What is your security setup these days?

SBIE + DEP + LUA + HITMAN PRO on Win7 64bit

Grats jmonge

 

OS

Win 7 Ultimate 32-bit

Real-Time

Defensewall 3.03
Prevx 3.0.5.174 w/ Safeonline (Paid)
Panda Cloud Pro 1.1.1
Sandboxie 3.45.21 (Paid) (when visiting the darkside)
PE Guard 2 (Testing) removed, nice program but I feel it's overkill since my other programs have everything pretty well covered.

On-Demand

Hitman Pro 3.5.6 (Paid)
MBAM Free 1.46

Imaging

Macrium Reflect Free

 

XP SP3 LUA
CIS
Firefox (private browsing, noscript, adblock)

 

dropped Comodo Dragon browser due to not being supported with Ccleaner.
I'm thinking of going back to Opera or Firefox.
... or back to Chrome because it seems the only browser that works with Kees' ACL protection.

 

OA + Hitman Pro + PE Guard 2 + MBAM

Congrats jmonge

 

Still the same light and powerful tandem here...

Realtime:
Look'n'Stop 2.07
DefenseWall HIPS 3.02

On-demand:
ShadowProtect Desktop
Dr.Web CureIt!

 

Running Windows 7 Ultimate x64 as a Standard User with DEP and SEHOP enabled for all process; Windows 7 built-in software firewall; OpenDNS for malicious web page blocking; and a Netgear WNDR3700 NAT router/SPI hardware firewall.

That's it... in addition to my common sense.

 

We have the same set up right down to the router
I also have Applocker and Hit Man Pro but everything else is identical.

 

Malware Defender 2.6.0
Sandboxie 3.45.22
Shadow Defender 1.1.0.325

 

I see another computer in your future. Congratulations jmonge.

 

thanks

 

XP Pro SP3 (behind router + off-line image/data backup)

Windows internals
- DEP for all aps

Group Policy Management
- hardening of Internet/network and IE8 , Autorun disabled, Antivirus checks downloaded executables and attachements
- create CD/DVD allowed for interactive user

Software Restriction Policy
- Running Power User
- Running internet facing aps + service aps as LUA
- Deny execute SRP on data partitions and USB drives

Access control list (doubling deny execute SRP)
- Download/execute protection through ADS info (IE8 + Mail + Explorer)
- Remove exute right from Download Directory of Chrome

Browsers
- IE8 (for banking with all unused IE security settings enabled and locked down for user and malware, including BHO's and Plug-ins)
- Chrome (for daily surfing with --safe-plugin, incognito, adsweep, SiteAdvisor for Chrome)

Ad hoc security aps
- Avast File shield (launched by OS at execution of attachement/downloaded file through Group Policy)
see https://www.wilderssecurity.com/showthread.php?t=263940
- Hitman Pro (trial = free)
- MBAM free

 

Current Setup:

Real Time:
-Avast! 5 Free AV (Enabled Shields: File, Network & Behavorial)
-Immunet Protect 2.0 Free
-Prevx SafeOnline 3.0 Added

Firewall:
-PC Tools Firewall Plus

On-Demand Scanner:
-MBAM 1.46 Free

Browser:
-Mainly on Google Chrome
-FireFox
-IE8
-Ad Block for FireFox and Google Chrome

Overkill?

 

Switched to almost completely native protection, after solving the MSE lag issue.

Windows 7 x64, fully patched with Automatic Updates ON.
User Account Control maxed for a password protected administrative account.
Data Execution Prevention ON for all programs.
Structured Exception Handling Overwrite Protection ON.
Windows 7 Firewall in Public profile.
Microsoft Security Essentials x64 set to perform an update check daily before the Quick Scan.
Internet Explorer 8 with all pop-ups blocked.

Daily scan with Hitman Pro.

 

How secure would this be?

-win xp LUA
-built in firewall
-Software Restriction Policy
-firefox (noscript)

-scanned once in a wile with "spybotS&D" or/and "clamwinportable" from Admin account

 

I think using LUA & SRP should be secure enough. Although i would suggest using MBAM &/or Hitman Pro as your On-Demand scanners. Spybot is very out-dated, and ClamAV detection rates are very poor.

 

MBAM Pro + Prevx full

 

How is the combination working out for you?

Cheers.

 

win xp,no problems here but mbam pro is a little bit heavy thats why im thinking about Panda CA

 

*** XP SP3 ***
========================
* Active *
Geswall
Threatfire
Panda Cloud AV
PC Tools Firewall
OpenDNS-FamilyShield
Microsoft Automatic Updates Enabled
------------------------
* Weekly to Monthly *
DrWeb CureIt
MalwareBytes
SuperAntiSpyware
------------------------
* Netgear WNR200 NAT/SPI Router *
------------------------
* Acronis TrueImage *

 

I have Avast 5 Free (with All Shields Up) only on the slower Desktop Computer. Removed DefenseWall and PrevX SafeOnline. Probably will put Winpatrol back on it too.

DefenseWall and PrevX SafeOnline rock, but my computer is just too old to run them.

 

I'm Kees1958 copycat.
most is the same except I'm running as Limited User instead of Power User.
Ah... I also have Comodo Time Machine installed.
Peerblock for my P2P habits.

maybe I'll add Keyscrambler or something.


gpedit.msc is sexy

 

Until I get time to reinstall my current setup (maybe this evening), I am running Ubuntu 10.04. I do remember this and it works very well, but sometimes trying to play media (stream audio) is a pain. Matt

 

Back on Vista 32 bit.