For those having some whitelisting or sandboxing in place, considering to go without

So, this thread has been inactive for quite a while.

So I bought a used laptop, reinstalled vista, installed mse, and wanted to turn off the realtime protection, except for downloads, as outlined in this thread. But I can't make the recommended updates to the registry. I'm locked out, even if I reboot into safe mode after turning OFF real time scanning.

How are others getting around this? Or is this something new and you've all moved on?

Thx

 

You must take ownership of the registry key before you want to modify it.

 

that seems to have done it.

Thanks

 

Great stuff Kees... always finding ways to lighten setups while maintaining essential security.

You mentioned this is a great option for IE & Chrome users. Well for Firefox users, there's a great option for you as well that was mentioned in the immortal "What is your security setup" thread in the other malware forum, just recently. A way to get Hitman Pro, or other on demand only scanner to scan files at download via an addon named "Download Statusbar". A great compliment to Sandboxie, to scan downloads before recovering them from the sandbox.

We were just talking about it yesterday, so it should be only a page or two back, for people that are interested.

So now we have methods for users of IE, Chrome, and Firefox to enjoy scanning of downloaded files only, without having to have a real-time AV chewing on your HD perpetually.

We also talked about a great option for shell integration: VT Hash Check (Virus Total). You're a right click away from getting like 40 different opinions on a file.

So right now I have Hitman Pro, MalwareBytes, and VT Hash Check all in my shell/context menu. With Hitman Pro scanning files automatically at download. I feel covered very well with no real-time AV.