@Wave
Yes smartscreen and uac is enabled and i have little "basic Instinct" also. Thats great i have many of ur MT members votes and maybe some suggestions so, it helped me decided. Sure i know little about those things, but now when i come back to the roots with Zonealarm it is interesting what you are thinking is best for that nowadays.
Atm, BD is leader...
If you've got SmartScreen and UAC enabled then this is a good step of keeping your system protected; make sure it's used properly though - sometimes you might go on auto-pilot and allow something without thinking... This habit will eventually lead you into the trap of infection. Make sure you pay good attention to any SmartScreen notifications and do not allow anything to run with administrative privileges unless you know it really needs such privileges to function, and if it's really trusted.
Bitdefender are a good vendor and they are famous for having nice signatures, but there is new malware being released into the wild everyday and signatures are becoming more and more obsolete; they have other features too, such as anti-ransomware (not sure if it's on the free version though, and I'm pretty sure it works by protecting a set of chosen documents as opposed to analyzing the program and blocking when signs of ransomware encryption is identified).
Avast on the other hand do appear to provide much more than what Bitdefender can, but the question you must ask yourself is: do I really need all these components? Avast also have good signatures and they are very quick to update their databases multiple occasions per day, and also have a nice customer support system based on tickets if you required assistance directly from them... I would rate their customer support better than that of Bitdefender. Avast also have a basic HIPS system which many seem to be happy with.
Windows Defender is quite light since it's built-into the Windows OS (Windows 8 and above), and it works very smoothly on Windows 10 based on my previous experience with it. I haven't encountered any issues with it on Windows 10, not once. The additional zero-day protection mechanisms based on dynamic analysis isn't really required if you do know what you are doing, have UAC/SmartScreen enabled (and use them properly), and do your research before visiting new websites/running new software.
Some people prefer to take the Default-Deny approach and then they do their research, and others prefer to use Comodo Firewall with the auto-sandbox to keep themselves protected. Whatever floats your boat!
Just make sure:
- Do not accept attachments or click links on websites you do not trust, or from e-mails who are not verified senders. Even if you get an e-mail from a trusted sender (and it is not genuinely spoofed) but it is not written in the style the sender is known for using, then double check with them that they really sent that e-mail (in case they were hacked, since malware spreads a lot via e-mail both in the old days and current time).
- Stick to using trusted search engines like Google/DuckDuckGo/Bing, but also be aware that not all search results will lead to 100% clean sites... Search engines are not perfect just like us humans, far from it!
- Research programs before you run them (with or without admin privileges, since not all malware requires the additional privileges - it depends on the malware's purpose/functionality).
- Use a VPN (Virtual Private Network) such as CyberGhost/ZenMate to protect your IP address -> this is not really "essential", but beneficial? Definitely. If an attacker obtains your IP address (through their malware being present on your system, or through network traffic of you visiting one of their sites) then they can target it through DDoS attacks (which results in your network bandwidth being used up (as well as the attackers), crashing your network usage).
- Use an ad-blocker extension/software to help protect yourself against advertising. I didn't used to claim this as essential but nowadays I would, since malvertising is slowly becoming more and more common in the wild... You'll get a better browsing experience with it anyway.
- Use HTTPSEverywhere if it's supported on your browser since if someone hacks your network (e.g. they're connected to it and sniffing the network) then they won't be able to obtain information you transmit from your browser client and the website, since it'll be encrypted -> also great if you use open WiFi networks at all.
- Scan new downloads at
VirusTotal - Free Online Virus, Malware and URL Scanner or analyze it at an online malware analysis service like
Free Automated Malware Analysis Service - powered by VxStream Sandbox (if you know what you're doing to read and understand the reports of course).
- Use a sandbox for unknown program testing, or even a Virtual Machine if your hardware is good enough/you have the time to spend.
At the end of the day, the only person who can choose what they should be using is you - I recommend you make use of the 30-day trials for the premium versions of Bitdefender/Avast or try out the free versions and stick to using either of them if you feel comfortable using them. If you feel that you don't need all of the components, you can disable some (e.g. if you got a premium version) or just switch over to Windows Defender for real-time protection.
Stay safe and good luck,
Wave.
