What is your security setup these days?

Hitman pro alert
UAC set to highest
Peerblock+ other blocking via dns
A VPN , for whatever its worth, lol
And soon to be a different ISP since they feel the need to not answer my emails about why they are holding open port 80 for every web site I visit and when I block their entire range
I can't even get to some sites.

 

This one is gold ^^

 

Windows 10 is definitely more secure than Windows 7. As posted I tried to get into advanced restore options helping someone, because he had a SSD (like I have), I was not able to get the startup assistant going into auto recovery, doing a windows defender offline scan, finding nothing and repeating the loop. Guess @Peter2150 must have laughed when he read i returned to Windows7 for image restore reasons.

 

@Windows_Security Win10 recovery is accessible by holding Shift while clicking on any restart button (login screen or start menu)

 

Yes, I used that myself when restarting windows. When Windows 10 crashes and it invokes automatic startup recovery, nothing worked (I tried all sorts of internet tips for two hours, but it kept looping).

Windows 10 is like my Monster 1100 (actually a 1000 with big bore kit), I can only tune when I go to the dealer. While my old Laverda 1000 is more like Windows 7, I can take of the carburetors, fiddle with screws and needles to find best setting, by rotating the ignation a few dgrees I can play with timing and so on. New technology is easy to use and offers best performance, old technology is easy to tune and fun to play with. I am getting old

 

Are you aware of enabling F8 in Windows 10?
https://www.tenforums.com/tutorials/22455-f8-advanced-boot-options-enable-disable-windows-10-a.html

 

OS: Windows 10 Pro x64
Tweaks: O&O ShutUp10 / MBRFilter
VPN: Private Internet Access (via OpenVPN)
UAC: Allow signed/Block unsigned
SmartScreen: Enabled
SRP: Enabled (via SSRP)
Password Manager: Keepass 2.x

RT:

• Sandboxie (Chromium and Internet Explorer sandboxed)
• Windows Defender

Browser:

• Chromium 56 x64 stable-codecs-nosync (no Sync, no Widevine, no WebRTC):
  • uBlock Origin (Default + Disconnect lists)
  • Canvas and Referer disabled

OD:

• Process Explorer
• Macrium Reflect
• Privazer (Donors)
• Emsisoft Emergency Kit

All partitions (data and system) encrypted with Veracrypt.
All data uploaded to cloud encrypted with Viivo.

 

Good Afternoon! Vipre Internet Security Pro 2016-2017. And Spyware Blaster...both Real time. On demand Hitman Pro...and MBAM 2.0...And various others...Lol! Sincerely...Securon

 

SpywareBlaster doesn't run in real time.

 

Bit defender plus paid version 2017
Malwarebytes free 3.0.6
Spybot anti beacon

Firefox Private mode.
Ad block plus
No script/ not blocking scripts ( guess you can call it low level protection)
Disconnect me
https everywhere
web rtc disabled.

anything overkill? missing anything?

 

Totally FREE setup.
Testing on live Windows 10 cheap machine from local Argos

Avast Free AV 17.1.2286
Comodo 10 Firewall (@cruelsister settings and personal tweaks)
Voodooshield 3.50

4gig RAM only and running very smoothly, no excessive spikes etc.
Don't think an AV is absolutely necessary with this array here but liking the new Avast as that additional layering
Trialing this as some paid security softies close to expiring.

 

Same, CFW10 and mbr filter. I just keep it in silent mode, no worries.

 

Februari setup for 2017 on Windows 7 ultimate (downgraded from windows 10 Pro because I like F8 to much)

1. WFW set two-way with all riskware (remote, shared, legacy, gadgets) disabled
2. Deny execute in all user folders with ACL (except Temp) and SRP (except Admin)
3. White-list execution with Avast (aggressive) and UAC (block unsigned elevation)
4. Secure folders with MemProtect blocking user space attack on allowed programs
5. Sandbox Browsers with Low-IL/MemProtect cage and Adguard using dns-filter only

I have an update/install hole in users folders (Temp Folder - run as admin) which is guarded by Avast cloud whitelist (file shield only). Scripts are disabled with Group Policy and Office TrustCenter, on top of that all rich content programs are caged by MemProtect. UAC allows signed program elevation silently (no shoot in the foot errors)

Open DNS is set at the router in a partitioned network with fixed IP's for internal network (2.4 Ghz) and separated network for Guests (5 Ghz) and internet disconnect during NAS-backup. On top of that all sorts of network hardening and obfuscation to direct non-specific attacks at neighboring wireless networks.

 

Good Evening! WSA Security Plus and Voodoo Shield ! Light and Lethal! Sincerely...Securon

 

• ISP provided secure DNS.
• Windows Firewall.
• Smart Screen.
  
• Avast free AV.
• Windows Defender Limited Periodic Scanning.
• HitmanPro.Alert.
• VoodooShield.
• Malwarebytes 2 Premium.
• Macrium Reflect.

Happy Krusty!

 

He has Signed up, and is in limbo till the staff feel motivated to approve him.
I can tell you as a Developer his time is limited so I can't promise he will wait around to
be approved. Sometimes it does take an extended amount of time to be approved, and one
thing developers are short on, is time.
*He has an account over at MalwareTips if you want to PM him over there.

 

Since jettisoned the last AV (360IS) and applying some hardening techniques ACL to particular sections as @Windows_Security mentioned, and these below this machine is been running interruption-free ever since. Virtualization has some part but even that is only activated for extreme dives.

Back To Windows 8.1 and Windows 10 in the closet.
UAC completely turned off and not needed.
Secure Folders + Sandboxie + Shadow Defender + NVT-ERP <---Magnificient!
No Windows Defender either.
Got tired of stuffing all those same old security apps into the machinery like in the old days and found minimal and streamlined affords a quicker responding machine without the overhead and taxing of the energy sources. The only thing that gets heavy is when editing moving pictures or flash as usual.

One of these days I will find another EQSysSecure clone for x64 bits and will be the happiest HIPS owner ever seen

Love getting my hands dirty so I do tweak this machine manually and am always experimenting with bits and pieces of freeware gleened either from posts here or off the net from students learning how to program new techniques etc. Some are just like in the old days, ugh, but others not so much.

Oh yes, the absolute most important PC creatures of all to save the bacon for HD malfunction or when spent.

Double Backup Formula. 100% Safe & Solid.

(1) Marium Reflect manual BackUps to external portables that fit in your pocket.
(2) DriveSnapshot which is never once failed to satisfy for many years and still going strong!

 

Windows 7 Pro:
Eset Smart Security 8
Net Nanny

Is this enough security for Windows 7 or do I need more like EMET, Hitman Pro Alert, Malwarebytes 3?

(Eset Smart Security 10 tested- very slow shutdown and startup. Eset Internet Security 10 tested- banking did not work. I'm not sure if Eset Internet Security 10 without banking is identical to/superior to/inferior to Eset Smart Security 8 or what. That is why I am asking if Eset Smart Security 8 + Net Nanny is enough security.)

Thanks in advance for any reply.

 

Also I am wondering if I can avoid black screen with cursor problems in the version 10s if I use Eset Smart Security version 8.

 

Laptop Emsisoft IS
Zemana Antimalware pro

desktop
McAfee Total Security
Malwarebytes Antimalware free

 

Windows 10 x64 Pro
-Norton Security
-Appguard
-Sysinternals: Process Explorer, Autoruns, TCPview

-Google Chrome: Ublock, IP and Domain, Last pass.

 

Windows 7 x64 Pro, 4 Gb Ram
SUA
UAC on max with pathword protected admin elevation
TinyWal
Zemana AL with pandora on
MBAE with additional shields for some apps

Feels lite.

 

• KIS 2017
• second-opinion scanners: ZAM Portable, ADWCleaner, VT Uploader
  
• security-related Firefox add-ons: uBlock Origin, Quick Java, Kaspersky Protection add-on
  
• Backup: Iperius Backup (daily)

 

I also make cloud backup with Cryptsync. Cryptsync makes compressed password protected files to separate folder which is cloud synced.

 

Do you mean UAC on max or SUA + UAC on max?