What is your security setup these days?

When my ESET NOD32 3 PC license comes up for renewal in September, I will most likely stick with ESET NOD32.

I just ordered the 3 PC ESET NOD32 Antivirus version 5 from NewEgg for $19.99.

 

Do you have 64-bit OS?

 

Yes, Windows 8 Pro 64-bit. What is it?

 

came back to Deep Freeze Standard 7.7,removed appguard for now sincerely ... jmonge

 

Yup. That's what I did. No EMET for me since version 2.1.

 

How stable and user friendly is latest version of Deep Freeze?

 

it is very stable now,it was horrible before but it feels light so far so good and i had it for the whole day today

 

How much work is it to save files to the real hard drive. I thought that I read somewhere that Shadow Defender was easier at doing this than Deep Freeze.

 

Kid,
If you add igloo to deep freeze it makes it a little easier.
http://www.faronics.com/products/data-igloo/
Shadow defender I feel is a little easier to use.

 

Finally fixed OA and its now running alongside EAM as always.

I went to the extremes and started setting up rules for some folders that shouldnt have these kind of restrictions . . . Hahahahaha (Windows)

 

Thank you.

 

exactly

 

I have EMET 4.0 on my 2 PC. Win7 x32 is OK with it even at max for every EMET setting, Win7 x64 never was completely OK with it. Maybe it's generic for all x64 OSes?

 

Jmonge, Does deep freeze still have an issue protecting the MBR? I know there was an old test with SD and deep freeze and returnil. SD was the only one that stopped the rootkit after reboot.

 

Got BSOD today. Not sure if it's because of EMET or AX64, or the combination of both. It was fine before I installed those two. Speaking of EMET...

Indeed, I also used the most secure mitigation setups except for pinning (it was disabled). I didn't get problems when I was on 32-bit as well IIRC. Hmmm...

 

I haven't had any problems here on Win7 x64 with EMET at max settings.

 

Windows 7 Ultmate 32 bits (E5200 dual core at 3 GHZ with SSD + 2xHDD + NAS), changes in blue

Firewall
1. Router for inbound and wireless protection & Windows FW with outbound filtering

Execution control
2. Deny execute file (ACL)/access (GPO) for everyone in drive by folders/USB devices
3. Deny execution for basic users of all executable file types in user folders (SRP)
4. Deny elevation/installation for unsigned executables/drivers for all users (UAC/GPO)

Intrusion mitigation
5. hardened system: GPO templates (eg lock user autostarts, Outlook & Chrome settings), disabled 60 services, added EMET

Browser protection
6. Chromium's sandbox with PPAPI-flash and allow javascript from [*.]NL & COM with AdBlockPlus and BD Traffic light extensions

Monthly scans (before NAS backup)
7. HitmanPro free Early Warning Scan & Norton Power Eraser C-drive reputation scan

 

Changed setup of mother's (nearly 80) PC, XP Pro with SRP deny for all except temp folder. Replaced Avast free by free F-secure basic from Dutch ISP. Decided to use Defense Wall in a different way: in stead of guarding programs decided to make temp a DW guarded folder. Disabled Windows Update also.

This pushed some extra performance out of her old Dell dual core laptop. Considering her internet behaviour (she allways reports when she noticed something strange or received some social engineering/phising mail), I think she will be fine. Kept DW, because she is used to change a file to trusted when she installs something.

 

you know WS, you could just use SecureAPlus and whitelisting alone and get the same results.

 

very true trojam
by the way i came back to Shadow Defender new version just realease like 2 days ago and also SD has MBR protection where deepfreeze doesnt protect the MBR

 

I want to use Shadow defender but it is incompatible with AX64

 

what is AX64?

 

trojam? I like that...let's declare him trojam!

 

No Jeff is Trjam, certainly no trojam. Besides a trojan is a wooden horse on four wheels. The Jeff I know likes a steel horse on two wheels, so not quite right

Regards Kees