What is your security setup these days?

Good or bad? I'd say bad only because you've turned off a number of Avasts shields.

 

Laptop Setup:

• Thompson Router (SPI Firewall)
  • Windows 7 SP1 Ultimate 64 Bits:
    • Windows Firewall: Enabled
    • Windows Defender: Disabled
    • Administrator Account
    • Data Execution Prevention
    • User Account Control:
      • Max Level
    • Structured Exception Handling Overwrite Protection
    • Enhanced Mitigation Experience Toolkit 2.0.3:
      • All Internet Facing Softwares
      • All MS Office 2007 Suite
      • Maximum Settings
    • USB and DVD Drives Autorun: Disabled
    • Norton DNS (Block Malicious Websites)

Backup & Restore:

• Microsoft SyncToy 2.1:
  • Daily Synchronization
  • Data Saved in External HD

• Keriver 1-Click Restore Pro 2.2:
  • Original System Snapshot (W7 + Drivers)
  • Snapshots Weekly
  • Automatic Deletion of Old Snapshots
  • Snapshots Saved in Internal HD

[/LIST]

• On-Demand:
  • Hitman Pro 3.5.8.119:
    • Automatic Daily Scans
  • Keriver 1-Click Restore Pro

 

Hi these is my security setup. Could you please tell me if its a good configuration? I am quite a noob in this field.

Windows 7 Ultimate 64bit
Windows Firewall:On
Microsoft Security Essentials 2.0
Malwarebytes Pro (Active)
User Account Control (UAC): max settings
Enhanced Mitigation Experience Toolkit (EMET) 2.0.3:
Data Execution Prevention (Opt in);
Structured Exception Handling Overwrite Protection (Opt in);
Address Space Layout Randomization (Opt In);
Chrome 10: McAfee SiteAdvisor, webutation, Adblock plus, LastPass, KS SLL Enforcer, secbrowsing.
Norton DNS

Is EMET always on or do I have to open it everytime I switch on the computer?
Any comments on my settings? What could I improve?
Thanks!

 

EMET is "always on", so to speak.

that is a good setup.
you could also run as a Standard User, if you aren't already.

you also need an imaging plan.

 

Ok, I will change to standard user, could you please tell me more about the imaging plan or give me a link where to learn about it?
Can I create a new administrator account and change my actual account to a standard one??
Thanks.

 

It's difficult to switch to a LUA/SUA IMO since I have everything here in place and configured well. I might be making the switch once I have reinstalled Windows (clean install).

 

RealTime
DefenseWall 3.10
Avira Personal 10.0.0.635

On-Demand
Malwarebytes 1.50.1.1100

Light Virtualization
Shadow Defender 1.1.0.325

BackUp
Macrium Reflect Full Edition 4.2/3141

OpenDNS / Opera 11.01

 

since you are using Windows 7 i would recommend you use the imaging utility already included in Windows 7.
here's a primer to get you started:
-http://www.howtogeek.com/howto/4241/how-to-create-a-system-image-in-windows-7/-

i am not sure, why don't you give it a try?
anyway, if you create a standard user account i find it useful to run all your programs once after creating the account.

 

What happened to your favorite software Prevx, not using it anymore?

 

Thanks for your help.
1.I have managed to creat a new admin account and converting my account to a standard one
2.I will take a look at the link you have provided.


Is LastPass and key-scrambler safe?? would you let LastPass manage your bank details??

 

personally, i would not use a password that stores my info "in the clouds".

key scrambler is safe to use.

 

I also, why I prefer to use the Keepass Portable with the internet connection is blocked by Windows Firewall.

 

Added Panda Pro 1.40

 

The only safe password manager for your bank account is your brain.

 

I'd recommend you change EMET into Maximum Security Settings.
"Recommended" Security Settings isn't secure at all.

 

Ok, I have changed it. My settings right now are:

Windows 7 Ultimate 64bit
Windows Firewall: On
Microsoft Security Essentials 2.0
Malwarebytes Pro (Active)
User Account Control (UAC): max settings & standard account
Enhanced Mitigation Experience Toolkit (EMET) 2.0.0.3: Maximum Security Settings
Data Execution Prevention (Always On);
Structured Exception Handling Overwrite Protection (Opt Out);
Address Space Layout Randomization (Opt In);
Chrome 10: McAfee SiteAdvisor, webutation, Adblock plus, LastPass, KS SLL Enforcer, secbrowsing, Ghostery.
Norton DNS

Imaging planning: working on it

*Changes:
1.Windows 7: switched to standard account
2.EMET 2.0.0.3: switched to max settings
3.Chrome 10: added ghostery

Any other advice in my security setup? Thanks for your help.

 

To be more bullet proof : u can add srp

 

Had some issues while trying to install a few things.
Will use SRP only in the meantime.

 

You have a pretty good security setup. I'd like just to recommend a change, specially having under consideration bad practices from that company -http://www.wilderssecurity.com/showthread.php?t=290710

I'd never support such company.

I'd change from SiteAdvisor to WOT, which has partnerships with trustworthy sources, such as those mentioned here -http://www.mywot.com/wiki/Trusted_Sources

I tried to access Webutation domain, but I get a too many redirections error. But, I believe it makes use of Google Safebrowsing and WOT? If so, if you decide to add WOT, to replace SiteAdvisor, then there wouldn't be much point in using Webutation, considering Google Chrome always provides real-time protection against malicious domains using Google Safebrowsing.

Anyway, just a humble opinion.

 

RealTime
Sandboxie 3.52
Zemana 1.9.2.243

On-Demand
Malwarebytes 1.50.1.1100

Light Virtualization
Shadow Defender 1.1.0.325

BackUp
Macrium Reflect Full Edition 4.2/3141

OpenDNS / Opera 11.01

 

Actually, you should change DEP to Application Opt Out to ensure compatibility. For example, the Java installer wouldn't start if it's Always On.

 

back to Prevx, tired of half-baked software. This is one that still actually works and I can only hope the next version offers some innovativie approaches.

 

when is the version 4 coming out?

 

Only the shadow knows...

 

AppGuard silent strong and secure protection