What is your security setup these days?

Wilders wouldn't be Wilders without the software junkies needing their fix

 

I am on safe-admin for over a year now, recently added PoweBroker free and GeSWall Pro (added only 0.01% CPU load), think this will last as long I am on Windows7 32 ultimate

 

Sounds like you are moving to Windows7 64-bit soon? New computer?

 

I just ordered new parts, will be switching to x64 within 2 months to utilize 16gb of ram for various reasons. Will be interesting to see what sort of security implementation I bake this time

Sul.

 

Should be interesting, you probably give me a few new ideas

 

building up my new setup... (not done yet)

hint: LUA/UAC/SRP/SuRun/EMET/Sandboxie FREE/GesWall/MbAM Free

 

No x32 Win7 Ultimate desktop (simple E5200 dual core @ 3Ghz with 2GB RAM and 1 TB Disk/5570 GPU) is blazing fast with Safe-Admin/PowerBroker/GeSWall setup.

Laptop (dual core celeron @ 2Ghz with 4 GB RAM, intel HD graphics and 250 GB Hybride harddisk) I use for work when going to clients had Winx64 home, but I changed it for a Win7 x32 Ultimate (was € 100 rebate deal for business users). This laptop runs same setup (only GeSWall free in stead of Pro, just copied the GeSWall dat file ). Don't mind using only 2.95 GB of RAM when x32 is so much faster on cheap celeron P4600 CPU (has less secondary cache, so less memory usage of 32 bits clearly has an advantage on cheaper CPU's).

Staying on these PC's for at least two years

 

Ahh gotcha Kees.

 

If that means you are ditching Returnil, then good idea Your current setup in your sig is already, for all intents and purposes, nearly invincible even without Returnil, the latter of which which must have forced some challenging setup scenarios for you, just getting it to co-exist in harmony with your other security apps, especially Sandboxie by the looks of things.


Consider that with:

You have system hardening with anti-executable (SRP)

More system hardening.

Sandboxing to isolate potentially malicious web-borne activity from the real system.

Blocking of potentially malicious web-borne activity.

Minimizing the risks of surfing/re-directs to malicious web sites.

Second opinion on unknown files.

Maybe the most important of all, a fail safe if something does somehow breech (not likely) your defences

One can see you've not only covered all bases, but there's even some overlap as well. If you include LUA as your recent post suggests, that's even better. You could easily ditch Returnil and have nothing to worry about. Just my annoying 2¢

BTW, you do have a most excellent award winning setup,

 

Avast free
Comodo firewall

and common sence

 

Toss out common sense - it's overkill.

 

alright no common sence

 

That's the way it should always be!

Let your security software worry about security =p you can relax

 

Actually I worry more about hardware failure than security

 

yep ditching returnil for now because of a bug in its antiexecutable.

lol Thanks. I'm trying LUA and SuRun again because of your setup. This is my first time using SuRun in Win7... I always had it on my XP before.

btw, can you install in Sandboxie under LUA with SuRun (not UAC) to elevate the installation? I can't

+1
and those mysterious windows software errors and BSODs

 

Yea those as well, although I haven't had a BSOD since Windows 7 launch *knock on wood*

 

dont you find BSOD's informative and sometimes entertaining as well my friend?

 

I don't know, and it's something I wouldn't try, although I'm curious enough to probably try it If I want to test software, I usually use the vm.

 

Of course I do. I just love trying to fix those and find out why they happen

 

Testing my new setup for Comodo. It isn't as secure but it's not as invasive either.

 

Why would you make you setup less secure?

 

By disabling autosandboxing I'm making my life a lot easier. That was the main change here.

 

Oh. I thought you already did that a while ago.

 

I did. Never got around to testing.

ohhhh boy did my VM get ruined LOL

 

Well... basically, it only outright blocked one and then the rest it sorta just warned me about them. But warnings aren't really good enough.

Manually sandboxing would probably work though.