What is your security setup these days?

Good to know

 

Has it really? I always found that uBO blocked a lot more ads than Adguard. Might have to give it another look.

 

same here

 

Most of the time it does, but when reported from within Adguard they fix the missed adds for you. Really like their support

 

For me uBO and adguard have blocked all the ads. Never saw any problem with either one. Adguard had become quite slow some time back so I had switched to uBO. but now they seem on par for me. Using adguard base +spyware +social media+annoyances filters,thats it.

 

My PC's boot time was slow and I found out it was due to Panda (maybe it needs to check something online?).
ReHIPS is a great SW, but the limitation in the free version doesn't match with Chromium (multi-process browser). I tried several other browsers, but I couldn't find any of my liking...
So, this is my current configuration:

OS: Win10 Home 64bit (version 1803, build 17134.165)
FW: Windows Defender Firewall + Sphinx-soft Windows 10 Firewall Control
AV: Avast Free (tweaked as shown here https://malwaretips.com/threads/ava...-protection-and-efficiency.84620/#post-743926)
OD: HitmanPro, Zemana AntiMalware
BB: NoVirusThanks OSArmor
BP: K9 Web Protection, uBlock Origin
Misc: NoVirusThanks SysHardener, Windows Privacy Dashboard, O&O ShutUp10
DNS: Cloudflare

 

uBO for the most part has always blocked everything for me with some rare occasions that it did not. AdGuard missed a lot of ads on sites that I frequent. On Android it's great but on Windows for me it has always been lackluster.

 

EAM, Appguard v4, OSA.

 

Never been happier with not having to ever depend on and waste money down the drain on AV's which in my case drawed more malware than ever stopped. No wonder I always detested them and their trickery in convincing souls they were our protection. BAH!!

With the introduction of Virtualizations like Sandboxie and/or Shadow Defender, they helped move things along a more secure path.

And with various other third party developers stepping up to the challenges users faced, they gave us better choices.

Not to be outdone, Microsoft peddled out newer versions of itself and although eventually destroyed HIPS-Behavioral Blockers driving more consumers into the arms of AV's and then by some stretch of imagination Microsoft actually came forefront with their own reliable enough built-in AV in WD we see today in WIN 10.

I can't ever number the users who signed into our forum when I was a online tech to help those poor folks bitten by viruses/malwares of many sorts all of who had up-to-date AV's. Pfffttt.

The few items in my siggy below is proved well worth more than just another license or freeware component. They proven their metal and then some. No need to change.

 

I'm needing my yearly check up from everybody. Made a couple of changes and wanted to make sure I got things covered.

Malwarebytes Premium
Voodooshield
Webroot Internet Security Complete
Hitman Pro Alert
Hitman Pro on demand
Spywareblaster
Have uBlock on my chrome browser

Does that sound that a pretty good set up or am I missing something. Or do I have any redundancies.

I've been thinking about getting a VPN and settled on Mullvad but I haven't pulled the trigger yet.

Like always, I really appreciate the help because I want to make sure I got a good set up and not missing anything.

 

You might not need Malwarebytes. I have MB Premium installed but it doesn't start with Windows. I only run on-demand scans with it.

 

@Cherub I agree with Krusty. I don't think that Malwarebytes is needed running in real-time.

I would also add something to backup your system and data (if you don't have that covered already).

 

Exactly, this will make it block most exploits and a lot of malware. But it's not a one stop solution and this wasn't made clear on their website. I agree that it has a good approach when it comes to blocking exploits, but other next gen AV's have also improved a lot in this area, that's why I called it BS. I have not yet watched the video.

It makes a whole lot of sense, and you are actually using products that are able to block malware both pre an post execution. For example, AG wil block in-memory malware from encrypting files and modifying process memory, even if it's already running. HMPA will block key-loggers and ransomware that are already running. And BTW, it doesn't make any sense to test live malware against AG, because it will simply block execution.

 

Honestly i won't debate on a website marketing veracity; it is pointless because marketing is by essence using simple terms to show to the visitor that they are better than others...
So basically 100% of vendors are BS-ing because they all stop everything and do it better than the others...for example, almost all AV vendors pretend to block exploits which is false, because they aren't anti-exploits.
I'm amazed that you still focus on some advertisements more than the technical aspect...If so i suggest you to check every vendors' page, i'm sure you will find worse than AG

That the whole point of all SRPs, they just blocks and in AG case, it does it very well. No hassle, no cryptic prompts, no intensive resource usage, no FPs.
The user just need to have some decent knowledge of his system and adjust his policy.

 

Thanks, guys. I always like to check here and make sure I'm not doing anything wrong on my set up. Much appreciated.

 

What's so amazing about this, fact of the matter is that AG is not a one stop solution, yet they claim to be one. Nowadays you need everything: AV based on ML, behavior blocking, EDR, sandboxing, you name it. Why do you think that Sophos bought both HMPA and Invincea.

What I was trying to explain is that what he is doing is not really testing. Of course AG will block all malware from running, since it will simply block all non-signed processes from running. No matter if it's launched by user of exploit. But if you want to test certain of its containing features you need to allow malware to run and see if it can block file and registry modification and if it can block code injection.

 

i don't deny that, i just see no point in debating about marketing speeches...i really don't care about what vendors claims, only what the product really does; and to me AG protect me the way i want. Who care of detecting malware when you just prevent them to be executed in the first place. (check the video and you will understand)

An you know, nothing is 100% efficient, don't mix marketing speech made to sell a product with reality.

Any processes, signed or not, depending the user policy.

you still don't understand how work SRPs. you are too used to HIPS/BB mechanisms...you don't allow, because if you allow there is no more protection; SRPs are block all or nothing.
However, where AG differs from classic SRPs is that the user can select some processes to be Guarded, which means their access rights/privileges are limited and their are prevented to read/modify the memory of other processes.
You should start to read the Appguard thread from the beginning to get an idea on how it works.

 

OS: Windows 7 x64
Built-in security: Software Restriction Policies, Standard User Account, User Account Control on max, various tweaks
Firewall: Windows Firewall (inbound and outbound)
Backup: Macrium Reflect (grandfather-father-son backup scheme)
On-demand AM scanners: Emsisoft Emergency Kit, Avira PC Cleaner
Browser: Firefox with Sandboxie and uBlock Origin
Updates: SUMo
VPN: Mullvad with OpenVPN
Passwords: KeePass
Cleaner: CCleaner and Privazer
Encryption: VeraCrypt
Virtualization: VirtualBox
Anonymity: Tor Browser
Other tools: Autoruns, Process Explorer, Recuva

 

Lenovo E580 Laptop, Windows 10 Professional 64 bit:

Full disk Bitlocker encryption aided with TPM v1.16

Secure boot on

Several Group Policy settings enabled or disabled for privacy and security enhancements - Attachment below

SUA account with UAC at Default

Windows Defender Security Center:

Real Time Antivirus monitoring on

Controlled Folder access enabled

All other settings at Default, except with Memory integrity set to on

Windows Firewall enabled using Public profile and blocking incoming only

Latest beta version Chromium browser

Extensions:

• uBlockO; 3rd-party frames blocked
• Windows Defender browser protection

Settings

3rd-party cookies blocked

Javascript blocked by default, except for: [*.]ca, [*.]com, [*.]gov, [*.]edu

Flags enabled:

Strict site isolation, Appcontainer lockdown, GPU Appcontainer lockdown, PDF isolation

Disk images using Image for Windows

 

Windows 10 64 bit latest build

1. UAC Highest
2. OS Armor
3. Running as Admin not standard.
4. Firefox latest build with addons
5. Macrium Reflect Home (image guardian ON)
6. Router w/firewall
7. Windows Defender ON with additional options ON
8. Secure Boot ON
9. I do fresh install every six months. Provides better working OS.

Have all MS updates installed.
Results: No viruses or malware in several years now.

 

I'm test

Panda Dome Complete + Heimdal pro

Really fast

 

Just what my signature says.......Win 8.1 Pro 64 bit and Comodo Firewall (cruelsister settings). Also have Macrium Reflect and images on an external drive - to protect my laptop from me.

 

Common sense, common sense, and common sense.

 

Some say that it's overrated