Umbra Corp. Win8 Config

[Umbra Polaris]

PC Environment: Private
Security Awareness: Advanced
Exposure to Malware: High
Anti-Malware Testing: Yes, including the use of a VM or junk PC
Operating System: Windows 8 Pro (tweaked)
Architecture: 64-bit
Real-time Protection: See Below
On-Demand Tools: See Below
Web Browser: --->
Normal usage: Waterfox in Sandboxie
Banking usage: Chrome in Sandboxie
Extensions and Plugins: --->
Waterfox: Lastpass, VTzilla, Adblock+, Flagfox, Webutation
Chrome: Lastpass, Https Everywhere, Webutation
----------------------------------------------------------------------
Main Real-Time Protection
Local + Cloud Anti-Virus: Emsisoft AM (EAM) tweaked
Standalone Cloud Anti-Virus: /
Firewall: Online Armor Premium (OAP) tweaked
HIPS: OAP
Behavior Blocker: EAM
----------------------------------------------------------------------
Companion Real-Time Protection
Local + Cloud Anti-Virus:
Standalone Cloud Anti-Virus: /
Firewall: /
HIPS: /
Behavior Blocker: /
----------------------------------------------------------------------
Virtualization
System-Wide: Shadow Defender
Restriction-based Sandbox: OAP (Runsafer)
Full Virtualization Sandbox: Sandboxie Free
-----------------------------------------------------------------------
2nd Opinion Scanners
Local: none on the system, all in USB (see below)
Cloud: none on the system, all in USB (see below)
----------------------------------------------------------------------
Web/Network Protection:
Web Shield/URL Filter: /
Anti-Phishing: EAM
Protocol Filter: /
Domain/Website Manager: OAP
Hosts Blocker: EAM (Surf Protection)
Hosts File Protection: OAP
DNS Checker: : OAP (Web Shield)
Password/Form Protection: Lastpass
Dedicated Anti-Spyware/keylogger: /
DNS Server: Norton Connect Safe
VPN: /
----------------------------------------------------------------------
Additionnal Protection
UAC/SmartScreen: Maximum
Apps Protection: /
File Protection: OAP (File Shield)
Registry Protection: OAP (Registry Shield)
Autorun Protection: OAP
Email Protection: EAM
Document Protection: /
Removable Media/USB Protection: /
Identity Protection/Banking Protection: OAP (Banking mode)
Rollback: Rollback RX
Anti-Theft: /
----------------------------------------------------------------------
System Reinforcement
Apps Hardening : /
Encryption: /
----------------------------------------------------------------------
Monitoring
System Monitor: /
Process Monitor: Comodo Killswitch, Emsisoft Hijack Free, Process Hacker,
Startup/Registry Manager: Comodo Autorun
System Utility : Ccleaner
----------------------------------------------------------------------
Recovery
Backup: Acronis TI 2012 (on USB)
Boot CDs: Hiren Boot CD (on USB),
----------------------------------------------------------------------
USB Toolbox:
Boot CD: Hiren Boot CD made bootable via USB
Portable OS: Mini-WinXP/Win7
Scanners: Emsisoft Emergency Kit, McAffee Stinger, MBAM, Comodo CE, Norton PE,Kaspersky TDSSKiller, Dr Web CureIt, Gmer,
disinfecting tools: Rkill, Combofix, Sanitycheck, etc...
---------------------------------------------------------------------

My configuration is made by virtue of the layered protection idea.
All my security softwares are selected specifically to run together without conflict, i set them for maximum compatibility/protection with the lowest resources usage possible.
This kind of combo is not suited for beginners since many settings and tweaks must be done to make it fully functionnal and system-safe

Umbra Corp's Concept of Layered Config

All my Guides & Reviews

[Spirit]

(07-09-2012 03:59 AM)umbrapolaris wrote:  Reformat my system (because i am an IT Pro ) and reinstall from scratch

removed : CIS
Added : OAP (no more BSODs now)
changed : EAM to main AV (for the moment)

That is what I was looking for

[Umbra Polaris]

(07-09-2012 04:23 AM)Stranger wrote:  That is what I was looking for

But not for long

removed : OAP (impact my system's responsiveness and boot time, high RAM usage for just a FW = 40+mb WS, can't tweak it as i want)
Added: CIS (has all i need, especially the manual sandbox)
Changed : EAM to "detect on executed"

[Spirit]

(07-10-2012 04:53 AM)umbrapolaris wrote:  

(07-09-2012 04:23 AM)Stranger wrote:  That is what I was looking for

But not for long

removed : OAP (impact my system's responsiveness and boot time, high RAM usage for just a FW = 40+mb WS, can't tweak it as i want)
Added: CIS (has all i need, especially the manual sandbox)
Changed : EAM to "detect on executed"

That was I always say a person who can tolerate OA on his machine is a real Soldier of this community

[Umbra Polaris]

yes...they really should improved the system impact of OAP as they did for EAM, it is a very good soft.

[Spirit]

(07-10-2012 05:25 AM)umbrapolaris wrote:  yes...they really should improved the system impact of OAP as they did for EAM, it is a very good soft.

agree emsisoft is very good now but OA

[Umbra Polaris]

As a friend says : CIS one time, CIS forever

[Spirit]

(07-10-2012 05:34 AM)umbrapolaris wrote:  As a friend says : CIS one time, CIS forever

I am not a big fan of comodo products because of their company's policies and ceo behavior.
How can one trust to the company/product for security whose Ceo publish private email from other company for public,its a totally nonsense.
I know it had a long debate before on most of the forums and at wilders there were lot of criticism of company and his ceo regarding this step.

I don't trust this company anymore and don't use any of their products
(Its my personal opinion and I don't want to criticize anyone from my comment)

[Umbra Polaris]

i always separate a product from its company behavior, if i have to think as you, i will surely lives in a forest, eating fruits and wearing clothes made from leaves of coconut trees

Comodo's CEO behavior is not the worst i saw, sure he can do differently but at least they don't exploit poor peoples or child to manufacture their products ^^

[Spirit]

(07-10-2012 07:49 AM)umbrapolaris wrote:  i always separate a product from its company behavior, if i have to think as you, i will surely lives in a forest, eating fruits and wearing clothes made from leaves of coconut trees

Comodo's CEO behavior is not the worst i saw, sure he can do differently but at least they don't exploit poor peoples or child to manufacture their products ^^

Its not a matter of living like nomadic tribe but at least one should not believe to a person who cannot keep secret of another person.
Remember if a person disclose secret of other person today he will defiantly open secret of yours to other on tomorrow (if he have)

Antivirus industry do not require poor people or child to work for them and if it yes who knows the .......

[Umbra Polaris]

removed : IE 9 (really never used it ^^)