What is your security setup these days?

I'm thinking of ditching a realtime AV. It doesn't slow my PC down but it just seems pointless. I haven't stumbled upon malware in a long time, and I trust AppGuard a lot. With its cheap multi-user license I have recommended it to neighbors and family. I hope 64-bit DefenseWall comes soon or everyone will have AppGuard instead.

 

I added KeyScrambler Pro.

 

Great

 

Yes Yes

 

That's greatly exaggerated.

 

Windows 7 Prof. x64 SP1:
UAC at max level (while using a standard account)
EMET at max protection (all internet facing apps added, pdf reader, openoffice,...)
Applocker
OpenDNS with DNSCrypt
TrueCrypt

Real-Time protection:
Comodo Internet Security (AV,FW,D+,Sandbox)
Malwarebyte's Anti-Malware Pro (Web & Realtime protection)

On demand:
Hitman Pro
AVZ
Dr.Web CureIT
Comodo Cleaning Essentials

Waterfox x64:
Adblock Plus (Easylist + EasyGerman, EasyPrivacy, Fanboy's List + P2P + Tracking/Stats Blocking + International Tracking/Stats Blocking, Facebook, Malware Domains)
HTTPS-Everywhere
HTTPS-Finder
KeeFox
NoScript
Redirect Cleaner
StartupMaster
DNT+
Foxyproxy (using a SSH-Tunnel to my dedicated server.. except a few sites which I manually added to Foxproxy)

Outlook 2010:
Always connects to the internet via a SSH-Tunnel to my dedicated server
Passwords saved & encrypted with a Master-Password

KeeFox:
Syncing all my passwords on all devices via my dedicated server
Fully replaces the password manager of:
- Firefox (With KeeFox as Firefox addon)
- FTP-Client (FileZilla & WinSCP)
- Putty
- soon MSN/Skype/mIRC/ICQ/...

SSH-Tunnel:
I generally use the SSH-Tunnel to my dedicated server on most app's that send/receive important or personal information to prevent sniffing. Thought about using OpenVPN but I only wanted to encrypt my network traffic for certain applications instead of everything.

Router:
Fritzbox -> Untangle (Virus Blocker = ClamAV, Spyware Blocker, Phish Blocker, Firewall, Intrusion Prevention, Ad Blocker, Attack Blocker) -> PC

The Fritzbox is a normal first router. It also builds a little network which is meant for visitors/guests/friends. After that I built an Untangle-router with my old home-server (Dual Core 2 Duo 2,66Ghz, 2GB RAM). This is my main router which does all the DHCP,QoS,filtering,blocking,security... stuff.



I really recommend KeePass to everyone. You can sync it on every device via the web (dropbox,ftp,sftp,ssh,what-ever) and fully replace any password manager. To log into my ftp-server via Filezilla I just run KeePass, select the login entry in KeePass and click "open". Filezilla will start and log in with the credentials given from KeePass. Works with nearly every program.
I still wonder if it's safe to run Thunderbird the whole day with my passwords saved in the password manager (but encrypted by using the master password).

Don't know of anything else that I could add. Maybe I could add another AV to scan all downloaded files (done by my router) but I think 3 AV's are already enough (ClamAV = Router, CIS & MBAM = System). Especially when there is OpenDNS, Phish Blocker (Router) and Spyware Blocker (Router) blocking everything before I can even load/browse it. And if malware still manages to bypass those 6 layers of protection I still have a HIPS,FW and auto-sandbox. In case all those 9 layers of protection don't help I would still have all my sensible data encrypted with TrueCrypt as well as my passwords are saved within KeePass with a strong encryption, keyfile and master password.

 

Trying WSA & Kingsoft at the moment. They seem to working great together. If one of them misses something, the other will catch it.

 

Back to Appguard, giving Shadow Defender a rest

 

@DX2 ...

I like your avatar.

 

Me to

 

Thanks, Waterfox icon.

 

Added MCShield 2 to my arsenal of protection.

 

What's it supposed to do?

 

MCShield is a Antimalware USB Protection software

It automatically scans drives when plugged in, as well as scanning root and special folders on hard drives.

It has cloud and signature based scanning and is compatible with Antivirus or Internet Security Suites that don't offer USB Protection.

I've heard a lot of great thing's about this software and almost everyone says it's a must in one's security setup, so I figured I would give it a try.

For more info, check it out here=> http://amf.mycity.rs/mcshield/downloads.html

Here is the Wilders thread=>https://www.wilderssecurity.com/showthread.php?t=318166

 

I thought Comodo provides all round protection.

 

I don't think Comodo offers specific USB Protection. Anyone may correct me if I'm wrong.

 

no it doesnt. but if the malware try to run it will stop it. so really it is all round protection.

 

But there is the possibly, a small chance that anything can pass through.

 

not really, all unknown software will be sandboxed.

 

Comodo has been bypassed in the past, of course patched by now. But, who's to say it can't happen sometime in the future. I love Comodo and I trust the security it provides me, but sometimes it's nice to have a backup solution for those just in case situations.

So, I am looking into the most common areas that malware may enter a system, and then putting that backup solution into place. Having that little extra assurance doesn't hurt.

 

Good Evening ! WSA Essentials...ESET 5 Smart Security...Zemana Anti-Logger. Sincerely...Securon

 

Added Appguard + Sandboxie to my arsenal.

Feeling pretty secure at the moment lol.

 

Two great programs

 

What does MCShield 2 do by the way?

 

See post 25278 I asked already and there's where you'll find the answer.