What is your security setup these days?

Good Evening ! Acr1965...no problems...slowdowns...or snafus. Sunny... from Domain Of The Cloud. Sincerely...Securon

 

I find it amazing how many people waste resources, beefy PC or not, with multiple running AVs...

If you know what you're doing and what to avoid, it's not hard to just keep an on-demand scanner just in case.

Sandboxie, a few chrome/firefox plugins, and common sense.

 

i want to try sandboxie again

 

Sandboxie + Antiexecutable

 

As in the Bob Segar song "Still the same".

OS: Windows 7 64-bit
Antivirus: Bitdefender Antivirus Plus 2013
DNS: Norton DNS and or OpenDNS
Software Firewall: Windows 7 Firewall w/Advanced Security
Hardware Firewall: 2Wire Gateway w/NAT
On Demand Scanners: MBAM
Portable Scanners: Too many to list
Rescues: Bitdefender Rescue CD,BitDefender Rescue Recovery Mode via Spacebar.
Imaging: Paragon Backup & Recovery Free 2012, Windows 7 Backup & Restore
Backup: SkyDrive,Auslogics BitReplica
Browser: Chrome 22 w/ABP (EasyList & Privacy),LastPass,DNT+
Cleaners: CCleaner
Registry Tools: Auslogics
Defragger: Auslogics Pro
Compression: WinRAR
Software Updater: Secunia PSI
Task Manager: Process Hacker
System Information: Speccy,PC Wizard 2012
Uninstaller: Advanced Uninstaller Pro

Gentlemen....................Notice how I keep the same setup.

 

i wonder how good it will be a sandbox+anti-executable+mbampro?

 

Very strong!

 

thanks kelvin
and it is very light

 

Does it really matter when 48 hours later you will change to something else.

 

for me it does cause i dont really care what you think or when you judge

 

Yea it is fun to try out many setups

 

What happened with comodo v6?

 

Removed Nod32 and went back to good old no real-time AV setup

 

Good Morning ! Really Real Time...WSA Essentials...AppGuard...Hitman Pro. Sincerely...Securon

 

Windows Ultimate x32 lazy admin setup using the build-in protection of the OS as only security layers.

Firewall
Router with Google DNS and Windows 7 internal FW setup two way (block outbound also)

Real time protection
1. Threatgates containment
Disabled USB autoplay/execute USB through GPO. Added 1806 regtweak to place a deny execute on executables originating from other computers (e.g. internet download or mail attachement). Added ACL deny "Traverse folder/execute" for everyone on Download, mail and media folder. Added EMET process mitigation for browser, mail, media-player, pdf-reader and 7-ZIP.

2. Internet Protection & Privacy
Chromium low rights (untrusted) sandboxes for rendering websites, javascript, flash and pdf. Chrome build in safe browsing (chromium now also prevents downloads of executables with 1806 regtweak). Chromium internet browser is started with --no-referrers switch with following privacy and content settings: Send a do not track request with your browsing traffic (new ), Allow only session data, Block third party cookies, Block HTTP cookies (allow though icon), click to play Flash plug-in (allways allow Chrome's internal PDF-reader), deny javascript except (allow) from COM and NL domains. Chromium now also warns for unsecure data form entry (new )

3. User Space protection
Hardened HKCU autorun entries through GPO and Regedit (removed "set value", "create subkey" and "delete" permission for normal users). Set "Basic User" as default level, for all files, except Administrator. Added symantec Run MSI as Admin tweak. This prevents programs from elevating and executing in user directories, but allows to install with "Run As Admin" right click (after having removed the 1806 block for that executable).

4. Admin Space protection
Set UAC to full, disable intelligent installer recognition, disabled unsigned programs to elevate. Browser (Chromium), decompression (7-zip) and media-player (VLC) are all unsigned, hence can't elevate to Admin. Using PDF reader (Foxit) in Safe Mode (no external commands) with JavaScript disabled. Installed free E-mail plug-in Advanced Security for Outlook. Forced Medium Integrity level on PDF Reader and E-mail through ICACLS.

On demand scan check
HitmanPro free, Panda Cloudscanner free, Sysinternals (programs and autoruns) => only before monthly backup

Backup/Imagine
Windows own image backup, Synctoy free for data backup[/QUOTE]

 

Tried Kaspersky Antivirus 2013 - Used too much memory for my liking.

Tried Kingsoft Antivirus SP 5.3 - Feels heavy or not as light as the release after Beta.

Tried Bitdefender Antivirus 2013 - The switching from Auto-Pilot to User Mode when I switched from Mains power to Battery was annoying.

 

Upgraded to Windows 8 last night (couldn't pass up the $39.95 offer). Installed EAM 7 and now on cruise control.

 

I don't like it so much anymore

 

Rompin,
What did you upgrade from? I've been thinking of upgrading someone from XP pro. I know that you can do a clean install ( which he greatly needs, can you say cluttered HD?) but he probably won't like erasing some programs.

 

[/QUOTE]
I hope you wrote this down somewhere and aren't just recalling it from memory?

 

Upgraded from Win7...supposedly it upgrades XP and Vista as well but indicated the easiest update was from Win7. Took a while but I just let it go and pretty well did everything automatically. Not a single snag so far...just getting familiar. The system runs smooth!

 

RR , enjoy the ride.

Bo

 

Only my group policy settings, changes in folder and registry permissions and mandatory integrity levels changed of executables. Running lazy admin setup since first Vista Business

 

KIS 2013 for a while now and it's running smooth, there is very little lag in opening apps (word/office/etc) as compared to earlier versions of KIS. I have the following settings:
Protection Center
File Antivirus: recommended setting/heuristics on light/ prompt on detection
Mail Antivirus: disabled
Web Antivirus: disabled
IM Antivirus: disabled
Application Control: enabled/load rules from KSN/Trust apps with digital sig: disabled/ unknown apps, move to: untrusted
System Watcher: enabled/ default setting plus "prompt for action"
Firewall: enabled / default settings
Network Attack Blocker: enabled/ default settings
Anti-Spam: disabled
Anti-Banner: enabled/default
Safe Money: enabled/default
Secure Data Input: enabled/default

Scan settings: default plus prompt for action
Update settings: check every 6 hours
Advanced settings: default

Also have AdMuncher running
SBIE and MBAM on demand

 

Windows 7 32 Bit - AppGuard - AdBlock - EMET Maximum - MBAM Pro - Norton DNS - UAC Maximum - Windows firewall Block Inbound.

Windows 7 32 Bit - AppGuard - AdBlock - EMET Maximum - Bitdefender AV Plus 2013 - UAC Maximum - Windows Firewall Block Inbound.

OS X Mountain Lion - AdBlock - Bitdefender AV - GateKeeper - Firewall Block Inbound.