What is your security setup these days?

UPDATE From Post 1138

Changed
Added
Removed

WINDOWS XP ACTIVE PARTIAL SETUP

ACTIVE
Online Armor FW (Beta 168 )
- Advanced Mode
- Mail & Web Shield Enabled
- Program Guard Enabled
- Firewall Enabled
- Custom Blacklists Enabled
Ksspersky Internet Security (6.0.2.621)
- File, Mail & Web Anti-Virus Enabled
- Anti Spy Enabled
BOClean (4.22.002)
Geswall (2.6 Beta2)
- Isolate Know Applications
- All Browsers Automatically Isolated
Nod32 (2.70.32)
- Blackspear's Recommended Settings
SUPERAntiSpyware (3.6.1000)
- Default Settings
LinkScanner Pro (2.5.2.0052.7)
- All Enabled

WINDOWS VISTA ACTIVE PARTIAL SETUP

ACTIVE
Kaspersky Internet Security (6.0.2.621)
- File, Mail, Web Anti-Virus Enabled
- Anti Spy Enabled
- Anti Hacker (Training Mode) Enabled
Geswall (2.6 Beta2)
- Isolate Know Applications
- All Browsers Automatically Isolated
User Account Control (UAC)
- Enabled
LinkScanner Pro (2.5.2.0052.7)
- All Enabled
Nod32 (2.70.32)
- Blackspear's Recommended Settings
SUPERAntiSpyware (3.6.1000)
- Default Settings

BROWSERS, HARDENING, ON DEMAND can be found HERE

 

Okay you might be asking why did I totally change my setup. One reason only, I traded my dad my Nod32 & SUPERAntispyware licenses for his Kaspersky Internet Security licenses. I pulled a quick one on him. He has a main computer and a laptop. The Anti Hacker firewall was too much for him, I just put the free Zone Alarm on his computers to go along with Nod32 and SUPERAntispyware. If i don't like this new setup, I will just change them back and make him deal with it, jk probably give him back his KIS but install only the AV and stay with Zone Alarm. As for removing Linkscanner Pro, same problem as before, thought it was gone and that I could live with it, but too annoying. First Linkscanner Pro checking the links were too slow and secondly, that bug of Firefox not disabling protection is still there, haven't figured that one out.

dja2k

 

have u tried unchecking the settings for SearchShield? LinkScanner would still protect you, you just wouldnt see the icons in your serach results.

 

New setup in sig

 

Yeah WSFUser I know, but I am one of those that wants to know why something is being blocked etc. Anyways, not that its the same, I will still use SiteAdvisor just for displaying if links are good or bad. I still wonder which is better at tdetection, SiteAdvisor or LinkScanner because if you run both, sometimes they contradict each other.

dja2k

 

Why, Thanks dja2k!

And, two questions. I read on the Spyware Warrior site that you should use only one block list, either SWB or IESpyad, but you're having no problems with running both? Are the two lists different enough to warrant this?
Also, are you running XP SP2? If so, is SocketLock necessary?
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/sp2netwk.mspx#E5AAE
Click on "TCP/IP" under "On This Page"
I remember some of the flak MSoft took when they implemented SP2 was due to locking down the raw sockets. People temporarily lost the use of tools like nmap because of this. Are raw sockets still easily exploitable? I'm still learning the ways of securing my computer, so I'm looking to cover any vulnerable layers.

 

when it blocks something, u can have LinkScanner show an alert. there it tells you why it was blocked.

i think theyre just different. LinkScanner focusing more on exploits and SiteAdvisor focusing on spam, links, and downloads.

 

Oh you mean that way, yes I know, but I like the format how SiteAdvisor works making the links Green, Yellow, and Red and if I turn that off in LinkScanner Pro, then I can't know before hand, what the site was rated. WSFuser, I am very familiar with LinkScanner Pro, I was a beta tester for the first SocketShield thats why I have free keys . Don't get me wrong, I love Link Scanner, and its way of working. I just don't like things slowing down my system, thats why Prevx1 is gone in mine, its checking online for processes made a noticeable lag.

Problems might be something to do with Geswall and Linkscanner Pro, will do some more testing.

dja2k

 

UPDATE From Post 1151

Changed
Added
Removed

WINDOWS XP ACTIVE PARTIAL SETUP

ACTIVE
Online Armor FW (Beta 168 )
- Advanced Mode
- Mail & Web Shield Enabled
- Program Guard Enabled
- Firewall Enabled
- Custom Blacklists Enabled
Ksspersky Internet Security (6.0.2.621)
- File, Mail & Web Anti-Virus Enabled
- Proactive Defense Registry Protection Enabled
- Anti Spy Enabled
BOClean (4.22.002)
Geswall (2.6 Beta2)
- Isolate Know Applications
- All Browsers Automatically Isolated

WINDOWS VISTA ACTIVE PARTIAL SETUP

ACTIVE
Kaspersky Internet Security (6.0.2.621)
- File, Mail, Web Anti-Virus Enabled
- Proactive Defense Registry Protection Enabled
- Anti Spy Enabled
- Anti Hacker (Training Mode) Enabled
Geswall (2.6 Beta2)
- Isolate Know Applications
- All Browsers Automatically Isolated
User Account Control (UAC)
- Enabled

BROWSERS, HARDENING, ON DEMAND can be found HERE

 

Can't answer that directly on whether we need it or not on XP SP2 as I added it cause others had it as well, it doesn't interfere with anything.

dja2k

 

Active in memory:
-Kaspersky Internet security 6.0.2.675: KAH -> High (+ Enhanced packet rules)
-Proxomitron 4.5j with Sidki's rules

On demand:
-AVG Antispyware 7.5.0.50
-Ad-Aware SE Personal 1.06r1
-Spybot S&D 1.4: TeaTimer off - SDHelper On
-Asquared Free 2.5 Beta
-Process Explorer 10.21
-F-secure - BlackLight / McAfee - Rootkit Detective / Panda - Antirootkit
-Norton Security Scan 1.1.0.27 (why not )

Hardening:
-Windows xp (nLite 1.3 : Last hotfix merged)
-Personal registry security tweaks
-A lot of unused windows services disabled
-Immunity against 8739 malicious activeX (Spybot / X-Cleaner / Spyware Blaster / Spyware Doctor: If you want this merged database just pm me)
-StripMyRights for IE7 and Msn Messenger (+Privbar.dll)
-WWDC
-SocketLock
-WMPscriptfix

Cleaning:
-CCleaner 1.38.485
-Uniblue Registry Booster 1.4


Soon:
-Kaspersky Internet Security 7 Beta: It looks really promising, but it's not yet stable and fully usable...
-Comodo BOclean

 

My broadband security setup is:

The Maxthon Browser,
Solo Antivirus ver. 5.2,
My Own HOSTS File,
My Own HOSTS File Editor,
And nothing else!

No problems for 3 years!

Dave

 

UPDATE From Post 1159

Changed
Added
Removed

WINDOWS XP ACTIVE PARTIAL SETUP

ACTIVE
Online Armor FW (Beta 170 )
- Advanced Mode
- Mail & Web Shield Enabled
- Program Guard Enabled
- Firewall Enabled
- Custom Blacklists Enabled
Ksspersky Internet Security (6.0.2.621)
- File, Mail & Web Anti-Virus Enabled
- Proactive Defense Registry Protection Enabled
- Anti Spy Enabled
BOClean (4.22.002)
Geswall (2.6 Beta3)
- Isolate Know Applications
- All Browsers Automatically Isolated

WINDOWS VISTA ACTIVE PARTIAL SETUP

ACTIVE
Kaspersky Internet Security (6.0.2.621)
- File, Mail, Web Anti-Virus Enabled
- Proactive Defense Registry Protection Enabled
- Anti Spy Enabled
- Anti Hacker (Training Mode) Enabled
Geswall (2.6 Beta3)
- Isolate Know Applications
- All Browsers Automatically Isolated
User Account Control (UAC)
- Enabled

BROWSERS, HARDENING, ON DEMAND can be found HERE

 

Active:

Comodo Firewall Pro
Avira AntiVirus
Spyware Terminator (Realtime Spyware Protection/HIPS)
Arovax Shield​

On Demand:

CCleaner
Ad-Aware SE
Spybot S&D
Claim AntiVirus​

Waiting For:

Comodo Anti-Viruspyware (With HIPS)
Comodo Firewall Pro (With HIPS. Currently without. Auto obtains precedence against CAVS)
BoClean
Hardware Firewall​

 

The best setup?
Get an old PIII machine with decent ram and two nic cards, install squid or some other proxy server with privoxy, install your protection on that machine and have it serve as your gatekeeper.
Installing all this extra stuff on your work machine is counterproductive.
Why did you buy a computer?
To use it for some purpose, or to block hackers?
With all these malware checkers on your workstations, are you really getting work done?
My server does DNS, DHCP, downloads POP mail from Gmail etc. and stores in on an IMAP server, Proxy caching, etc. so that I can use my workstation for what it was made for:
To do work!
Not chase after malware.

That said, I think all you guys are great, as you take time out to help others who are unfamiliar with the "scene", and frankly I can't find any other site in the whole darn WORLD WIDE Web that does a better job than this one.

 

added
changed
removed


Server 2003 setup #1

Resident:

Ad Muncher
CHX-I Packet Filter
Comodo Firewall Pro
LinkScanner Pro
NOD32
Prevx1

On-Demand:

SUPERAntiSpyware Free

Other Security / System Hardening:

see here

*************************

Server 2003 setup #2


>>Snapshot 1:

Resident:

Ad Muncher
CHX-I Packet Filter
NOD32

On-Demand:

SUPERAntiSpyware Free

Other Security / System Hardening:

same as my Server 2003 setup #1


>>Snapshot 2 (frozen):

Resident:

CHX-I Packet Filter
HostsMan
Prevx1
RunSafe

On-Demand:

Kaspersky Online Virus Scanner

Other Security / System Hardening:

same as my Server 2003 setup #1 without Firefox and extensions

*************************

XP setup

 

See signature.

 

So WSFuser, I gotta ask, why did you uninstall Linkscanner Pro?

dja2k

 

Trial expired and I dont want buy it.

 

Active in memory:
-Kaspersky Internet security 6.0.2.675: KAH -> High (+ improved packet rules)
-Proxomitron 4.5j with mixed Kye-U and Sidki's rules

On demand:
-AVG Antispyware 7.5.0.50
-Asquared Free 2.5 Beta
-Process Explorer 10.21
-Rootkit Unhooker + Autoruns
-F-secure - BlackLight / McAfee - Rootkit Detective / AVG - Antirootkit
-Norton Security Scan 1.1.0.27 (why not? it's using the same signatures than nav2007).

Hardening:
-Windows xp (nLite 1.3 : Last hotfix merged)
-Personal registry security tweaks
-A lot of unused windows services disabled
-StripMyRights Enhanced for Opera and Amsn + Untrusted apps
-WWDC
-SocketLock

Cleaning:
-CCleaner 1.38.485
-Uniblue Registry Booster 1.4

Alternative programs:
-Internet Explorer 7 -> Opera 9.2
-Msn Messenger -> Amsn
-Windows Media Player -> GOM Player/Winamp
-Task Manager -> Process Explorer
-Adobe acrobat -> Foxit Reader
-Notepad -> Notepad++

Soon:
-Kaspersky Internet Security 7 Beta: It looks really promising, but it's not yet stable and fully usable...
-Comodo BOclean


-> Currently no sandbox or virtualization because I don't want to increase my memory usage (So restriction of privileges is better than nothing).

 

Jetico 1.0
Sandboxie 2.80
Power Shadow 2.8.2

Other:
Opera 9.20
Proxomitron Naoko 4.5 with Sidki ruleset
System Info for Windows 1.67
KeePass Password Safe 1.06
CCleaner 1.38
Regseeker 1.52

 

Also see signature More choices!

Sorry, simply couldn't resist that one.

 

Your sig was one of the reasons I started looking into Power Shadow.
Funny thing is 2.6 would not run on my system but had no problems with the newer version.

 

Hi mrisis

Glad it was of some help for you. It's the sole reason i list them, for others to see good choices and discuss/ask questions etc. and to find at least one of them beneficial to their computer's security and their own peace of mind & confidence.

 

added
changed
removed


Server 2003 setup #1

Resident:

Ad Muncher
CHX-I Packet Filter
Comodo BOClean
NOD32
Online Armor FW
Prevx1

On-Demand:

SUPERAntiSpyware Free

Other Security / System Hardening:

nLite'd Windows Server 2003 SP2 (with service tweaking based on a guide from Smallvoid.com)
Boooggy's Win2k3sp2 WUZero UpdatePack
Harden-it
Samurai HIPS
Seconfig XP
SocketLock
xp-antispy
Process Explorer
Firefox extensions: Cookie Button (in the status bar), and NoScript

*************************

Server 2003 setup #2


>>Snapshot 1:

Resident:

Ad Muncher
CHX-I Packet Filter
Comodo BOClean
NOD32
Online Armor FW

On-Demand:

SUPERAntiSpyware Free

Other Security / System Hardening:

same as my Server 2003 setup #1


>>Snapshot 2 (now unfrozen):

Resident:

CHX-I Packet Filter
HostsMan
Prevx1
RunSafe

On-Demand:

Kaspersky Online Virus Scanner

Other Security / System Hardening:

same as my Server 2003 setup #1 without Firefox and extensions