at least for now, 'cause it is just so darn configurable and perhaps the best overall HIPS system to date in the way it covers so much real estate "effectively" with the lightest footprint one could ever expect.

Too bad they left this Jewell behind to fade...........

Regards, EASTER

 

My Setup:

• Windows 7 Professional (64-Bit)
  [*]Kaspersky Internet Security 2012
  [*]MBAM Pro
  [*]SAS (On Demand scans only to get rid of the tracking cookies which MBAM misses)
  [*]Firefox v10.0.2
  [*]Ad-Block Plus Add-on for Firefox
  [*]TrackerBlock Add-on for Firefox

 

AppGuard (Trial)
SpyShelter Firewall
Shadow Defender
HitmanPro (On-Demand)

 

My 6-year old laptop (32bit WinXP) has been well protected with Shadow Defender (naturally) + Panda Cloud Antivirus Free. But I'm now shopping for a new lappy which is sure to be running 64bit Win7 so I don't know if this security combo will continue to work for me in the future.

 

WSA
Mamutu
Sandboxie
MBAM
SAS
Zemana AL
Hitman Pro
WinPatrol
Secunia PSI
LastPass
Keriver 1-Click Restore


ah! I'm full.......no more fried chicken wing please .......