What is your security setup these days?

[jmonge]

ok the word IDS mean intrution detention system in what way they are diferent or same?or what?thanks

IDS: intrusion detection system
IPS: intrusion prevention system

The fact is that these two sets of words are too general, many programs claim to be a IDS or IPS. And in fact they well could be an IDS or IPS, but because that two sets of words are so general it hardly says anything about the program. That's what you see here. Mamutu and Winpatrol Plus both have the abilities to detect intrusions, but they are different in every single way.

[SafetyFirst]

Originally Posted by Matthijs5nl

IPS: intrusion protection system

I think it's intrusion prevention system.

Originally Posted by SafetyFirst

I think it's intrusion prevention system.

Oh yes your right. My fault.

[jmonge]

thanks matt and safety

[EscapeVelocity]

Loaded VirtualBox, but could not get it to create a Virtual Machine.

After Macrium Image Restore, I reloaded PeerBlock, but not ThreatFire.

I have added SandBoxIE.

XP Home SP3

Linksys Firewall
Windows Firewall

Avast5 Free - All Shields Up
PrevX SafeOnline - Maximum on HTTP & HTTPS
WinPatrol Free
Keyscrambler Premium
Hostsman with MVPS/HPHosts/Malware Domains
PeerBlock with BlueTack Ads/Spyware/DShield/Bogon/Hijacked Lists & IBlockLists China/Russia
OpenDNS with Filters

Browsers:

FireFox 3.6 (All the Usuals plus LinkExtend)
Opera 10.51
Chrome
IE8

Image Backup:

Macrium Reflect Free

On Demand:

SandBoxie

HitMan Pro Free
SAS Free
MBAM Free
A Squared Free

CCleaner
Eraser

[Konata Izumi]

Originally Posted by EscapeVelocity

...

That's some nice setup there. ^^
If only my pc is just bit more powerful... I'd have the same setup XD

without OpenDNS though

[Mr Wonderful]

Update 4-25-2010

Desktop
Home Xp Sp 3 32-bit
ZA Pro
A2 paid
Sandboxie on-demand when cruising the darkside

Dumped OA it was overly redundant with A2's IDS.

Lappy
Home Win 7 64-bit
ZA Pro
Vipre

Waiting for Emsi to release ver. 5 so I can dump Sunbelt.

[EscapeVelocity]

Originally Posted by Konata Izumi

That's some nice setup there. ^^
If only my pc is just bit more powerful... I'd have the same setup XD

without OpenDNS though

I see you have a Firewall plus LUA/Surun. Im looking into some form of both.

Also I am looking into other System Virtualizers like Returnil, TimeFreeze, Shadow Defender, Time Machine, Geswall.

Perhaps manually tweaked System Hardening, as well.

Plus Password Managers.

Want to play with Proxomitron next.

Work in progress, I guess. Slowly but surely.

[Hayki_]

Avira Premium 10 - PC Tools Firewall Plus - Malwarebytes - Sandboxie - Shadow Defender - Virtualbox :]

[Securon]

Good Afternoon ! Firewall P.C.Tools Firewall +...Avast 5.0-Free A/V...Prevx 3.0 with Safe Online...MBAM On Demand. O/S Windows 7. ...Sincerely...Securon

[Konata Izumi]

Originally Posted by EscapeVelocity

I see you have a Firewall plus LUA/Surun. Im looking into some form of both.

Also I am looking into other System Virtualizers like Returnil, TimeFreeze, Shadow Defender, Time Machine, Geswall.

Perhaps manually tweaked System Hardening, as well.

Plus Password Managers.

Want to play with Proxomitron next.

Work in progress, I guess. Slowly but surely.

My setup:
Fully Updated Windows XP Pro SP3 running under LUA + ACL
(NO SRP, yes... I need help setting this up)

untouched full installation of Google Chrome (I always use Incognito mode when browsing)
Avast Free (File/Behavioral/Network Shield)
Windows XP Firewall (looking for a free rule-based updated firewall)
Wondershare Time Freeze (For Virtualization of System Drive and Folder Protection)
MBRGuard (MBR protection from rootkits.)
Peerblock (added some list from iblocklist)
Winpatrol Free


Removed PrevX SafeOnline.. Sandboxie should handle keyloggers just fine.

[mhl6493]

Real-Time:
Kaspersky Internet Security 2010
Threatfire
Secunia PSI

On-Demand:
A-Squared Free
Malwarebytes Free
Superantispyware Free

I'm also running Winpatrol Free. Which brings up the question, given what I'm running, is there really a need for me to have Winpatrol Free? Just curious what you all think.

Thanks!

[Saraceno]

No need. If Kaspersky and ThreatFire run well, leave them.
Some would argue Kaspersky Internet Security on its own is enough.

Rather than running all those additional scanners, with TF and KIS running, you might just use Hitman Pro as a scan from time to time, and/or Malwarebytes. If you're worried about downloads, and if Kaspersky's detection engine is enough, you can install VirusTotal's uploader, and right-click and send a download to be scanned by many different AVs. http://www.virustotal.com/metodos.html

[mhl6493]

Thanks, Saraceno. That's what I thought about Winpatrol. Just wanted to make sure I was on the right track.

What do you think about my possibly running Prevx instead of Threatfire? While it's not all that bad, TF does seem to slow things down on my system just a bit. And I've heard/read some pretty good things about Prevx...

[Saraceno]

ThreatFire is great with a lighter AV, but Kaspersky is already providing monitoring system changes and not just checking for malicious files.

You added all of Kaspersky's processes to be excluded in ThreatFire? Check your taskmanager to see which of Kaspersky's services are running. Then in ThreatFire, go to advanced tools, custom rule settings, and add the processes as trusted.

See if that helps.


If that doesn't work, you could try the free version of prevx. It seems to work with every product. Not sure how prevx's safeonline will work if your browsers are sandboxed in kaspersky, guess it's just trial and error.

I've been using PeerBlock, see others above who use it. Disable P2P from the list, as some standard news sites are blocked (or once a site is blocked, you can right-click in the list and allow permanently, or allow for 15 mins etc), and enable the advertising and spyware lists. You can even add hacker and spam lists from iblocklist.com. Seems to work well.

[Noob]

So far so good with ThreatFire on Level 5, not many pop ups just once and they never appear again so this is GOOOOD!
And NO NOTICEABLE SLOWDOWN EITHER

[Saraceno]

What else you running with TF?

[Noob]

Originally Posted by Saraceno

What else you running with TF?

Read my sig, when i try new software i always do it with my real machine and real configuration

So it's:
A-Squared (On-Execution) - Highest settings
Panda Cloud Antivirus (I guess this one is On-Access) - Default
PCTools Firewall Plus (Realtime) - Highest Firewall settings
ThreatFire (Realtime) - Level 5

[EscapeVelocity]

As regards PeerBlock....Im using the BlueTack lists exclusively. The P2P (which I disabled as Im not into file sharing networks) Spyware and Ads integrated into Peerblock are BlueTack. I added Bogon, DShield(Hackers), Hijacked. Plus Russia and China which are not BlueTack.

BlueTack Spider killed Google Mail for me, so I removed it. Also it blocked a Political News site that I frequent.

Any thoughts on Proxomitron?

[jmonge]

when my mamutu expire i will buy another year or i will use threatfire

[Noob]

Originally Posted by jmonge

when my mamutu expire i will buy another year or i will use threatfire

Mamutu is $13.50 only LOL
I though it was more expensive

[jmonge]

good deal where did you find this deal?

[AvinashR]

May be this much amount is expensive for those who can't buy it. Like ME

[Noob]

According to Emsisoft website it's giving a 50% off discount xD
(Selected checkout on the product and yes, it's 13.50 here)