SEHOP? DEP? UAC? LUA? SRP? Applocker?

Discussion in 'other anti-malware software' started by HJO, Jun 30, 2010.

Thread Status:
Not open for further replies.
  1. HJO

    HJO Guest

    Hi,
    I am using Windows 7 x32 Home Premium.

    I got few questions on how to secure my laptop.

    I enabled SEHOP by downloading 'Microsoft Fix it 50096'
    I enabled DEP by following the method that is on the internet.
    I enabled UAC at the highest security.

    Is there anything else that I should enable?
    (without downloading anything, just the windows7 built-in security)


    I heard there is LUA, SRP, Applocker and stuff.
    Is there more of these kinds?
    And can you tell me the method on doing these things?

    Thanks in advance.


    P.S sorry for my poor English, I hope you understand what I am talking about.
     
  2. ALookingInView

    ALookingInView Registered Member

    Joined:
    Sep 14, 2009
    Posts:
    365
    Running in an LUA (Limited User Account) is highly advised.
    I'm not sure if SRP (Software Restriction Policy) works on 7, wait for someone with more knowledge on the OS to reply.
    You can't use AppLocker because you're running Home Premium.
     
    Last edited: Jun 30, 2010
  3. funkydude

    funkydude Registered Member

    Joined:
    Apr 5, 2004
    Posts:
    6,851
    SRP is only in professional and higher.
     
  4. HJO

    HJO Guest

    Thanks guys.
    So I can't do anymore of these things?
    Only UAC, LUA, SEHOP, DEP?
     
  5. ALookingInView

    ALookingInView Registered Member

    Joined:
    Sep 14, 2009
    Posts:
    365
    Not without upgrading your Home Premium to Professional or Ultimate.
     
  6. HJO

    HJO Guest

    Alright, Thanks.
    I guess I should be satisfied with DEP, UAC, LUA, SEHOP.
     
  7. J_L

    J_L Registered Member

    Joined:
    Nov 6, 2009
    Posts:
    8,516
  8. ALookingInView

    ALookingInView Registered Member

    Joined:
    Sep 14, 2009
    Posts:
    365
    Anytime. :)
     
  9. Tarnak

    Tarnak Registered Member

    Joined:
    Feb 5, 2007
    Posts:
    3,873
    Perhaps Bebop? :D
     
  10. Pain of Salvation

    Pain of Salvation Registered Member

    Joined:
    Apr 21, 2005
    Posts:
    398
    If you are using Windows 7, you should not enable SEHOP using Microsoft Fix it 50096. You should enable it manually.

    "Note If you are running Windows 7 or Windows Server 2008 R2, go to the " Let me enable it myself" section because the automatic wizard for Windows 7 and for Windows Server 2008 R2 is not available yet."
     
  11. HJO

    HJO Guest

    Hi,
    I'm not sure.
    As I said I used "Microsoft Fix it 50096" to enable SEHOP automatically.
    After that I checked the registry and it was all there.
    Is there any way that I can check if SEHOP is really enabled?
     

    Attached Files:

    • 1.png
      1.png
      File size:
      86.1 KB
      Views:
      22
    Last edited by a moderator: Jul 1, 2010
  12. J_L

    J_L Registered Member

    Joined:
    Nov 6, 2009
    Posts:
    8,516
    Same thing happened for me.
     
  13. Pain of Salvation

    Pain of Salvation Registered Member

    Joined:
    Apr 21, 2005
    Posts:
    398
    I think it's ok then.
     
  14. ALookingInView

    ALookingInView Registered Member

    Joined:
    Sep 14, 2009
    Posts:
    365
    As posted in another recent thread (I forget which), the auto fix does in fact work on 7.
     
  15. HJO

    HJO Guest

    I can't find it. :doubt:
     
  16. wat0114

    wat0114 Guest

  17. Matthijs5nl

    Matthijs5nl Guest

    Microsoft is just slow sometimes with updating the thousands of knowledgebase pages.

    Why don't you download and install Microsot Security Essentials? It integrates perfect with Windows 7. It is also actually just some kind of superset for Windows Defender, Defender will be automatically disabled upon installing.

    Windows 7 + Windows Firewall + LUA + UAC + DEP + SEHOP + MSE = bulletproof

    (I personally use Admin account with UAC on full, since the the advantages of LUA over Admin with full UAC are really small in my eyes. Certainly too small to make up for the annoyances I encounter when using LUA.)
     
  18. HJO

    HJO Guest

  19. HJO

    HJO Guest

    I am using MSE.
    It's just that I'm confused with the "automatic update" feature in MSE.

    1. one update in 24 hours? (default)
    2. daily update using MSE update utility? (link given by JRViejo)
    3. editing "SignatureUpdateInterval" to check update hourly? (by Troy45)
    4. there are ways to make it update more often automatically using scheduled tasks(posted by J L)

    I may need your help too.

    I tried LUA. I'm not sure if I can adapt to it.
    I guess I'll use Admin account with UAC on full just like you.

    Thanks.
     
  20. Matthijs5nl

    Matthijs5nl Guest

    At my other PC where I also use Microsoft Security Essentials I changed the SignatureUpdateInterval registry value. You have to take ownership first because it is protected.

    Personally I changed it to 4 hours (avast! 5 Free for example also check every 4 hours, my ESET NOD32 however checks hourly and upon established internet connection, that is in my opinion an improvement MSE should also add: check upon login, or inet connection). I think that is enough because MSE doesn't release as frequent updates as some competitors (like Norton LiveUpdate), MSE releases 1 or 2 big updates per dag. So I thought 4 hours will do.
     
  21. HJO

    HJO Guest

    :thumb:
    Thanks for your reply.
    I really appreciate it.
     
  22. HJO

    HJO Guest

    Hi,
    Does the thing called ACL have to do with this thread?
    Thanks.
     
  23. Mamen

    Mamen Registered Member

    Joined:
    Jun 12, 2010
    Posts:
    17
    ASLR

    I haven't been able to find much on this for Windows.

    How do you enable it for everything? Can it cause any conflicts or slowdowns?
     
  24. MrBrian

    MrBrian Registered Member

    Joined:
    Feb 24, 2008
    Posts:
    6,032
    Location:
    USA
    It's up to a vendor to enable ASLR for a particular program.

    See DEP / ASLR Neglected in Popular Programs for more information.
     
  25. HJO

    HJO Guest

    So in conclusion...
    In Windows 7 Home Premium,
    I can only enable LUA, DEP, SEHOPo_O
    No more of these Windows built-in securitiy?
    Thanks in adavance.
     
Loading...
Thread Status:
Not open for further replies.