AtlBo's Security Configuration

[AtlBo]

I am using Private Firewall set to show all alerts in place of UAC. It does the exact same thing only the messages are in greater detail. Nothing against UAC I promise...

 

[ForgottenSeer 55474]

Realy nice Configuration,but what about getting a password manager

 

[tim one]

You use Private Firewall but I'd suggest keeping UAC enabled even if you have active HIPS module.
I used PF in past and no problem with UAC enabled on default.

 

[Dirk41]

Emet 5.2? Bypassing EMET 5.2 Security Protection » Active Directory Security

Please update to 5.5


Thank you for sharing

 

[frogboy]

A decent config but as suggested turn on UAC as it is your first line of defense.

Thanks for sharing your config with us.

 

[Daniel Hidalgo]

You should install https everywhere in your browser, apart from the above recommendations, which are very important. Thanks for sharing your settings

 

[Ink]

Disable Windows Defender and remove SuperAntiSpyware.

 

[Dirk41]

Disable Windows Defender and remove SuperAntiSpyware.

Why defender ? He uses it on demand

 

[tim one]

Why defender ? He uses it on demand

He uses Windows 7 and WD is useless on that OS.

 

[Dirk41]

Oh sorry I missed that . But, maybe he is talking about defender offline that is available also for w7

https://support.microsoft.com/en-us/help/17466/windows-defender-offline-help-protect-my-pc

 

[Ink]

I am using Private Firewall set to show all alerts in place of UAC. It does the exact same thing only the messages are in greater detail. Nothing against UAC I promise...

PrivateFirewall can be easily disabled with the mouse.

@Dirk41 Windows Defender built-in to Windows Vista and 7 is only Anti-Spyware and isn't practical for on-demand scanning.

 

[Exterminator]

Enable UAC.
Disable Defender and remove SAS.
Thanks for sharing your config

 

[_CyberGhosT_]

If you insist on UAC being off then at least install VoodooShiled for a surrogate UAC.
The rest has been suggested.
Thanks for sharing.

 

[aragornnnn]

Thanks for sharing your config!

Ok if i really need to say something... maybe add CCleaner for...cleaning up junk

 

[Dirk41]

PrivateFirewall can be easily disabled with the mouse.

@Dirk41 Windows Defender built-in to Windows Vista and 7 is only Anti-Spyware and isn't practical for on-demand scanning.

Yeah I remember now ,sorry and thank you

But The link I provided is not the built in, it needs to be booted from usb https://support.microsoft.com/en-us/help/17466/windows-defender-offline-help-protect-my-pc

 

[AtlBo]

Emet 5.2? Bypassing EMET 5.2 Security Protection » Active Directory Security

Please update to 5.5


Thank you for sharing

Dirk41. Hey Dirk's my favorite NBA player. Wish he could go another 20 years.

Thankyou for the information on EMET. You may like this link that follows from the reading in the link in your post:

Scrutiny from an Inquisitive mind: Defeating EMET Protections (2)

I learned a tremendous amount about memory exploits.

 

[AtlBo]

Thanks for the posts. How do I edit my config if I turn on UAC?

One question. Do all exploits circumvent UAC? It seems like they would automatically, since they aren't a process to speak of. Then again, I guess the exploit could/would run into UAC depending on what it attempts(?). That said, if it does, does it appear to be another process, like browser or some installed program or important/harmless process? I'd like to understand UAC a little bit better, but I assume that ransomeware is bypassing UAC with no problem.

I understand that UAC is a first line of defense and potentially helpful in that way. I would like to know more about the actual protection set of UAC, however.

PrivateFirewall can be easily disabled with the mouse.

@Dirk41 Windows Defender built-in to Windows Vista and 7 is only Anti-Spyware and isn't practical for on-demand scanning.

On Defender, I am using the built-in Windows 7 version. It updates and runs every day at 2 AM, so I guess it's not technically on demand. However, it is there available for scans, and I think of it more for that purpose if anything. SAS isn't installed. Sorry about the confusion on that. I don't have any on demand scanners installed, other than Malwarebytes Pro, which is also active protection o/c. 360 TS has a scanner also that I use sometimes with Bitdefender and Avira engines enabled.

 

[AtlBo]

PrivateFirewall can be easily disabled with the mouse.

@Dirk41 Windows Defender built-in to Windows Vista and 7 is only Anti-Spyware and isn't practical for on-demand scanning.

I really appreciate this comment. I have thought about it numerous times. Is there any program that can block attempts to shut down a process/program like Private Firewall? I assume the most important element of PF is the service, which I know runs even if the GUI is shut down. I get normal pop ups even with the GUI closed. I'll have to check on the service module to see what happens with that.

 

[Ink]

Yeah I remember now ,sorry and thank you

But The link I provided is not the built in, it needs to be booted from usb https://support.microsoft.com/en-us/help/17466/windows-defender-offline-help-protect-my-pc

OP hasn't specified which Windows Defender they use, built-in or Offline scanner.

 

[AtlBo]

OP hasn't specified which Windows Defender they use, built-in or Offline scanner.

Built-in version which updates and runs daily.