What is your security setup these days?

Welcome buddy.

Yeah fireworks are fun, now aren't they? Especially when HIPS don't lie.

 

Bufferzone Pro is a great product that I'd recommend to anyone. Works well even on a 64 operating system. At present though, I decided to shelve it to see if sandboxie would play nice with comodo's sandbox. Admittedly SBIE has been a favorite of mine for a while, and I've finally decided to buy a life license. I don't think you could wrong using either one, but SBIE just works nicely.

 

Did you remove MD because you didn't feel a need for a HIPS given the other Win7 built-in security? Because I was thinking about how I'd make the transition from XP to 7 regarding Comodo. I'd use the built-in 7 FW for outbound. I certainly aint installing an entire suite for just 1 component (HIPS), so I was looking at something like MD. But then I thought to myself... would I really need one at all? With a good SRP, a standard account, UAC, EMET, and the fact that I trust everything I put on my box... would I really "need" one? Probably not.

My Win7 setup would look a lot like yours, only either substitute MSE for Nod32, or no real-time AV at all. I think the need for 3'rd party security software on that OS is, well... not a "need" at all. Sandboxie would probably be the only thing. I'd even try to justify using IE to myself, but don't know if I could.

 

I'm still testing different apps right now, but after what I've seen with AppGuard....I might actually go AV-LESS for the first time. Yeah, I miss my Sandboxie, I feel naked without it. HMP might be added sometime in the future, but for right now...I don't see a need for it.

 

Also see: -http://rationallyparanoid.com/articles/microsoft-emet-3.html

 

Windows 7 Home Premium SP1 32-bit

Firewall:
NAT Router (Password Protected)
Look’n’Stop Firewall 2.07 (Phant0m’s Ruleset)

Anti-Virus:
Emsisoft Anti-Malware 6.6.0.4 Beta

HIPS/Blocking/Hardening:
DefenseWall HIPS/Personal Firewall 3.18
VoodooShield 1.04
EMET 3.0 (Internet facing applications & MS Office)
SpywareBlaster 4.6 (Ad-Aware custom blocking list)

Resident On Demand Scanners:
Malwarebytes Anti Malware Pro 1.62.0.1300
HitmanPro 3.6.1 Build 164
Mischel TrojanHunter 5.5 (1002)
SUPERAntispyware 5.5.1012
Comodo Cleaning Essentials 2.5.242177.201
WinPatrol Plus 25.0.2012.5

 

Hi! Yes, I really don't need HIPS to secure my system and it never saved me so far. I mainly use it because I occasionally let my brother and sister to use my computer. I can create safe environment for them and prevent any undesirable changes to my system with help of MD. For now I will settle down without it and rely on other security measures.

With Windows 7 you can build your security with almost no 3rd party software. UAC, SRP, LUA, EMET and Applocker are some of built-in options that you can use. You can check setup from Kees1958 for additional options.

Instead of IE you can also use Chrome.

 

So am I correct in hearing Sandboxie doesn't work right with Win7 64-bit? Or is it just some isolated incidents? I hope this is remedied by the time I upgrade, because I'd prefer to use the 64-bit version. And it's hard to imagine life without Sandboxie. They've got until mid 2015 to work on it...

 

Using Sandboxie and some other stuff, on W7 64-bit.
The 'other stuff' just got shuffled a bit as I dropped Online Armor and added Comodo Firewall.
Liking everything about my new firewall so far.

 

Okay, so Sandboxie works just fine on Win7 64-bit then? Comforting to know. Must just be some isolated incidents after all then. I never seem to have the problems some people do with things.

And do I understand correctly that Chrome is built into Win7, along with IE? If so, I'd probably become a Chrome user.

 

Built into W7?
IE is default, and one has to download Chrome and choose it as default if that is the way one wants to go.

 

Chrome is not built into Win 7.

 

webroot says Trend Micro Titanium.™
is virus so i temp disable it

 

3 days before switching, not bad

 

I think he's referring to (on purpose or not) to the sandbox, which is built into Windows.

 

Trend Micro Titanium is giving me alot of problems

 

Actually, I wasn't, but that explains what someone else was talking about earlier when they made it sound as if Chrome was built into Win7.

So this Chrome sandbox I hear about is actually built into the OS, not Chrome itself? I'm confused...

Anyhow, it would certainly give me incentive to use Chrome when I upgrade my OS... to take advantage of such functionality. Kees has provided some great info. on how to harden it. If ScriptNo could get "near" the level of effectiveness of NoScript, it'd probably be the deal-maker for me.

 

I saw that product on a friends laptop the other night, and it was crazy unresponsive. I uninstalled it, turned on the Win7 FW, and gave him Avira Personal AV... it found 3 viruses Trend whiffed on. I cleaned them, then threw CCleaner on there and ran a scan with that as well... it got rid of like 3 gigs of crap, lol! Turned the thing off and took the battery out for 2 min. to clear the memory.

When it came back on it was like a new laptop. He was amazed by it, lol. To have the mouse pointer actually go where you aim, immediately... or have a window pop open right after you click on something, not 10 seconds later. The simple things I take for granted, to him was a miracle.

 

Good going. Did you max out the settings of AG?

 

Maybe because you had put the heuristics of WSA to maximum?

 

Trend Micro is

 

One of the best computer stories I've heard in quite sometime! He should be bowing down to you now when you walk into the room.

 

Just added HTTPS Everywhere.

 

Yeah Page... one of those people that just don't belong anywhere near a computer. Only uses it for Facebook & porn. Just a toy to them.

He kept thanking me, over & over. And just saying... "wow", seriously amazed.

To be fair to Trend Micro, it may have been seriously outdated, functionality disabled, etc... I didn't really check. And I didn't have time to get 2'nd/3'rd opinions. I'll bet there was more stuff on there MBAM, SAS, etc... would have found. At least low level spyware.

It took CCleaner like an hour to run a scan! With 1 pass! I've never seen anything like it. And of course the entire time he was like: "geez", like the product was at fault for being slow, and/or inconveniencing him because he couldn't look at more porn while it was scanning. Don't you just love that? Ever get "those types"?

It sure makes me appreciate my 1 GB RAM, single core CPU, XP system when I get back to it...

 

Switched back to DWPF + MBAM Pro in RT and HMP as on demand scanner.