What is your security setup these days?

Switched to OpenDNS. Uninstalled ZenMate.

 

Would EMET work with my config? is it compatible with all my security? link in sig

 

If I remember correctly, I had conflict with MBAE when I tried them together. Also not exactly sure as you are running stuff I am not familiar with like DRP, VS, WPP, SAP and KS unless that means KeyScrambler.

dja2k

 

Yes that's keyscrambler

 

Thought so! Figured WPP means WinPatrol Plus from your link.

dja2k

 

Mainly it's my laptop i'm concerned about. Yes that's winpatrol plus. I am running windows firewall control, secureaplus, mbae, keyscrambler, sbie and rollback rx

 

You seem well covered without EMET which I personally use just because its invisible and hardly notice its there.

dja2k

 

Thanks. Do you ever use a hosts file like mvps? Seems like that would do a better job than spywareblaster?

 

HostsMan works great once you disable the DNS Client service... Had troubles connecting to the Internet after startup and even resuming from sleep.

 

Tried ESET 9 Beta, it's very nice but is running a bit heavier since it's a beta so I decided to go without an AV for now. Added Shadow Defender.

 

This is my lightweight set up comprised of only freeware selections:

Real-time
360 Total Security Essential (w/ Avira engine running)
SphinxSoftware Windows 10 Firewall Control
DNSCrypt
MalwareBytes Anti-Exploit

On-demand
MalwareBytes Anti-Malware
PeerBlock

 

Still the same setup :

Win 7 x64

Real-time
Outpost Firewall Pro
Emsisoft Anti-Malware
Appguard
Sandboxie paid
Keepass

On-demand
Malwarebytes Anti-Malware

I have just started reading about DNS, and I might consider adding a VPN (interested in Airvpn and Private Internet Access) and/or DNSCrypt (which doesn't look that easy to install, at least for me). I was just wondering which was the best for my setup, in terms of compatibility. Any advice is welcome

 

ADDED: Smart-Object-Blocker

https://www.wilderssecurity.com/thre...ck-exe-dll-drivers.378369/page-3#post-2512492

 

10Pro X64

SUA, UAC Maxed
Windows Defender DISABLED
HitmanPro.Alert 3

 

@EASTER Are you using SOB on demand, or have you created a scheduled task or something to start with Windows?

 

Nowadays I use a minimalistic approach. Standard User Account, maxed UAC, "Simple software restriction policy" (works on Home version to my delight) and "Malwarebytes anti-exploit free"

 

For the immediate i'm going with On-Demand like I do with some others. Having had long success with SD is been advantageous in many respects on system performance although SOB uses hardly any on my Win 8 box.

 

I got it to run on startup with task scheduler.

 

Win7 Ultimate x86 setup - On Dell Precision Mobile Workstation M6800

Emsisoft Anti-Malware
Comodo FW/D+ 5.10
Sandboxie 4.06
Secure Folders
Bouncer
Standard User - UAC on next to highest setting
Default Deny AppLocker + D+

Was joyed to find the GPO's are darn near identical to the ones used in XP. Heck all the tweaking, period, very similar. Main difference being you can't disable nearly as many services without repurcussions... even if you don't notice them on the surface. I'm still feeling my way through that to find out what I can get away with.

I have another setup with Win7 Ultimate x64 to get the most out of my RAM, mainly for gaming, since it has 16 GB of it running @ 1866 mhz.

And yet another with XP & Debian Guest in Virtualbox. Very privacy oriented setup for use with VPN's.

Change is simple by switching in & out mSATA chips.

 

Watch out, you might get used to it, like i did. Now I hesitate to test new software, knowing that I'm just fine with what I have.

 

Thanks for listing Simple Software-restriction Policy. Looks very lightweight and good for my needs. Thanks for pointing SSRP out!

This looks more like an anti-executable program more than anything, which is good as I've always wanted to test one. What happens when an app is restricted? Does a prompt popup?

I might remove my AV if this turns out to be good!

There are also legitimate reasons to having a firewall such as monitoring incoming and outgoing connections, but I guess you could always use another app for that. Just recently, a firewall helped in debugging an issue I was having with a slow Firefox bootup time.

 

A VPN is good if you surf a lot of dodgy sites, if a site is geo-restricted (Hulu, BBC iPlayer), or if you just want to hide your IP against web server logs. You'd most want to use a VPN if you are using a public wi-fi hotspot to protect against traffic sniffers. Using a VPN is good for privacy, but can slow surfing down a bit.

DNSCrypt is not the same as using a VPN. DNSCrypt authenticates DNS requests and protects against DNS spoofing. DNSCrypt even outlines this on their website:

For DNSCrypt, I'm using this manager:
http://simonclausen.dk/projects/dnscrypt-winservicemgr/

HTH!

 

Thanks a lot for your answer
I spent the whole afternoon reading about VPN and securing DNS, and I decided to install Unbound before DnsCrypt, which was recommended. However, there seem to be compatibility issues with Outpost, which I will ask about in the OPW topic.
I might buy Airvpn (the feedbacks are great) in the next few weeks as well. But to me these are new territories

 

Spywareblaster is just there because its been years that I've used it, so I always tend to install it. I used to use a hosts file, but I hate annoyances that prevent a site from loading correctly even when its legit, and no warning. Anyways I always run Sandboxed or use one of my Virtual Machines when I have to. Also forgot that Emsisoft has its own Surf Protection built in.

Update:
Actually this gives me an idea and I am not to sure if its beneficial, but I can add the MVPS hosts file in the Surf Protection of Emsisoft and get alerts if triggered, hmmm.

dja2k

 

Good Morning! Outpost Security Suite...9.1...Heimdal...and SAS Pro. Sincerely...Securon