What is your security setup these days?

i wonder how restricted is the RunSafer from OA?is it like droprights from sandboxie?or even DW policy restriction?or what?thanks

 

Good Morning ! REAL TIME...Avast 5...No Charge...Edition...Prevx 3.0 with Safe Online...P.C. Tools Firewall Plus...Windows 7....Main Browsers...Google Chrome...and Firefox 3.6. Sincerely...Securon

 

On play PC (XP Pro SP3)

BufferZone free 2.1 (old version)
a) changed amclient.xml
- enabled FireWall for both sandboxed and trusted
- enabled running USB sticks sandboxed
- enabled file tagging: sandboxing all scripts (also JavaScript etc)
- enabled sandbox maintenance
b) changed clientdefs.xml
- removed Opera as application forced into sandbox (currently forcing none, only by right click run in sandbox)
- added Avast.setup/update, Hitman Pro and Mbam as trusted installers
c) changed factorydefs.xml
- removed cookie sandboxing in IE (I choose Opera as browser at install of BZ, bug ?)
- added sownload directory of Iron as a forced folder/sandboxed directory

Running Power User
- GPO lots of IE8/TCPIP hardening, restricting remote access, enabling CD burning for interactive user, disabled autorun
- Basic user for office, internet facing aps, service aps (7=zip, flash, foxit, java. etc)
- Deny Execute C:\Documents & Settings, Temp & Recycle dirs and Data partitions

Avast 5 Free with
a) file shield check on
- write executable to disk
- open (office) documents
- execute scripts
- attach USB stick (check all)
b) behavioral shield

Browsers
a) Using IE8 for banking:
- settings can't be changed by user or malware (added, clickjacking/zone elevation/cache protection/etc)
- disabled download of executables
- Trusteer Rapport for protecting IE process and keylogger protection
b) Using Iron for daily browsing
- running incognito
- extentions: adsweep, SiteAdvisor for Chrome
- content: disabled third party cookies, all cookies from Google, disababled gears and default plugin
- sandbox: tabs and plug ins (--safe-plugins switch)
c) Using Iron sandboxed by BufferZone (right click menu) for dodgy browsing

On demand:
- Hitman Pro
- Mbam

 

Wow. how do you do this? XD
only executing scripts and "writing executables only" are scanned.... just wow!!!

 

No trick, just have a look at the expert settings of the file shield

 

Not familiar with either of those programs, jmonge.

Per an OA forum admin, "Run Safer lowers the rights of the individual program similiar to running as a limited user account". On the OA web site, on features list under Run As Limited User, it states, "Online Armor's run-safer system helps protect against this (malware getting admin rights) by automatically 'stepping down' the rights that your web-browser or any other program you run has to a 'limited' user."

 

I have run your combo for a year now without a hitch. Only difference is that I have the paid version of OA... I am currently trialing Panda Cloud with Look N' Stop just for a change in icons I guess...

 

Mongol, I have been considering upgrading to OA Premium or OA ++.
Which one are you using?
Man, my browsing speed sure picked up dramatically when I uninstalled avast and GeSWall.

 

I am running OA Premium right now along with Prevx on my work Laptop. I figure what more could I need.. I do have a license for OA++ but running my current combo seems ideal and is blazing fast.

 

thanks page42

Run Safer with Online Armor
Make browsing more secure
Most users run as the "Administrator" user on their computer. This user has full permissions to do anything on the system so it's very convenient. However, it's not very safe - should a dangerous program get on to your computer, it too will have full administrative rights!

Online Armor's run-safer system helps protect against this by automatically "stepping down" the rights that your web-browser or any other program you run has to a "limited" user.

It does this without any intervention from you, completely transparently. This means as you surf the net your browser can't install software automatically that will cause dramatic damage to your system.

You can extend this protection by changing the settings in "Program Guard" - turning on "Run Safer" for any process (for example, instant messenger programs) will cause them also to have less system access.
very clear explanation

 

Then you should try it

 

I just switched from OpenDNS to Norton DNS Public Beta

 

Windows 7 ultimate 32bit
Comodo DNS - Hitman Pro - HijackThis - Process Hacker

Realtime:

• Windows 7 firewall (with firewall control by Dicu)
• Trusteer Rapport [FULL]
• MBRGuard
• Winpatrol [PAID] (Custom registry protection)
• Immunet Protect [PAID]
• Ghost security Appdefend [PAID] (The best outbound available)
• Defensewall 3.01 [PAID]
  

 

SandboxIE with Hitman Pro and MBAM on demand.

SourMilk out

 

Realtime:

Comodo Internet Security Premium 4.1 (obviously the best for now)

Ondemand :

MaM and Hitman Pro

 

Active
Sandboxie 3.45.17
Shadow Defender 1.1.0.325

On-Demand
Gmer
DrWeb CureIt
Malwarebytes Anti-Malware

 

Im testing out CIS v4.1 Complete right now. I hope it works like it should.

 

Formatted PC, new setup is:

Emsisoft Anti Malware
Panda Cloud Antivirus

I'll be adding a firewall later probably, still haven't decided on which

 

switched back to my ISP's DNS..

 

Same here,and MBAM Pro.Thinking to add PreVx Facebook for better browser protection.

 

Using KIS 2011 FINAL now. Including extra features from our friend Pipkin

http://forum.kasperskyclub.com/index.php?act=attach&type=blogentry&id=7255

 

* Avast 5.0
* Win 7 Firewall
* MBAM

 

running sandboxie in my old xp2 with hitman pro ondeman and i plan to try a very fast/light firewall,maybe look n stop ot jetico firewall

 

Trying out K9 Web Protection

 

Dropped Hitman Pro in favor of Emsisoft Command Line Scanner and Vba32 Console Scanner in conjunction with some ultra cool custom context menu entries for each courtesy of the excellent FileMenu Tools.