What is your security setup these days?

[Amit]

Originally Posted by CSKfan

Added Norton ConnectSafe to my setup.

Rollback Rx|Sandboxie|SUA|UAC|Applocker|WFC|ConnectSafe

Good going . Now you only need HitmanPro, imaging software and you're all done. Btw, what's wfc in your sig?

[Amit]

Originally Posted by Blues7

I've removed Comodo and returned to PrivateFirewall.

Comodo FW ran very well on my system but there were things about it that I couldn't quite wrap my head around at times or that weren't intuitive when it came to managing the settings and/or protection levels. (It also gave me fits on one of the MS security updates I needed to install yesterday and several repeated attempts were fruitless with this one item. I don't need to spend my day wrestling with my FW/HIPS and so it made my decision a bit easier.)

PF may have a "simple" user interface and less bells and whistles overall but it's always gotten the job done, scores well on available tests and I can figure out how to make the tweaks I want.

To each his own I suppose...that's why there are several options available to us.

That's all I got...carry on...smoke 'em if you got 'em.

Privatefirewall . You're in good hands.

[Kees1958]

Originally Posted by Iron Man

Good going . Now you only need HitmanPro, imaging software and you're all done. Btw, what's wfc in your sig?

Problably Windows Firewall Control which is not included in my solid setup, see signature

[Kees1958]

Changes in red

Running as Admin on Windows7 x32 ultimate with no third party real time security

-------------- on network (pre-PC protection) --------------------
ISP service includes email scanner and spam-filter. Wireless Router with WPA2, SPI with Flood/Poisoning/Spoofing protection and Norton DNS (malware).

----------- from network stack to process stack ------------------
Use Windows FW both for inbound and outbound. Added a deny execute on all threat gate folders (browser download, e-mail and media player using Access Control Lists deny execute/traverse folder for Everyone).

--- from Low Rights (Protected mode) to Medium Rights (LUA) ---
Using Chromium (unsigned application) with Chrome sandbox and build in safe browsing. Running PDF and Flash plug-in with Mandatory Low Rights. Using startpage as search engine, vista basic/windows7 skin, no extentions only Chrome no-script like tricks of Hungryman/M00NBL00D (see http://www.wilderssecurity.com/showthread.php?t=323783)

-------- from Medium (LUA) rights to High (Admin) Rights ---------
User is only allowed to execute signed executables (AppLocker) plus Chromium and 7-Zip, Admin is allowed to run all from safe places (SRP). Unsigned programs can't elevate to Admin (UAC). Running browser, mail, media player "As Invoker" (file and registry virtualisation) with EMET 3.0 memory overflow protection.

--------------------------- On demand -----------------------------
- Grand parent (USB drives), Parent (NAS, 2nd HD), Child (HD) backup scheme with Win7 Image and Synctoy Data backup
- Running CCleaner through scheduled task (/run /tn) to evade UAC pop-up
- HitmanPro Free (coud) scan and Avira cloud scan

[blasev]

@kees1958,

may I know why you don't like firefox + Noscript on win 7?

[1chaoticadult]

Originally Posted by ciscodisco

Thanks 1chaoticadult and Iron Man will have to try the suggestions out.

Your welcome

[Amit]

Originally Posted by Kees1958

Problably Windows Firewall Control which is not included in my solid setup, see signature

LOL. Thanks Kees.

[Amit]

@Kees1958
do you use the free version of Synctoy or the paid one?

[Kees1958]

Originally Posted by blasev

@kees1958,

may I know why you don't like firefox + Noscript on win 7?

When you put Firefox (on Vista or Win7) in a low rights container using icacls it is fine (also Adobe helped with providing sandboxes for flash and pdf). NoScript seems to add a layer of security on FF, but whitelisting is to much trouble. I just prefer using low right container of IE (protected mode) and the low rights/job object/alternate desktop container (sandbox) of chrome. With EMET (and chrome's hidden classes) I think it is pretty hard/nearly impossible for malware (coded in Javascript) to break through these security layers.

[Kees1958]

Originally Posted by Iron Man

@Kees1958
do you use the free version of Synctoy or the paid one?

Free version (did not know there was a paid one). I used the free Syncback in the past, but Synctoy seems to run faster with my NAS.

[Amit]

Originally Posted by Kees1958

Free version (did not know there was a paid one). I used the free Syncback in the past, but Synctoy seems to run faster with my NAS.

There is indeed no paid version. My bad.

[KelvinW4]

This is definitely the lightest protection I ever had

[ivan2k2]

Windows 7 64bit
UAC at max
EMET
HitmanPro.Alert
HitmanPro
TinyWall
OpenDNS+DNSCrypt
WinPatrol Free

[Arcanez]

dropped MSE and added a one click file upload to VT in my totalcommander which is really nice.

[blasev]

Originally Posted by Kees1958

When you put Firefox (on Vista or Win7) in a low rights container using icacls it is fine (also Adobe helped with providing sandboxes for flash and pdf). NoScript seems to add a layer of security on FF, but whitelisting is to much trouble. I just prefer using low right container of IE (protected mode) and the low rights/job object/alternate desktop container (sandbox) of chrome. With EMET (and chrome's hidden classes) I think it is pretty hard/nearly impossible for malware (coded in Javascript) to break through these security layers.

thanks for the explanation

[Noob]

Originally Posted by RADEON0101

I just got through doing this to my main desktop

Quite a lengthy process, tons of updates to do.
If it was not for the updates it would be really fast.

[firzen771]

trying out BullGuard Internet Security, seems good so far.

[Dark Shadow]

Originally Posted by Noob

Quite a lengthy process, tons of updates to do.
If it was not for the updates it would be really fast.

Heck yea, I formatted mine recently and took some hours of just updating,not counting replacing my own software.Thank goodness there Is not a MS patch everyday or It would probably take a month to finish.

[jmonge]

the first day is a long day my friend for sure

[1chaoticadult]

Originally Posted by djohn

Heck yea, I formatted mine recently and took some hours of just updating,not counting replacing my own software.Thank goodness there Is not a MS patch everyday or It would probably take a month to finish.

Well I have a ISO image of Windows 7 with updates integrated to a certain month. So if I have to reinstall Windows 7, I only have to worry about a few months of updates.

Security setup: AppLocker | BitLocker | EMET | Windows Firewall | TinyWall | Sandboxie | Norton ConnectSafe, same as sig.

[Noob]

Originally Posted by djohn

Heck yea, I formatted mine recently and took some hours of just updating,not counting replacing my own software.Thank goodness there Is not a MS patch everyday or It would probably take a month to finish.

Yeah, MS updates are really really slow installing. That's the worst part of formatting a PC, downloading MS updates . . .

Originally Posted by 1chaoticadult

Well I have a ISO image of Windows 7 with updates integrated to a certain month. So if I have to reinstall Windows 7, I only have to worry about a few months of updates.

When i say format i really mean starting all over again.

[TyRidian]

Originally Posted by Noob

Quite a lengthy process, tons of updates to do.
If it was not for the updates it would be really fast.

Updates and configuring system services are my two least favorite thing's to do...It is a pain in the butt.

I do like installing all the software and applying system tweaks, how weird that may sound

[Dark Shadow]

Added Kingsoft AV a sweet program.

[Dark Shadow]

Originally Posted by 1chaoticadult

Well I have a ISO image of Windows 7 with updates integrated to a certain month. So if I have to reinstall Windows 7, I only have to worry about a few months of updates.

Security setup: AppLocker | BitLocker | EMET | Windows Firewall | TinyWall | Sandboxie | Norton ConnectSafe, same as sig.

Thats different,Wiping the entire drive is super fresh and super Sloooooow.

[Dark Shadow]

Originally Posted by RADEON0101

Updates and configuring system services are my two least favorite thing's to do...It is a pain in the butt.

I do like installing all the software and applying system tweaks, how weird that may sound

Yes your own software and tweaks is fun but MS updates makes me want to kill something.Thinking of the last patch tuesday with 13 updates of 32 MB good god.