What is your security setup these days?

[Ibrad]

Added back Windows Defender, since SAS is only using 512k it can't hurt.

[LoneWolf]

Active
Defensewall 3.07
Prevx 3.0.5.199

Light Virtualization
ShadowDefender 1.1.0.325

On-Demand
Gmer ~ CureIt ~ MBAM ~ Hitman

OpenDNS
Opera 10.62

[ExtremeGamerBR]

Windows 7 Ultimate x64:

Real-Time

• Norton Internet Security 2011
• PrevX SafeOnline 3.0.5.199
• Emsisoft Mamutu 3.0.0.12

On-Demand

• Emsisoft Emergency Kit 1.0.0.12
• Hitman Pro 3.5.6 Build 115

Windows Settings

• Admin Account with Safe-Admin Tweaks
• Access Control List: Downloads Directory
• User Account Control: Default Level
• Data Execution Prevention
• Structured Exception Handling Overwrite Protection
• Address Space Layout Randomization
• Enhanced Mitigation Experience Toolkit 2.0
• Drive-by Protection via 1806 Trick

Browser and Immunization

• Internet Explorer 8 (Adblock, Norton IPS, Tweaks)
• Mozilla Firefox (Adblock, Norton IPS, WOT, NoScript)
• Spyware Blaster 4.4 (With Customblocking.txt)
• CD/DVD/USB Autorun Desabilited
• Norton DNS (Blacklist)

* Using NIS with Heuristics/Sonar in aggressive mode, Mamutu on Paranoid mode, EMET configured for maximum security. Rock Solid.

[eugene91]

Real-Time:
-Avast! Internet Security 5.0.677
(Disabled: Mail, Spam, P2P, and IM Shields)

On-Demand:
-MalwareBytes AntiMalware 1.46 Free
-SAS Portable

Browsers:
-Internet Explorer 9 Beta
-FireFox 3.6.10 (AdBlockPlus and WOT)
-Google Chrome 6.0.472.63 (AdBlockPlus and WOT)

*All browsers sandboxed by Avast! Internet Security 5.0.677

Removed Prevx SafeOnline 3.0 for the mean time. Might put it back on soon.

Any comments on my Security Setup fellow security experts? Thinking of enabling Windows Defender.

[shadek]

Originally Posted by eugene91

Real-Time:
-Avast! Internet Security 5.0.677
(Disabled: Mail, Spam, P2P, and IM Shields)

On-Demand:
-MalwareBytes AntiMalware 1.46 Free
-SAS Portable

Browsers:
-Internet Explorer 9 Beta
-FireFox 3.6.10 (AdBlockPlus and WOT)
-Google Chrome 6.0.472.63 (AdBlockPlus and WOT)

*All browsers sandboxed by Avast! Internet Security 5.0.677

Removed Prevx SafeOnline 3.0 for the mean time. Might put it back on soon.

Any comments on my Security Setup fellow security experts? Thinking of enabling Windows Defender.

I must ask, why sandbox Google Chrome? It's sandboxed out of the box and sandboxing it with a 3rd party program might cause conflicts, meaning you won't have the same protection.

[firzen771]

Originally Posted by shadek

I must ask, why sandbox Google Chrome? It's sandboxed out of the box and sandboxing it with a 3rd party program might cause conflicts, meaning you won't have the same protection.

because chrome ISNT sandboxed... they call it a sandbox and u could say it is in a way, but its not a sandbox in the way avast's is, or sandboxie, its quite different.

[justenough]

Originally Posted by LoneWolf

Active
Defensewall 3.07
Prevx 3.0.5.199

Light Virtualization
ShadowDefender 1.1.0.325

On-Demand
Gmer ~ CureIt ~ MBAM ~ Hitman

OpenDNS
Opera 10.62

That's an impressively light combination. Wish Defensewall could work on 64bit.

I wonder if Opera is as secure as Chrome or Iron or even IE8? And maybe it would be worth it to compare ClearCloudDNS to OpenDNS. I found a video test with 12 malware samples where ClearCloud did really well, but haven't seen a professional, published test.

[The_ChamP]

Avira free + comodo firewall [ D+ disabled ] ( avira set on high heuristics )

mbam , hitmanpro , emsisoft , superantispyware free , sophos anti rootkit as on demand scanners

winpatrol and comodo time machine added too

[pabrate]

Got myself new setup and I'm pretty happy with it :

Comodo Firewall Only (everything else disabled including Image Execution Control (which is enabled by default when Firewall Only is installed))
Emsisoft Anti-Malware 5.0

Working great

btw EAM 5.0 is awesome product

[x ZauX x]

Pc Tools Firewall Plus

[x ZauX x]

Emsisoft Antimalware

[gery]

back to
PCTOOLS FIREWALL FREE BETA
PCTOOLS ANTIVIRUS FREE
PCTOOLS THREATFIRE
BUT just for a short time

[Kernelwars]

Defensewall

[JoeBlack40]

Added PrevX SO to my config-Avast! Home,CIS 5 and WinPatrol Plus to see how is playing with them.
Disabled MBAM's real time protection.

[Securon]

Good Evening ! Real-Time-Anti/Malware...G-Data 2011...Prevx 3.0 & Safe-On-Line...Firewall...P.C.Tools Firewall Plus...On Demand...S.A.S.Pro...O/S Windows 7...Primary Browsers...Google Chrome...I.E.8. Sincerely...Securon

[whitedragon551]

Switched from AVG to Emsisoft AntiMalware and due to lag Im testing out Rising AV Free.

I had previously used RAV in a VM and it was nice and light there and thats my main goal.

[safeguy]

Simple to manage...and quite lightweight (definitely not feather-light but still fair for me)

Windows Hardening/Tweaking

LUA, UAC at max
SuRun
Elevated program launcher to avoid UAC prompts
KAFU.exe (Keine Autostarts für User...Which is German for: No Autostarts for Users - protect the few autostart locations where a limited user still has write permission)
SRP (default-deny), with Additional Path Rules set to 'Unrestricted'
EMET v2.0.0.1 (DEP, SEHOP, ASLR - all at 'green' settings)
Show Hidden File Extensions, AutoRun disabled, Windows Update (download updates but let me choose whether to install them)
Remote Assistance, Remote Desktop and Remote Registry disabled
Ultimate Windows Tweaker

Real-time:

Panda Cloud AV Pro (behavior blocker, behavior analysis)
Returnil Virus Guard ("Only proven detection rules")
Sandboxie (for launching unknown/untrusted downloads)
Comodo Firewall with Defense+ ON (Configuring CIS (Defense+ ON) without smashing your head on the wall)
WinPatrol Plus (custom 'locked' registry keys)

On-demand:
Returnil System Safe Virtual Mode on-demand
Hitman Pro

Prevent Web Nasties:

Custom DNS service with DNS Jumper (Norton DNS, Sunbelt ClearCloudDNS, OpenDNS Family Shield, etc)
WOT
AdBlock Plus

Software Updates:

Secunia PSI
FileHippo Update Checker

A few future considerations:

MSE when the newer version is out of beta.
Windows Firewall with Advanced Security outbound control
Pure behavior blocker such as ThreatFire or Mamutu

I'll see how things go....

[icr]

Just using Deep Freeze on my system(Win7 32bit Ultimate)

[acr1965]

Originally Posted by safeguy

Simple to manage...and quite lightweight (definitely not feather-light but still fair for me)

Windows Hardening/Tweaking

LUA, UAC at max
SuRun
Elevated program launcher to avoid UAC prompts
KAFU.exe (Keine Autostarts für User...Which is German for: No Autostarts for Users - protect the few autostart locations where a limited user still has write permission)
SRP (default-deny), with Additional Path Rules set to 'Unrestricted'
EMET v2.0.0.1 (DEP, SEHOP, ASLR - all at 'green' settings)
Show Hidden File Extensions, AutoRun disabled, Windows Update (download updates but let me choose whether to install them)
Remote Assistance, Remote Desktop and Remote Registry disabled
Ultimate Windows Tweaker

Real-time:

Panda Cloud AV Pro (behavior blocker, behavior analysis)
Returnil Virus Guard ("Only proven detection rules")
Sandboxie (for launching unknown/untrusted downloads)
Comodo Firewall with Defense+ ON (Configuring CIS (Defense+ ON) without smashing your head on the wall)
WinPatrol Plus (custom 'locked' registry keys)

On-demand:
Returnil System Safe Virtual Mode on-demand
Hitman Pro

Prevent Web Nasties:

Custom DNS service with DNS Jumper (Norton DNS, Sunbelt ClearCloudDNS, OpenDNS Family Shield, etc)
WOT
AdBlock Plus

Software Updates:

Secunia PSI
FileHippo Update Checker

A few future considerations:

MSE when the newer version is out of beta.
Windows Firewall with Advanced Security outbound control
Pure behavior blocker such as ThreatFire or Mamutu

I'll see how things go....

Hey I see the company that makes the DNS jumper also has sme other programs- have you tried the AppAdmin or any of the others?
http://www.softpedia.com/get/Securit...AppAdmin.shtml
http://www.sordum.com/

[Kernelwars]

Originally Posted by whitedragon551

Switched from AVG to Emsisoft AntiMalware and due to lag Im testing out Rising AV Free.

I had previously used RAV in a VM and it was nice and light there and thats my main goal.

rising is pretty good

[pabrate]

Emsisoft AM is just too heavy and I can't use it, it really slowdowns the system.

Back with NIS 2011 , champion

[The_ChamP]

Changed from avira to mse

[safeguy]

Originally Posted by acr1965

Hey I see the company that makes the DNS jumper also has sme other programs- have you tried the AppAdmin or any of the others?
http://www.softpedia.com/get/Securit...AppAdmin.shtml
http://www.sordum.com/

Nope, I haven't. Haven't found the need to

[Kernelwars]

Originally Posted by pabrate

Emsisoft AM is just too heavy and I can't use it, it really slowdowns the system.

Back with NIS 2011 , champion

the firewall component is so silent it makes me wonder sometimes..

[pabrate]

Originally Posted by Kernelwars

the firewall component is so silent it makes me wonder sometimes..

Agreed, but you can disable Auto Program Control and you will have alerts for everything.
I was using it like that before, but now I'm back with Auto-Pilot
You can always check the rules that was made and it looks fine IMO.
But yes, it's too silent on Auto-Pilot
Anyways, I'm positive when time comes for it , it would block malware even before it starts to connect to the internet