Umbra Corp. Win8 Config

[Umbra Polaris]

PC Environment: Private
Security Awareness: Advanced
Exposure to Malware: High
Anti-Malware Testing: Yes, including the use of a VM or junk PC
Operating System: Windows 8 Pro (tweaked)
Architecture: 64-bit
Real-time Protection: See Below
On-Demand Tools: See Below
Web Browser: --->
Normal usage: Waterfox in Sandboxie
Banking usage: Chrome in Sandboxie
Extensions and Plugins: --->
Waterfox: Lastpass, VTzilla, Adblock+, Flagfox, Webutation
Chrome: Lastpass, Https Everywhere, Webutation
----------------------------------------------------------------------
Main Real-Time Protection
Local + Cloud Anti-Virus: Emsisoft AM (EAM) tweaked
Standalone Cloud Anti-Virus: /
Firewall: Online Armor Premium (OAP) tweaked
HIPS: OAP
Behavior Blocker: EAM
----------------------------------------------------------------------
Companion Real-Time Protection
Local + Cloud Anti-Virus:
Standalone Cloud Anti-Virus: /
Firewall: /
HIPS: /
Behavior Blocker: /
----------------------------------------------------------------------
Virtualization
System-Wide: Shadow Defender
Restriction-based Sandbox: OAP (Runsafer)
Full Virtualization Sandbox: Sandboxie Free
-----------------------------------------------------------------------
2nd Opinion Scanners
Local: none on the system, all in USB (see below)
Cloud: none on the system, all in USB (see below)
----------------------------------------------------------------------
Web/Network Protection:
Web Shield/URL Filter: /
Anti-Phishing: EAM
Protocol Filter: /
Domain/Website Manager: OAP
Hosts Blocker: EAM (Surf Protection)
Hosts File Protection: OAP
DNS Checker: : OAP (Web Shield)
Password/Form Protection: Lastpass
Dedicated Anti-Spyware/keylogger: /
DNS Server: Norton Connect Safe
VPN: /
----------------------------------------------------------------------
Additionnal Protection
UAC/SmartScreen: Maximum
Apps Protection: /
File Protection: OAP (File Shield)
Registry Protection: OAP (Registry Shield)
Autorun Protection: OAP
Email Protection: EAM
Document Protection: /
Removable Media/USB Protection: /
Identity Protection/Banking Protection: OAP (Banking mode)
Rollback: Rollback RX
Anti-Theft: /
----------------------------------------------------------------------
System Reinforcement
Apps Hardening : /
Encryption: /
----------------------------------------------------------------------
Monitoring
System Monitor: /
Process Monitor: Comodo Killswitch, Emsisoft Hijack Free, Process Hacker,
Startup/Registry Manager: Comodo Autorun
System Utility : Ccleaner
----------------------------------------------------------------------
Recovery
Backup: Acronis TI 2012 (on USB)
Boot CDs: Hiren Boot CD (on USB),
----------------------------------------------------------------------
USB Toolbox:
Boot CD: Hiren Boot CD made bootable via USB
Portable OS: Mini-WinXP/Win7
Scanners: Emsisoft Emergency Kit, McAffee Stinger, MBAM, Comodo CE, Norton PE,Kaspersky TDSSKiller, Dr Web CureIt, Gmer,
disinfecting tools: Rkill, Combofix, Sanitycheck, etc...
---------------------------------------------------------------------

My configuration is made by virtue of the layered protection idea.
All my security softwares are selected specifically to run together without conflict, i set them for maximum compatibility/protection with the lowest resources usage possible.
This kind of combo is not suited for beginners since many settings and tweaks must be done to make it fully functionnal and system-safe

Umbra Corp's Concept of Layered Config

All my Guides & Reviews

[Plexx]

@ TaranScorp: what type of settings are you running on CIS? Chiron's guide or umbra's paranoid settings?

@McLovin: I bet you that my games would be unable to run without any alerts flying across the screen if I was to use umbra's laptop. Nevertheless, I admire his config.

Now if we are to ask umbra to run a config for a minimalistic approach, I almost bet his answer will be (CIS + EAM + WSA). In other words, remove all other layers and within 5 mins he will be saying he feels naked!

[Umbra Polaris]

(07-16-2012 11:39 AM)Biozfear Wrote:  @ TaranScorp: what type of settings are you running on CIS? Chiron's guide or umbra's paranoid settings?[

mine is not so paranoid ... ok ok i admit i used CIS for a while with D+ on Paranoid

Quote:@McLovin: I bet you that my games would be unable to run without any alerts flying across the screen if I was to use umbra's laptop. Nevertheless, I admire his config.

Thanks, not to contradict you, but i have few alerts from my combos... ok ok i admit only when i installed some unknown softs or portable versions. ^^

Quote:Now if we are to ask umbra to run a config for a minimalistic approach, I almost bet his answer will be (CIS + EAM + WSA). In other words, remove all other layers and within 5 mins he will be saying he feels naked!

no no , i would say WSA or PCAV + Win Firewall... ok ok i admit i will never play without my combo

[TaranScorp]

I start with Chiron's because he has some unique settings then I pick through these other links.
This one really interests me:
Now copy in "?:\*" into the box for "Add new item".
Then definitely umbrapolaris for some further tweaks but especially the exclusions to get all three programs playing together nice.
Right now I have no slowdowns or conflicts so far.

http://forums.comodo.com/guides-cis-b130.0/

http://forums.comodo.com/leak-testingatt...715.0.html

http://www.techsupportalert.com/content/...rewall.htm

(07-16-2012 11:39 AM)Biozfear Wrote:  @ TaranScorp: what type of settings are you running on CIS? Chiron's guide or umbra's paranoid settings?

@McLovin: I bet you that my games would be unable to run without any alerts flying across the screen if I was to use umbra's laptop. Nevertheless, I admire his config.

Now if we are to ask umbra to run a config for a minimalistic approach, I almost bet his answer will be (CIS + EAM + WSA). In other words, remove all other layers and within 5 mins he will be saying he feels naked!

[Earth]

This is the worst possible and one of the most brilliant security combination ever!

I feel sorry for Emsisoft and Webroot, having to sit next to Comodo. Hope another Windows system never has to endure this.

[TaranScorp]

Wait till Comodo 6 comes out, then it will be a honor to be with Comodo

[Umbra Polaris]

(07-16-2012 01:21 PM)Earth Wrote:  I feel sorry for Emsisoft and Webroot, having to sit next to Comodo. Hope another Windows system never has to endure this.

[TaranScorp]

Umbrapolaris, When you tried Sanboxie free did the lock stop working on the icon while you were browsing with WSA?
Do you have any tips on setting up Sanboxie with CIS + EAM + WSA?

[Plexx]

Hey umbra, just noticed one thing: you running CFW as a main firewall but use as companion Webroot? I thought Webroot was sort of using Windows 7 built in firewall up to a certain stage. Also having 2 firewalls on the same OS?

[Plexx]

(07-16-2012 01:09 PM)TaranScorp Wrote:  I start with Chiron's because he has some unique settings then I pick through these other links.
This one really interests me:
Now copy in "?:\*" into the box for "Add new item".
Then definitely umbrapolaris for some further tweaks but especially the exclusions to get all three programs playing together nice.
Right now I have no slowdowns or conflicts so far.

http://forums.comodo.com/guides-cis-b130.0/

http://forums.comodo.com/leak-testingatt...715.0.html

http://www.techsupportalert.com/content/...rewall.htm

I remember reading somewhere about the Comodo Leaktests. If not mistaken it was done prior to D+ so results might be not that meaningful.

You will need to actually search around to dig out the exact info though.

[Umbra Polaris]

(07-16-2012 11:14 PM)Biozfear Wrote:  Hey umbra, just noticed one thing: you running CFW as a main firewall but use as companion Webroot? I thought Webroot was sort of using Windows 7 built in firewall up to a certain stage. Also having 2 firewalls on the same OS?

Webroot SA firewall works differently than usual firewall, i read on Webroot website or forum that it act as a layer to other firewall, if you run WSA, you surely observed that it doesn't install any drivers as others normally did.

about comodo leaktest, it still works fine , you just must disable the sandbox, and not use it inside Sandboxie or other virtualization softwares. Also you must exclude it from any antivirus. and allow CLT.exe to run when D+ ask the first time.