What is your security setup these days?

Discussion in 'other anti-malware software' started by dja2k, Dec 15, 2005.

  1. roger_m

    roger_m Registered Member

    Joined:
    Jan 25, 2009
    Posts:
    8,627
    My security setup has not changed for some time.

    Windows 10 Pro
    360 Total Security Premium
    AdGuard Premium

    I run very occasional on demand scans with Emsisoft Emergency Kit and use AOMEI Backupper for backups.

    I may at some point switch from 360 TS to WiseVector.
     
  2. gery

    gery Registered Member

    Joined:
    Mar 8, 2008
    Posts:
    2,175
    Thats what i meant
     
  3. imdb

    imdb Registered Member

    Joined:
    Nov 2, 2011
    Posts:
    4,208
    jmonge's last post was on october 15. i hope he's well. god bless you @jmonge . :doubt:
     
  4. digmor crusher

    digmor crusher Registered Member

    Joined:
    Jul 6, 2012
    Posts:
    1,156
    Location:
    Canada
    Yes sir.
     
  5. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    3,343
    Location:
    Italy
    Windows XP Home
    Windows Firewall
    1°- AdGuard DNS 2°- Clean Browsing DNS
    PsExec
    DEP Always ON
    Trick POSReady 2009 + KB4500331
    Black Viper's List
    No NET Installed
    SMB Protocol Disabled
    MBAE Premium
    OSArmor
    WMP off
    OE off
    I.E.8 No Flash + Trick 1803 - Block the downloadable executable files + Disable script (F12 - on/off) + OSA Rule block

    New Moon (Pale Moon fork for XP) - Custom Setting About:Config
    Home page = DuckDuckGO - Custom settings saved via URL no cookies
    Default Search Engine = DuckDuckGO

    uBO Legacy
    NoScript
    Decentraleyes
    No Resource URI Leak
    Super Start

    Changelog since the last configuration:

    • Added some custom rules in OSA for Mimikatz Dump Lsass.exe mitigation.
    • Added "sc" command rule block in OSA.
    • Added rule to block execution of I.E.8 in OSA.
    • Added rule to block msbuild.exe in OSA and the same rule on the Registry Key.
    • Added Clean Browsing DNS.
    • Added CCleaner v.5.64.7577.
    • Mitigations for CVE-2020-0674.
    • Mitigations for CVE-2020-0938 and CVE-2020-1020.
    • Added SumatraPDF v.3.3.
    • I deleted all the Insecure Cipher Suites *** NEW ***
    100.JPG
    100a.JPG

    P.S.
    The developer in the latest version of the browser made a major change to the ciphers.
    No problem at the moment for the visualization of the websites that I usually frequent.
     
  6. Chuck57

    Chuck57 Registered Member

    Joined:
    Sep 2, 2002
    Posts:
    1,770
    Location:
    New Mexico, USA
    Win 8.1 Pro. Comodo firewall (CS settings).
    Edge chromium browser with Privacy Badger and UBlock origin.
    Aomei Backupper Pro. Backups saved to external drive.
    All sensitive documents saved to external. Nothing on HDD.

    Added WiseVector StopX
     
  7. Page42

    Page42 Registered Member

    Joined:
    Jun 18, 2007
    Posts:
    6,941
    Location:
    USA
    Sandboxie and some other stuff.
     
  8. G1111

    G1111 Registered Member

    Joined:
    May 11, 2005
    Posts:
    2,294
    Location:
    USA
    Firewall & Anti-Virus:
    Router NAT/SPI (Password Protected) (McAfee Secure Home Internet)
    Windows Firewall
    Emsisoft Anti-Malware 2020.8.0.10325 (MVPS Hosts File)

    Blocking/Hardening:
    AppGuard 6.2.9.1113
    HitmanPro.Alert 3.8.6 Build 875
    Quad9 DNS
     
  9. lost24

    lost24 Registered Member

    Joined:
    Jan 2, 2009
    Posts:
    173
    Location:
    France
    After 3 weeks using my new Windows 10 laptop, I have to say my 6 year old setup is still working perfectly.
    I have just made one small change : ExpressVPN now deals with everything DNS-related, therefore I removed Simplednscrypt.

    NAT Router
    ExpressVPN

    Binisoft WFC (medium filtering)
    Appguard Solo 6.2.9.1113
    Emsisoft Anti-Malware
    Sandboxie 5.33.6
    Keepass

    On demand : MBAM
    Macrium free

    The only inconvenient is Sbie's annoying pop-ups when I visit some websites (they never appeared on my old Win 7 machine) :
    https://i.ibb.co/HpvGdmS/Capture.png

    Apart from that, it's all light and smooth.
     
  10. kC_

    kC_ Registered Member

    Joined:
    Apr 6, 2007
    Posts:
    580
    windows 10 pro
    • Windows defender with High+ / Maps etc /controlled folder access
    • Cylance Desktop (unregistered from security center to allow defender to run)
    • Hitman Pro Alert
    • Glasswire Elite
    • Draytek hardware FW
    • Pihole Primary DNS ext lookups to 1.1.1.2 (cloudflare with malware)
    • Macrium Reflect Home
    • Common Sense
     
  11. wat0114

    wat0114 Registered Member

    Joined:
    Aug 5, 2012
    Posts:
    4,064
    Location:
    Canada
    Windows 10 Pro v1909

    Comodo Firewall v12.2.2.7036 with personalized "Fort Knox" level security. My approach is aggressive-aggressive as opposed to passive-aggressive, the latter being promoted by elsewhere :
    • Auto-Containment: Enabled
    • HIPS: Paranoid Mode
    • Protected Files: added many user space directories
    • Customized enhanced security ruleset applied to LOLBins, MS Office programs, email client and Web browsers
    • Script Analysis: Enabled - added an extensive list of script types to monitor
    • Device Control: Blocked USB devices with Exclusions
    • Website Filtering; Enabled against Malware and Phishing sites
    • Firewall: Enabled with outbound control; svchost.exe & BackgroundTransferHost.exe restricted to Microsoft & Akamai Update server IP address ranges
    Windows Security
    • Real Time protections all enabled
    • Device Security: Core isolation, Secure processor, Secure boot
    • App and browser control: Smartscreen & Exploit protection
    Linux Debian latest
    • As per my signature
    System backups for both O/S'
    • Terabyte IFW
     
    Last edited: Sep 5, 2020
  12. Minimalist

    Minimalist Registered Member

    Joined:
    Jan 6, 2014
    Posts:
    14,881
    Location:
    Slovenia, EU
    OS: Windows 10 19041.450
    ---------------------------------------------------------------------------------------------------------------------------------------------------------------
    System backup: Macrium Reflect 7.2.5107
    Updates: SUMo 5.11.3.462, Windows update
    Antimalware: Eset Internet Security 13.2.18.0
    Content blocker: uBlock Origin 1.29.2 in Firefox 80.0
    VPN: Mullvad (OpenVPN 11.15.0.0 and Wireguard 0.1.1.0)
    --------------------------------------------------------------------------------------------------------------------------------------------------------------
    Malware scanners: Emsisoft Emergency Kit 2020.5.0.10152, Avira PC-Cleaner 13.6.0.2012
    Passwords: KeePass 2.45
    Encryption: VeraCrypt 1.24.23
    Testing: VirtualBox 6.1.12.39181
    Other tools: CCleaner 5.70.7909, Autoruns 13.98, Process Explorer 16.32, Recuva 1.53.1087
     
  13. Solarlynx

    Solarlynx Registered Member

    Joined:
    Jun 25, 2011
    Posts:
    2,015
    Simplified my rig. But I had to install Windows Defender again, it was surprisingly long, tedious and boring:

    Comodo Firewall
    - FW: Custom
    - Auto Containment: block all Unrecognized
    - HIPS: Safe, all boxes in Monitoring Settings are checked
    - VirusCope: on
    - Website Filtering: on

    Or sometimes, for simplicity switch some settings:

    - FW: Save
    - HIPS: Safe

    When I give my PC to kids, I turn CFW to Silent mode.

    Windows Defender
    In Exploit protection, I switched everything on.


    **But I had to install Windows Defender again, it was surprisingly long, tedious and boring:** - It's a joke, of course. I just uninstalled Panda free.
     
  14. Osaban

    Osaban Registered Member

    Joined:
    Apr 11, 2005
    Posts:
    5,614
    Location:
    Milan and Seoul
    Connection: Cable Ethernet Public Network connection + covered up screen camera on laptop.

    OS: Windows 10 home, version 20H2 build 19042.487 + UAC Max + SmartScreen set to 'warn', User account: administrator, Remote assistance disabled

    DNS: Cloudflare.

    Firewall: Windows Firewall

    AV: Windows Defender default settings Testing: WiseVector StopX

    Browser: Google Chrome v. 85.0.4183.83 + uBlock Origin v.1.29.2 + SpywareBlaster v.6

    Virtualizer: Shadow Defender v. 1.5.0.726 (highly recommended) always on. RAM used as Write Cache: 4 GB

    Backup: Macrium Reflect home edition v. 7.2.5107 [UEFI], (highly recommended). Daily incremental backups.

    Macrium Image Guardian: on

    Important data:
    kept outside on unplugged USB hard drives
     
    Last edited: Sep 7, 2020
  15. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    3,343
    Location:
    Italy
    Windows XP Home
    Windows Firewall
    1°- Quad9 DNS 2°- Clean Browsing DNS
    PsExec
    DEP Always ON
    Trick POSReady 2009 + KB4500331
    Black Viper's List
    No NET Installed
    SMB Protocol Disabled
    MBAE Premium
    OSArmor
    WMP off
    OE off
    I.E.8 No Flash + Trick 1803 - Block the downloadable executable files + Disable script (F12 - on/off) + OSA Rule block

    New Moon (Pale Moon fork for XP) - Custom Setting About:Config
    Home page = DuckDuckGO - Custom settings saved via URL no cookies
    Default Search Engine = DuckDuckGO

    uBO Legacy
    NoScript
    Decentraleyes
    No Resource URI Leak
    Super Start

    Changelog since the last configuration:

    • Added some custom rules in OSA for Mimikatz Dump Lsass.exe mitigation.
    • Added "sc" command rule block in OSA.
    • Added rule to block execution of I.E.8 in OSA.
    • Added rule to block msbuild.exe in OSA and the same rule on the Registry Key.
    • Added Clean Browsing DNS.
    • Added CCleaner v.5.64.7577.
    • Mitigations for CVE-2020-0674.
    • Mitigations for CVE-2020-0938 and CVE-2020-1020.
    • Added SumatraPDF v.3.3.
    • I re-added TLS_RSA_WITH_AES_256_CBC_SHA256 to update the Root Certificates.
    • 1° DNS - Switched Quad9 DNS
    • Switched PopMan with POP Peeper email notifier.
     
    Last edited: Sep 6, 2020
  16. Page42

    Page42 Registered Member

    Joined:
    Jun 18, 2007
    Posts:
    6,941
    Location:
    USA
    I just activated another year of ESET NOD32 Antivirus. It's my 8th year in a row with this AV.
     
  17. Minimalist

    Minimalist Registered Member

    Joined:
    Jan 6, 2014
    Posts:
    14,881
    Location:
    Slovenia, EU
    They have great product indeed. :thumb:
     
  18. digmor crusher

    digmor crusher Registered Member

    Joined:
    Jul 6, 2012
    Posts:
    1,156
    Location:
    Canada
    W10 protection augmented by Configure Defender, Simple Windows Hardening and Firewall Hardening, all small programs that use built in W10 protection and boost it big time. I'm way over using 3rd party programs, especially if any such programs already have alternatives built into Windows. And I especially stay away from any programs that try to neuter Windows such as O & O Shutup 10.
     
    Last edited: Sep 12, 2020
  19. paulderdash

    paulderdash Registered Member

    Joined:
    Dec 27, 2013
    Posts:
    4,639
    Location:
    Under a bushel ...
    :thumb: My most basic Win 10 setup now just has ConfigureDefender, set to 'High'.

    But it is fun to play with stuff, and combos. So I have another two Win 10s on the same machine, selected via Terabyte BootIt-UEFI (thanks @Brian K!).

    Oh, and Macrium Reflect because I am familiar with it, though probably not even necessary because TB BootIt-UEFI can image too.
     
    Last edited: Sep 13, 2020
  20. digmor crusher

    digmor crusher Registered Member

    Joined:
    Jul 6, 2012
    Posts:
    1,156
    Location:
    Canada
    yah, not as much fun for sure.
     
  21. Bertazzoni

    Bertazzoni Registered Member

    Joined:
    Apr 13, 2018
    Posts:
    652
    Location:
    Milan, Italia
    Windows Defender with ConfigureDefender @ Max setting here.:thumb:
     
  22. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    3,343
    Location:
    Italy
    Windows XP Home
    Windows Firewall
    1°- Quad9 DNS 2°- Clean Browsing DNS
    PsExec
    DEP Always ON
    Trick POSReady 2009 + KB4500331
    Black Viper's List
    No NET Installed
    SMB Protocol Disabled
    MBAE Premium
    OSArmor
    WMP off
    OE off
    I.E.8 - Trick 1803 - Block the downloadable executable files + Disable script (F12 - on/off) + OSA Rule block

    New Moon (Pale Moon fork for XP) - Custom Setting About:Config
    Home page = DuckDuckGO - Custom settings saved via URL no cookies
    Default Search Engine = DuckDuckGO

    uBO Legacy
    NoScript
    Decentraleyes
    No Resource URI Leak
    Super Start

    Changelog since the last configuration:

    • Added some custom rules in OSA for Mimikatz Dump Lsass.exe mitigation.
    • Added "sc" command rule block in OSA.
    • Added rule to block execution of I.E.8 in OSA.
    • Added rule to block msbuild.exe in OSA and the same rule on the Registry Key.
    • Added Clean Browsing DNS.
    • Added CCleaner v.5.64.7577.
    • Mitigations for CVE-2020-0674.
    • Mitigations for CVE-2020-0938 and CVE-2020-1020.
    • Added SumatraPDF v.3.3.
    • I re-added TLS_RSA_WITH_AES_256_CBC_SHA256 to update the Root Certificates.
    • 1° DNS - Switched Quad9 DNS
    • Switched PopMan with POP Peeper email notifier.
    • Uninstalled Adobe Flash Player from O.S.
    • Hardening MailNew with some rules taken from Horloge Skynet thunderbird-user.js.
     
    Last edited: Sep 22, 2020
  23. vonvon

    vonvon Registered Member

    Joined:
    Apr 30, 2006
    Posts:
    59
    Location:
    European Union - France
    Desktop and laptop :

    Kis 21.1.15.500 - Firefox + adblocker ultimate - easeus todo backup every month - O&O ShutUp10 - IbVpn- Kerish doctor


    2 ultrabooks :

    Malwarebytes Windows firewall control - F-Secure safe - Firefox + adblocker ultimate - easeus todo backup every month - O&O ShutUp10 - IbVpn - Kerish doctor

    Strong enough for me and light.
     
    Last edited: Sep 23, 2020
  24. dja2k

    dja2k Registered Member

    Joined:
    Feb 15, 2005
    Posts:
    2,120
    Location:
    South Texas, USA
    Hey guys hope you are all doing well. Thanks for keeping this thread alive all these years. My setup hasn't seen much change, will update it in the upcoming days. Anyways I am more excited for the new PS5 and Xbox Series X than my PC at the moment. I've also started to use my Samsung Note 20 Ultra and Samsung Tab S7 Plus with Dex. Stay safe my friends.
     
    Last edited: Sep 23, 2020
  25. Quassar

    Quassar Registered Member

    Joined:
    Oct 19, 2011
    Posts:
    251
    Location:
    Poland
    Yo thx for your msg

    Mine too not much changes bc not much product new exist on marked and most peoples stay with what they like in past..
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.