What is your security setup these days?

Where can i download MBR Guard and AntiARP?

 

MBRGuard: http://www.blueridgenetworks.com/support/mbguard/mbguard.php

 

trying out this new setup on main pc ... norton 360 suprised me ... it is very light on resources

 

Thnx. Do you know AntiARP?

 

Due to Arran trying to convince me to use SBIE for my wife's PC, I decided to play again with BufferZone (I had a free unused lisence for it).

Play PC XP Pro

* Windows FW
* ADMIN + SRP deny of Data Partition, SRP basic user on Temp partition + SRP basic user all internet facing software
* Comodo Time Machine only protecting/backing up C partition

* IE8 with pop-up, cross site scripting protection, click jacking limitation scripts, smartscreen filter plus
- AVG Linkscanner free
- Keyscrambler free
- Trusteer Rapport Free (protection IE process and alarming on screen prints)

* Chromium, the lates running in BufferZone, with sandbox stored also on Temp partition to reduce CTM overhead. Only Chrome to go outbound with BZ internal FW. So I do use application virtualisation on top of Chrome's policy Sandbox.

* All new executables and scripts written to the hard disk are automatically sandboxed by BufferZone (a neat feature, ). see for picture https://www.wilderssecurity.com/showthread.php?t=271851

May be something new from latest Chromium build.
While I have policy enforced on all files and all users except Admin, and I am running as non-admin, Chromium now works. In the past I needed to enforce policy management on all executables except dll's.

On demand Hitman Pro and Panda and One Care scans from IE8

Regards Kees

 

Here. Not free though. But try it.

 

OS: Windows XP Professional SP3 Limited User Account (NO REALTIME ANTIVIRUS SETUP)
(LUA/DEP/ACL)

• SuRuN (LUA Management)
• Windows Firewall with cfosspeed Firewall.
• Peerblock 1.0+ (r320) Beta Release (Blocking: 1245186781 IPs)
• Sandboxie
• PrevX CSI Free + SafeOnline (Alerts me if there's a lingering malware on my system)
• Mamutu (Behaviour Based Malware Blocking)
• Windows Defender (Application Execution Agent Disabled)
• MBRGuard (Prevent changes to the Master Boot Record)
• Deepfreeze (System Virtualization)
• Macrium Reflect Free (Drive Image Backup)

Browser: Google Chrome / IE8
P2P: Utorrent with Paranoid IP Filter (pipfilter) from Bluetack
On-demand AV: Whatever I want

Changelogs:
May 05,2010 Added Cfosspeed. Removed Online-Armor Free. Windows Defender got restored.


All download locations are forced to run sandboxed.
Browsers sandboxed / Lowered Rights / ACL
Internet facing apps sandboxed.
Even my WINAMP run sandboxed lol.

Did I forget anything?

Windows Defender looks really redundant XD

 

Well, that cFosSpeed is a traffic shaping solution AFAICT, not a firewall.

 

Updated my sig. - hopefully it will hold my testing for "a while", you simply never know, but things look promising. Inspired by Kees and previous posters in this topic.


I should also note that I create my sig. with what I consider most important at top, least important at bottom in mind. Can also be a matter of first and last defense.

 

It has a firewall that complements with Windows Firewall. yes! check it out~
but it filters inbound traffic only AFAIK.
It has strict RTP checking or something like that.

 

Work in Progress...

 

OS: Windows XP Professional SP3 Administrator Account
(DEP/ACL)

• Windows XP Firewall with cfosspeed Firewall.
• Peerblock 1.0+ (r320) Beta Release (Blocking: 1245186781 IPs)
• Geswall (Intrusion Prevention System)
• Mamutu (Behaviour Based Malware Blocking)
• MBRGuard (Prevent changes to the Master Boot Record)
• Deepfreeze (System Virtualization)
• Macrium Reflect Free (Drive Image Backup)

Browser: Google Chrome / IE8
P2P: Utorrent with Paranoid IP Filter (pipfilter) from Bluetack
On-demand AV: Whatever I want

Changelogs:
May 05,2010 Start from scratch.

 

added blue point security

 

Realtime
DefenseWall Personal Firewall v3
Prevx 3.0.5.130 (installed w/o safe online)
Shadow Defender 1.1.0.325

On-Demand
Sandboxie 3.44
Malwarebytes Anti-Malware 1.46

Back-up
Macrium Reflect

OpenDNS
Opera 10.53

 

Installed the new MD 2.7.1

 

LOL! I like how you got Google Chrome written in your sig.

 

I think it's pretty cool that I've 5 things filtering bad websites, yet I don't feel any slowdown at all, system and the other software included.

Malware which slips through the filtering is taken care of by MBAM and Hitman Pro. MBAM has caught everything I tested against it with its real-time protection - I'm impressed.

If, against what I expect, something actually slips through completely and can't be removed, I've CTM creating restore points every single day.

Now all I need is some free tool for keyloggers which works with Opera. Prevx comes to mind, and since detection is always on, which means I might get a slowdown from time to time, I will probably go with my giveaway license if I start using it again. Still it'd be better if I could find some other free tool to handle this, referring to the occasional slowdown with things...


EDIT: Oh right... now I remember why I actually stopped using Prevx. It made my game Dragonica, publisher GPotato (Europe) unable to start, even if it was not detecting any of its files as malicious. This is at least what I experienced before, don't know if the same would happen again on this installation, but I don't wanna risk it since I play it all the time.

 

My Current Setup:-

1. Digital Protection AV (Rogue AV With TDSS)
2. Digital Defender AV (Real Time, But Doing Nothing)
3. Administrator Account
4. IE 6
5. Win XP Under VirtualBOX

 

WTF dude!

 

I'd add PlaceboAV to the above almost rock-solid setup. A second opinion is always useful, and this one's very light.

 

Actually Digital Protection AV (Rogue) have solid Rootkit technology, it really protect me. By default they have disabled my Task Manager and Regedit.exe so that novice user can't able to temper my registry settings.

This is really nice feature of Digital Protection. Right now i am feeling so light.

I am going to remove Digital Defender (VB100 Awarded) because its doing nothing just eating my resources. Digital Protection is far more superior and light. Its setup is really small. Even smaller then Prevx. Light on resources but bit heavy on Windows OS

Looking for your suggestions !! Please do suggest me anything else.

 

Digital Protection AV (Rogue) will work on Windows 95. It can run on even 64 MB RAM.

 

PC Protect (rogue). The best things about it is it helps to protect you by blocking malicious websites (e.g. malwarebytes.org) and blocking malicious .exes (e.g. HitmanPro35.exe).

Works really well; as intended.

 

Maybe THIS??, But I suggest you to switch to linux instead of using the old win 95.

 

Does it contains any HIPS or BB?

Right now i am with :-

1. Digital Protection (Rogue With TDSS Rootkit)
2. Anti-Virus 2010 (World's BEST AV, Suitable for Windows XP)
3. IE6 and Administrator Account.
4. DEP Disabled (So that Buffer Overflow Can Run Smoothly)
5. VirtualBOX (Free)

This is the real rock solid setup...I am trying to find that AV which can really protect me from the most dreaded malware "EICAR TEST FILE"