Umbra Corp. Win8 Config

[Umbra Polaris]

PC Environment: Private
Security Awareness: Advanced
Exposure to Malware: High
Anti-Malware Testing: Yes, including the use of a VM or junk PC
Operating System: Windows 8 Pro (tweaked)
Architecture: 64-bit
Real-time Protection: See Below
On-Demand Tools: See Below
Web Browser: --->
Normal usage: Waterfox in Sandboxie
Banking usage: Chrome in Sandboxie
Extensions and Plugins: --->
Waterfox: Lastpass, VTzilla, Adblock+, Flagfox, Webutation
Chrome: Lastpass, Https Everywhere, Webutation
----------------------------------------------------------------------
Main Real-Time Protection
Local + Cloud Anti-Virus: Emsisoft AM (EAM) tweaked
Standalone Cloud Anti-Virus: /
Firewall: Online Armor Premium (OAP) tweaked
HIPS: OAP
Behavior Blocker: EAM
----------------------------------------------------------------------
Companion Real-Time Protection
Local + Cloud Anti-Virus:
Standalone Cloud Anti-Virus: /
Firewall: /
HIPS: /
Behavior Blocker: /
----------------------------------------------------------------------
Virtualization
System-Wide: Shadow Defender
Restriction-based Sandbox: OAP (Runsafer)
Full Virtualization Sandbox: Sandboxie Free
-----------------------------------------------------------------------
2nd Opinion Scanners
Local: none on the system, all in USB (see below)
Cloud: none on the system, all in USB (see below)
----------------------------------------------------------------------
Web/Network Protection:
Web Shield/URL Filter: /
Anti-Phishing: EAM
Protocol Filter: /
Domain/Website Manager: OAP
Hosts Blocker: EAM (Surf Protection)
Hosts File Protection: OAP
DNS Checker: : OAP (Web Shield)
Password/Form Protection: Lastpass
Dedicated Anti-Spyware/keylogger: /
DNS Server: Norton Connect Safe
VPN: /
----------------------------------------------------------------------
Additionnal Protection
UAC/SmartScreen: Maximum
Apps Protection: /
File Protection: OAP (File Shield)
Registry Protection: OAP (Registry Shield)
Autorun Protection: OAP
Email Protection: EAM
Document Protection: /
Removable Media/USB Protection: /
Identity Protection/Banking Protection: OAP (Banking mode)
Rollback: Rollback RX
Anti-Theft: /
----------------------------------------------------------------------
System Reinforcement
Apps Hardening : /
Encryption: /
----------------------------------------------------------------------
Monitoring
System Monitor: /
Process Monitor: Comodo Killswitch, Emsisoft Hijack Free, Process Hacker,
Startup/Registry Manager: Comodo Autorun
System Utility : Ccleaner
----------------------------------------------------------------------
Recovery
Backup: Acronis TI 2012 (on USB)
Boot CDs: Hiren Boot CD (on USB),
----------------------------------------------------------------------
USB Toolbox:
Boot CD: Hiren Boot CD made bootable via USB
Portable OS: Mini-WinXP/Win7
Scanners: Emsisoft Emergency Kit, McAffee Stinger, MBAM, Comodo CE, Norton PE,Kaspersky TDSSKiller, Dr Web CureIt, Gmer,
disinfecting tools: Rkill, Combofix, Sanitycheck, etc...
---------------------------------------------------------------------

My configuration is made by virtue of the layered protection idea.
All my security softwares are selected specifically to run together without conflict, i set them for maximum compatibility/protection with the lowest resources usage possible.
This kind of combo is not suited for beginners since many settings and tweaks must be done to make it fully functionnal and system-safe

Umbra Corp's Concept of Layered Config

All my Guides & Reviews

[Plexx]

What are the features you used from WSA?

[Earth]

(05-17-2011 08:03 AM)umbrapolaris wrote:  - Wise Registry Cleaner/Disk Cleaner/Jetsearch/Disc Recovery

I tried all of these a few days ago, portable of course.

Disk Cleaner might clean too deep and cause damage to some programs.

JetSearch is slow compared to Search Everything.

Data Recovery I didn't test much, but can you compare with Recuva (Piriform), and post your findings?

[Overkill]

I like folder hider alot and tried jet search and it does seem a bit slower then everything...where did you get the portables?

EDIT: NM I found it

[TaranScorp]

umbrapolaris,
This should be my last question.

I basically have the same Real-time protection as you but I'm using Opera-12 as my browser.
Do you know if using Sandboxie on my browser will be compatible with CIS and EAM and WSA?

[Umbra Polaris]

(07-13-2012 08:37 AM)Biozfear wrote:  What are the features you used from WSA?

all but especially the heuristic choices, the browser and site protection, i prioritize WSA from KsAV for its options (KsAV is not tweakable enough to me)

(07-13-2012 08:56 AM)Earth wrote:  Disk Cleaner might clean too deep and cause damage to some programs.
JetSearch is slow compared to Search Everything.
Data Recovery I didn't test much, but can you compare with Recuva (Piriform), and post your findings?

I think for Disk Cleaner if you untick some areas in the setting you may avoid some issues.
i agree for Jet Search.
i didn't use Data Recovery yet but i will post my experience with it when the opportunity will come.

(07-13-2012 09:09 AM)MRF71 wrote:  I like folder hider alot and tried jet search and it does seem a bit slower then everything...where did you get the portables?

I like it too , very simple to use.

(07-13-2012 06:30 PM)TaranScorp wrote:  I basically have the same Real-time protection as you but I'm using Opera-12 as my browser.
Do you know if using Sandboxie on my browser will be compatible with CIS and EAM and WSA?

Yes it is, Comodo Auto-Sandbox works differently than Sandboxie, if you have the paid version of Sandboxie (multiple sandboxes in same time), i will highly recommend you to use it; if you use the free version, you can (as me) just use the manual sandbox of CIS instead.

[TaranScorp]

Sheeesh, umbrapolaris
Now you've forced me into another question
I just started learning CIS, WSA and EAM in the last two weeks and Sanboxie is new to me.
Why would I need more then one sandbox if I'm only sandboxing my browser?
Do you have any configuration tips on running Sandboxie and CIS, WSA, and EAM together?

[Umbra Polaris]

(07-14-2012 01:03 AM)TaranScorp wrote:  Why would I need more then one sandbox if I'm only sandboxing my browser?

sandboxie paid version allow you to use more than one sandbox for various programs/purposes, some people not only sandbox the browser but also other soft for testing, etc...

Quote:Do you have any configuration tips on running Sandboxie and CIS, WSA, and EAM together?

i don't have the paid version of sandboxie so i don't use it, i just use CIS' manual sandbox for my browsers (it acts like sandboxie but with less options)

[TaranScorp]

Well I don't feel like paying $38 for Sanboxie right now because I read that CIS 6 will have full Sandboxing capabilities, Right?

[Umbra Polaris]

(07-14-2012 01:40 AM)TaranScorp wrote:  because I read that CIS 6 will have full Sandboxing capabilities, Right?

it has already, it is the "manual sandbox" , CIS 6 will have kiosk , that will replace the auto-sandbox by a full virtualization with special features.

[TaranScorp]

So I guess it still is a good idea to try Sandboxie after all?
Maybe I can find a coupon or a special somewhere.
Today I found EAM for half price through some coupon website.