What is your security setup these days?

Ready for war my friend

 

Similar but we probably have different HIPS settings

 

No doubt, as there are probably many thousands of different possibilities for its configuration. I created a Scheduled task to launch powershell, with arguments for it to launch a batch file posted in a different, unrelated thread by cruelsister, to restart my device. My two-pronged defences kicked in as expected.

1. The HIPS alerted first: (Application - Action - Target) C:\Windows\System32\svchost.exe Create Process C:\ProgramData\Comodo\Cis\tempscrpt\C_powershell.exe_6A3089FAD077E817BDA4C43BE9032E41160827B3.ps1
2. I allowed it
   
3. Auto-Containent blocked it: (Application - Action - Parent process Path) C:\Users\username\Desktop\reboot-test.bat completed Blocked Unrecognized Containment Policy C:\Windows\explorer.exe

I allowed the HIPS alert just to illustrate that if I were to screw up by allowing something malicious, the Auto-Containment rules would block it, otherwise I could have blocked it with the first HIPS alert.

I read up on a recent malware analysis that uses Task Scheduler to run Powershell for nefarious purposes.

 

How many pcs does subscription include and how much does it cost?

 

How much is appguard?

 

hey, j. it's $89.95 per year.

 

It is 50% now but for how many pcs?

 

I paid 10 bucks for OSArmor Personal 1pc I love it man

 

per pc.

 

osa's ok. and you can't beat the price.

 

Yeap

 

Sounds good. Looks like you are prepared there buddy

 

What are you running now?

 

Who me? or wat?

 

Both of you

 

I'm running Comodo Firewall & Windows Defender

 

Super nice comodo sandbox and its hips

 

Is anybody using keyscrambler?

 

What do you guys think of ZoneAlarm
I am thinking of buying a license

 

Replaced Kaspersky Internet Security with Emsisoft Ant-Malware. So my new setup is:

OS: Windows 10 20H2

Backup: Macrium Reflect
Updates: SUMo, Windows updates, HP Support Assistant
AM: Emsisoft Anti-Malware
Content Blocker: uBlock Origin with Firefox

Few other on demand tools.

 

@Minimalist any special reason why you drop Kaspersky? You used it for quite a long time.

 

No, but from what I've read about it, it seems to protect your key strokes from a key logger that's already installed on the device. Wouldn't it be better to protect against the installation of key loggers in the first place?

 

Yeap actually both choices are good

 

Didn't said how many

 

No special reason, I frequently change AV but don't post all changes. I use Kaspersky or Emsisoft or Eset. This time I decided to post about changing it