What is your security setup these days?

BTW, I would say that it's also important to get him an ad & popup blocker. There's a lot of crap coming in through ads and popups these days. If you get a good one, it shouldn't pose too many problems. Firefox with adblock would be a good one. Also SiteAdvisor, since it won't let you on to sites known to be spreading malware.

 

Yeah Notok, I was already going to install firefox with all those needed extensions and tell him not to use IE. I agree with siteadvisor, I like that plugin too especially the highlight feature, green means "GO" and red means "STOP"

dja2k

 

noscript can also help protect against malicious sites but it will also make some sites not work or just make navigation an inconvenience.

 

Thanks WSFuser, but thats why I am not installing any of the noscript, quick java, nor flashblock extensions that I use.

dja2k

 

Its funny how the more you try to explain something to someone who doesn't even know anything turns out to be a headache waiting to happen. No matter how much I tell him that the antivirus will protect him somewhat for Spyware\Adware\Dialers\Trojans etc, he still insists on a active antispyware. I have only delt with spyware doctor as active and don't know even if it is good in its active detection. Of course I have used Ewido as active too, but I consider that more of an antitrojan. Any recommendations? I personally wouldn't run one active as they waste too much resources, but if he wants it and doesn't mind, then I can't argue. Hope he pays me well though

dja2k

 

just give him spy sweeper. its an antispyware straight and through, and shouldnt waste too much resources.

 

Cool totally forgot about spysweeper, that will help him protect IE as well. Thanks WSFuser!

dja2k

 

Thank you Notok, I definitely only do normal stuff and intend to keep this way. I guess it is just the unknown aspects of LnS after reading about no Internet connection etc which made me really worry and hope for the application only as a easy way

I have seen Phant0m's v6 ruleset and understand v7 onwards are available to pay for. I have no objections paying for a ruleset but he only has Paypal atm & I don't use PP at all. If I install LnS I will either use their enhanced ruleset or hope I can work out v6 of Phant0m's if so then I will try and work out a way with someone who does have PP for his v7 which I think are automatic rather than me having to work out how to get my router & LnS to speak

I just need to keep reading about LnS and discover it may provide the lighter firewall for me over Outpost Pro although this appeals as I know I can use it I have added more notes to read and learn now thankfully my new computer is still not ready

 

LnS really isn't very hard to use, plus there's plenty of help here and by emailing support If something is really too complex, someone can just create the rule and export it for you.

Phant0m's ruleset is mostly made for people using P2P, although it can add some additional security anyway. If you decide you really want it, you don't actually have to be a PayPal member to make a payment, it's just easier if you already are a member because you can just log in rather than type out your cc number. At any rate, you should be just fine with the enhanced ruleset, the only thing I could recommend is to download and import the FTP rule because some websites keep their downloads on FTP servers. Like I say, anything else that gets blocked is easily resolved by just right clicking in the log and clicking "Create rule". If there is a lot of stuff in the log and you aren't sure what's what, just clear the log and try making the connection again.

 

"My Current Security List Update" -Experimental

Kaskersky Internet Security 6.0.0.299
-File, Web, Mail Antivirus Modules
-Anti Hacker Firewall Moudle
-Proactive Module (Registry Only - defualt settings on)
-Antispy Module

Online Armor 1.1.0.650
-All Enabled

RegRun Gold 4.50
-Security Level Ultra High
-All Extra Options Enabled

ProcessGuard 3.200
-All Enabled (critical .exe's set to run once)

I am trying this new setup because Ghost Security Suite (AppDefend) was crashing on me and shutting off when I would block something in RegDefend's popup warning. I rather have bad processes blocked by defualt with ProcessGuard, then to wait for me to allow or block the warning. This is not permenant, but temporary for now. I think I am well covered compared to my last posted security list. For some reason my computer is running faster and smother like this too. I am a little concerned of the protection of the antihacker firewall because I was used to Looknstop blocking rules in the beginning and end where the p2p port rules where in the middle.

dja2k

 

update:

added
removed

Resident:

nod32
looknstop
regrun gold
proxomitron
Online Armor
SnoopFree Privacy Shield
HostsMan (with MVPS Hosts, Mike's Hosts, and Block Adverts)

On-Demand:

ewido anti-malware
superantispyware

Other Security / System Hardening:

nLite'd Windows XP (with service tweaking based on TweakHound's guide)
RyanVM's Windows XP Post-SP2 Update Pack
BugOff
Harden-it
Samurai HIPS
Windows Worms Doors Cleaner
process explorer
firefox extensions: javascript options, noscript, permit cookies, and spoofstick

 

Great additon to your setup WSFuser. Welcome to the OA team

dja2k

 

Notok, thank you yet again for this extra re-assurance on LnS plus the advice re: enhanced rules.
I really appreciate this and it does help my confidence with the unknown aspects of a new firewall. Unlike most I do have to ask before I install as I am need to feel confident that the change will be good for my computer.

I understand about the ftp sites as I think this is something my own firewall has blocked me from in the past when needing an update for something. I will look forward to following more posts in ths thread plus the actual LnS forum - good to know the enhanced rules themselves are a good starting point for me especially when I don't use p2p I could then progress if necessary to the rules provided by Phant0m.

 

thanx dja2k. tho i wish Mike would release a fix for the incompatiblity of OA and Hostsman

 

Don't worry WSFuser, if you ask you may receive.

dja2k

 

The same can be said for CoreForce from my recent experiences with it. Seems they cram way too much into it to be of any real use unless you are of those who prefer sloooooooooow or don't mind the occasional but more frequent than not crash bug.

Don't get me wrong, just like the poster above, the concept is superb but it's been awhile now and it still places a heavy demand even on a system with plenty of RAM, imo.

 

I 've been reading this thread for some days and as a security novice I have some questions:

1) What exactly is "Block Adverts" It seems to be a hosts file but I cannot find it anywhere.

Btw, is there a list of the various sites that have their own ad blocking-anti spyware hosts files? I have found some but I think it would be nice to have them all in order to merge what is available online and create a jumbo file!

2)Where can I find "SPYWARE BLOCK LIST FILE" ? spywareguide.com does not have it...

3)Regarding the Custom Blocking List for SpywareBlaster that can be found here: http://koti.mbnet.fi/pattaya1/swb3.htm

How can I use it? Do I have to insert every entry manually?

Thank a lot!

Alef

 

These are the ones that I have found:

http://pgl.yoyo.org/adservers/

http://pgl.yoyo.org/adservers/links.php#2

http://www.mvps.org/winhelp2002/hosts.htm

http://everythingisnt.com/hosts.html

http://www.bluetack.co.uk/modules.php?name=Downloads&d_op=viewdownload&cid=7

http://hostsfile.mine.nu/

http://www.hosts-file.net/

http://datadragon.com/banners/hosts.shtml

http://www.everythingisnt.com/hosts.html

 

http://remember.mine.nu/Default.htm

when u use Hostsman, it gives u the options of using the hpHosts, MVPS Hosts, Mike's Hosts, and/or Block Adverts. you can update ur HOSTS without having to visit any website or copy any files.

 

Symantec Corporate AV 8.0
Spyware Doctor
CounterSpy
Spysweeper
Zone Alarm Pro
Trend Micro A/S
Pest Patrol

 

Hey toasale, welcome! I hope you are not running all the software active. It isn't really needed.

dja2k

 

Hi.

My longtime, much used setup:


Zone alarm free,
A-vast free,

Spywareblaster,
Ad-Aware,
CCleaner,
XP-Antispy.


Also the system is fully patched and as much as possible leaks are taken care of. Really, except from the ''occasional'' pornsites that seem to want to install crap, im pretty confident its a safe place here. Any thoughts on this?

 

Well, don't forget Core Force is still a beta. I'm quite sure most problems (at least when it comes to stability) will be fixed by the first non-beta release; in fact, each version coming out is easily more stable than the previous. Core Security is a very respected company (and well known, if not for home users, for businesses: their most well known product, Core Impact, is a penetration testing suite that goes for a $25,000 for a single license...).

 

Presently, i personally am using Sunbelt kerio firewall (paid), Nod32, and trialing a new HIPS software called ProSecurity (i have a post in this section of the forum about it) and i love kerio . . only bad thing is kerio GUI lags if you are doing a lot of net 'work . .

 

I'm quite aware of those facts TNT and is the reason for some of my frustration early on with the beta releases.

There is no doubt in my mind if they can bring everything together they have featured in it to a point of complete stability that it should become one very effective security suite as it covers the entire gmabit from firewall to applications and process monitoring.