What is your security setup these days?

Anti-Executable Standard/Server Standard Release Notes
Version 5.20.2100.562 (November 2012)

New Features

•Support for Windows 8.
•Support for Windows Server 2012.
•New Reporting Feature: Anti-Executable Standard now has the ability to display a report of Most Blocked Programs for a date range.
•Ability to open the log file directly from the UI.
•Anti-Executable is now available in Portuguese (Brazilian).
Fixes

•6125 – Resolved an issue where Scan Progress Bar during installation does not show detailed information as it is shown when scanning files from Anti-Executable UI.
Known Issues

•The translation for Portuguese user guides is in progress and will be available shortly

 

I removed HitmanPro (BSODs when scanning) and I'm using Emsisoft EK as on-demand scanner only.

 

So I installed Comodo Firewall. Should I have all the settings on safe mode?

 

http://www.techsupportalert.com/content/how-install-comodo-firewall.htm
this may be of help

 

Thanks Vector. This is my very first time trying Comodo Firewall. Before I was just using Windows 7 firewall. Not sure if I even want to dabble into the configurations, lol.

 

Per the instructions, 'Safe Mode' is the recommended setting for most users - combining the highest levels of security with an easy-to-manage number of connection alerts.
That's the way I run it on 1 XP and 2 Win7 machines.

 

Think what I'm worried about is if I make changes and decide later I don't want the firewall, then uninstall it that there will be a problem.

 

excellent

This is what I need since I'm an average user. Thank you.

 

I don't need GeekBuddy since it's a free trial anyway. Would uninstalling it do anything to the firewall?

 

Yer welcome.

Uninstalling it won't do anything to the firewall.
Uninstall should go well via Add/Remove Programs (worked fine for me), but be aware that some folks have issues (try Googling "uninstall geekbuddy").
There is an Uninstaller Tool, recommended in this thread by a Comodo Global Mod, though it is not an official tool.
You'll probably be fine via the standard removal route, but just wanted you to be aware.
Let us know if you adios it without any trouble, internet addict.

 

no troubles uninstalling

What I don't get is why Comodo Firewall blocked Malwarebytes when I did a full scan. The scan worked fine, but CF shows it blocked it with Defense+.

 

It is signed. Odd. Some suggest turning off Comodo.

I generally install MB before Comodo. Why I have no problems.

http://forums.malwarebytes.org/index.php?showtopic=99964

The firewall with D+ is strong.

 

Happy and trouble-free with what's in my signature since I switched to Windows 8.

 

If the scan worked fine, then CFW did not block it, right?
Why not post a screenie of what you are seeing.

 

Would I be alright disabling Defense+ and just using the firewall?

 

That's how I understand it. I did a full scan with Malwarebytes perfectly, then opened up CF just to see if it blocked anything and it showed Malwarebytes. Seems like if it really blocked the "intrusion" then the scan wouldn't have ran at all.

 

Outpost Firewall Pro and Deep Freeze both with lifetime license

 

What your probably seeing is the attempt of MBAM to scan comodo's files or protect files. I've noticed this before when running MBAM as I also have comodo firewall. MBAM scan is working fine it is D+ that is blocking attempts to scan protected files. I wouldn't worry too much about it.

 

I am using :

- CIS v6 beta 2 with CCE (full virtualization)
- EAM v7 (RT set to scan on executed)
- WSA Complete beta (RT set on high heuristics and scan on executed, used mostly for its "rollback" feature/ID & Web Shield)
- Shadow Defender

 

When I see your set up, I suppose my setup can be called minimalistic (see sig)

 

good deal

 

Windows Ultimate x32 lazy admin setup using the build-in protection of the OS as only security layers (and smart way Chrome uses these build-ins to sandbox browser).

Firewall
Router with Open DNS and Windows 7 internal FW setup two way (block outbound also)

Real time protection
1. Threatgates containment
Disabled USB autoplay/execute USB through GPO. Added 1806 regtweak to place a deny execute on executables originating from other computers (e.g. internet download or mail attachement). Added ACL deny "Traverse folder/execute" for everyone on Download, mail and media folder. Running Chrome, Outlook and WMP virtualised (with RUNASINVOKER, see pic).

2. Internet Protection & Privacy
Using Chrome started with --no-referrers and --incognito switches, uses 'click to play' Flash plug-in and allows javascript only from top domains COM and NL. Chrome extensions: new tab behaviour (launching startpage) and bookmarks menu. Using IE10 locked down with Group Policy for banking etc.
3. User Space protection
Added EMET 3.5 to all user programs. Hardened HKCU autorun entries through GPO and Regedit (removed "set value", "create subkey" and "delete" permission for normal users). Set "Basic User" as default level, for all files, except Administrator. Added symantec Run MSI as Admin tweak. This prevents programs from elevating and executing in user directories, but allows to install with "Run As Admin" right click.

4. Admin Space protection
Set UAC to full, disable intelligent installer recognition, disabled unsigned programs to elevate.

On demand scan check
HitmanPro free, Sysinternals autoruns => only before monthly backup

Backup/Imagine
Windows own image backup, Synctoy free for data backup

 

Very original set up . I prefer to play with some toys thou. Outpost FW + MBAM Pro + Exploit Shield + EMET

 

I'm beginning to be more and more attracted by the idea spoted around here on wilders that "just stick with what works for you,and leave the tests and charts alone"...So,i must say that PCAV,Privatefirewall and SBIE combination is for me the masterpiece of lightness,speed and effectiveness.

 

KAV 2013 died on my PC yesterday.Something went wrong.It won't load at all.

And my new setup on Windows 8 is:

BitDefender Antivirus Plus 2013
Hitman Pro
Windows 8 FW