Advanced Plus Security ZeroDay's Windows 11 config

Last updated
Nov 15, 2023
How it's used?
For home and private use
Operating system
Windows 11
Other operating system
Windows 11 Pro 23H2
On-device encryption
VeraCrypt
Log-in security
    • Biometrics (Windows Hello PIN, TouchID, Face, Iris, Fingerprint)
Security updates
Allow security updates and latest features
Update channels
Allow stable updates only
User Access Control
Always notify
Smart App Control
On
Network firewall
Enabled
About WiFi router
Standard ISP router
Real-time security
Kaspersky Plus tweaked for maximum security, Hard Configurator max settings.
Firewall security
Other - Internet Security (3rd-party)
About custom security
Kaspersky Plus tweaked for maximum security, Hard Configurator.
Periodic malware scanners
Emsisoft emergency kit
MBAM
Hitman Pro
Norton power eraser
Sysinternal suite
Malware sample testing
I do not participate in malware testing
Environment for malware testing
I don't participate in Malware testing.
Browser(s) and extensions
Google Chrome with:
Bitwarden
Bitdefender traffic light
Microsoft defender browser guard
Ublock origin with custom filters
Secure DNS
Next DNS tweaked for maximum security and privacy.
Desktop VPN
Express VPN & PIA
Password manager
Bitwarden
Maintenance tools
CCleaner portable, Wise disk cleaner portable and Windows disk cleanup.
File and Photo backup
Google drive, One drive and backed up to an external SSD.
System recovery
Macrium reflect
Risk factors
    • Browsing to popular websites
    • Working from home
    • Making audio/video calls
    • Opening email attachments
    • Buying from online stores, entering banks card details
    • Downloading software and files from reputable sites
    • Sharing and receiving files and torrents
    • Streaming audio/video content from trusted sites or paid subscriptions
    • Coding and development
Computer specs
This is an old PC I built years ago. The specs are:

Amd Ryzen 2600x CPU
32GB 3400 RAM
1TB PCI-E M.2 SSD
Nvidia 1030 video card
All in one water cooling
750 watt PCU
What I'm looking for?

Looking for medium feedback.

Notes by Staff Team
  1. This setup may cause performance issues, system instability or conflicts between programs, and can hinder the effectiveness of the installed antivirus products.

Gandalf_The_Grey

Level 76
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Apr 24, 2016
6,601
Great config, thanks for sharing (y)

You could drop some periodic malware scanners and keep only the "best": KVRT, NPE and the Sysinternals Suite.

Less extensions means less attack surface and less resources.
I would add when using Microsoft Defender as AV the Microsoft Defender Browser Protection extension.
That way you have Google Safe Browsing, Microsoft SmartScreen and Next DNS.
And drop Malwarebytes browser security, Avira browser safety and Bitdefender traffic light.

uBlock Origin should be enough, especially when also using Next DNS, consider dropping Privacy badger.

If you want even further minimize your config, you could choose between Hard_Configurator and VoodooShield (now CyberLock).
 
Last edited:

ZeroDay

Level 30
Thread author
Verified
Top Poster
Well-known
Aug 17, 2013
1,905
Great config, thanks for sharing (y)

You could drop some periodic malware scanners and keep only the "best": KVRT, NPE and the Sysinternals Suite.

Less extensions means less attack surface and less resources.
I would add when using Microsoft Defender as AV the Microsoft Defender Browser Protection extension.
That way you have Google Safe Browsing, Microsoft SmartScreen and Next DNS.
And drop Malwarebytes browser security, Avira browser safety and Bitdefender traffic light.

uBlock Origin should be enough, especially when also using Next DNS, consider dropping Privacy badger.

If you want even further minimize your config, you could choose between Hard_Configurator and VoodooShield (now CyberLock).
Thank you for the advice it's much appreciated.
 

oldschool

Level 82
Verified
Top Poster
Well-known
Mar 29, 2018
7,114
As long as He tweaks KPlus...
 

ZeroDay

Level 30
Thread author
Verified
Top Poster
Well-known
Aug 17, 2013
1,905
Reinstalled Windows 11. So I decided to make use of most of Windows built in security. I'm no longer using Kaspersky although I may go back to it at some point.

Current config:
Windows defender tweaked through GPedit for maximum protection.
Hard Configurator set for maximum protection.
Smart app control switched on
Malwarebytes Windows firewall control.
Cyberlock.
 
F

ForgottenSeer 103564

Reinstalled Windows 11. So I decided to make use of most of Windows built in security. I'm no longer using Kaspersky although I may go back to it at some point.

Current config:
Windows defender tweaked through GPedit for maximum protection.
Hard Configurator set for maximum protection.
Smart app control switched on
Malwarebytes Windows firewall control.
Cyberlock.
I think you may have missed a spot 🤔😉😁

J/k looks pretty well covered and then some.
Hope you have your exceptions set well for maximum compatibility and usability.
 

ZeroDay

Level 30
Thread author
Verified
Top Poster
Well-known
Aug 17, 2013
1,905
Do you mind if I give your ip address to my hacker friends? You need some penetration testing to see your security layers in action ! :)
He can have my IP. I'm happy to allow anyone to pentest my setup. @Ultimate Vision You have my full consent to pentest my setup. Let me know if you want to give it a try so you can find any holes and I'll send you whatever details you need via DM.
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top