By Staff BoraMurdar's System 2022

[BoraMurdar]

Windows 11 Pro /hard removed all preinstalled apps but Microsoft Store, Snipping Tool, Calculator and Photos
Error Reporting disabled
Hibernation disabled
Indexing disabled
Media features disabled
Microsoft Defender disabled by Policy Editor
OOShutUp 10 and WPD - basically mostly these settings
probably something more I cannot remember to post now *follow the changelog

A bootable USB containing:
Hiren's Boot CD (with the last free version of Parted Magic)
Hiren's Boot CD PE
Acronis Cyber Protect Office Premium (formerly True Image Premium)
ESET SysRescue Live
Slitaz Linux
and always updated versions of EEK, Hitman Pro, MalwareBytes, Tweaking.com Windows Repair, My own pack of ransomware decryption tools, Wise Disk Cleaner Portable, Avast AntiRootkit, RKill, etc.
Chainloading bootmanagers of each ISO to make them all work together.

More Info on this page
*YUMI version
The new tutorial coming soon
​

 

[ForgottenSeer 92963]

Why use 1.1.1.1 when 1.1.1.2 (No Malware) and 1.1.1.3 (No Malware & Adult) are offered for free also?

Introducing 1.1.1.1 for Families

Introducing 1.1.1.1 for Families — the easiest way to add a layer of protection to your home network and protect it from malware and adult content.

blog.cloudflare.com

You also could check ping times for 9.9.9.9 , Quad9 DNS also provide good URL filtering.

 

[jetman]

Thanks- I learnt a few new things tonight!

 

[SeriousHoax]

Chainloading bootmanagers of each ISO to make them all work together.

More Info on this page
*YUMI version
The new tutorial coming soon

You can check out Ventoy to create multi-iso bootable USB drive without any effort basically.

 

[BoraMurdar]

Why use 1.1.1.1 when 1.1.1.2 (No Malware) and 1.1.1.3 (No Malware & Adult) are offered for free also?

Introducing 1.1.1.1 for Families

Introducing 1.1.1.1 for Families — the easiest way to add a layer of protection to your home network and protect it from malware and adult content.

blog.cloudflare.com

You also could check ping times for 9.9.9.9 , Quad9 DNS also provide good URL filtering.

I don't want to overlap malware protection too much and I am an adult

You can check out Ventoy to create multi-iso bootable USB drive without any effort basically.

Thanks, but sometimes I need to fix ancient PCs (1GB of RAM or less) and Ventoy only boots ISOs from RAM which can be insufficient and programs won't run properly.
Extracting ISOs and chanloading is more efficient and compatible.

 

[ForgottenSeer 92963]

I don't want to overlap malware protection too much and I am an adult

Impossible to overlap protection when it is done at the DNS

 

[BoraMurdar]

Impossible to overlap protection when it is done at the DNS

Except something gets through DNS

 

[ForgottenSeer 92963]

Except something gets through DNS

When you would use cloudflare 1.1.1.2 in stead of 1.1.1.1 the cloudflare servers would block the IP-addresses which are malware. A DNS is supposed to provide the IP-address which belongs to the domain name your PC is requesting. This 'phonebook of the internet' process is running on the servers of cloudflare it can never overlap with protection you have running on your PC.

 

[BoraMurdar]

When you would use cloudflare 1.1.1.2 in stead of 1.1.1.1 the cloudflare servers would block the IP-addresses which are malware. A DNS is supposed to provide the IP-address which belongs to the domain name your PC is requesting. This 'phonebook of the internet' process is running on the servers of cloudflare it can never overlap with protection you have running on your PC.

This leads to nowhere. Long story short I use CloudFlare because it is faster than Google, Malware is handled by Kaspersky, ads by Adguard. I don't want anything mixed.

 

[ForgottenSeer 92963]

This leads to nowhere. Long story short I use CloudFlare because it is faster than Google, Malware is handled by Kaspersky, ads by Adguard. I don't want anything mixed.

1.1.1.2 is also Cloudflare You are using both Kaspersky Web AV and using Edge Smartscreen so you are mixing webprotection

 

[BoraMurdar]

1.1.1.2 is also Cloudflare You are using both Kaspersky Web AV and using Edge Smartscreen so you are mixing webprotection

Thank you for your inputs

 

[ForgottenSeer 92963]

Don't mix to much input though, there is a limit a human can process.

 

[RoboMan]

Nice config Bora. Have you considered using some third party app to harden Windows settings? Like SysHardener, H_C, SWH?

 

[BoraMurdar]

Don't mix to much input though, there is a limit a human can process.

You are close to reach your limit

 

[BoraMurdar]

Nice config Bora. Have you considered using some third party app to harden Windows settings? Like SysHardener, H_C, SWH?

Thx Robo, I actually have... But then I realized that my computing habits are now too boring for those
For a quite some time I only work in MS Office, mail, online conferencing, backup data and imaging the system, and play some music for my toddler to dance. Shoping and banking are done in very rare occasions.

But still I like to read updated info and possibilities about hardening.

Actually I see that nothing has dramaticaly changed. People are still crying about BD RAM usage. (Inhales the good old aroma of MWT)

 

[blackice]

play some music for my toddler to dance

Extra rep points!

 

[ForgottenSeer 92963]

You are close to reach your limit

Is that the community manager BoraMurdar showing his charming empathy or forum user BoraMurdar having issues with feedback on his security config?

 

[BoraMurdar]

Is that the community manager BoraMurdar showing his charming empathy or forum user BoraMurdar having issues with feedback on his security config?

It will be open for interpretation.

 

[RoboMan]

Thx Robo, I actually have... But then I realized that my computing habits are now too boring for those
For a quite some time I only work in MS Office, mail, online conferencing, backup data and imaging the system, and play some music for my toddler to dance. Shoping and banking are done in very rare occasions.

But still I like to read updated info and possibilities about hardening.

Actually I see that nothing has dramaticaly changed. People are still crying about BD RAM usage. (Inhales the good old aroma of MWT)

Yeah well, same old MT! LOL

Regarding system hardening, you might wanna take a look at some simple tool like SysHardener, since you do e-mailing it might save your asleep mind a really hard time by clicking a random attachment because you haven't had your moning coffee yet!

 

[BoraMurdar]

Yeah well, same old MT! LOL

Regarding system hardening, you might wanna take a look at some simple tool like SysHardener, since you do e-mailing it might save your asleep mind a really hard time by clicking a random attachment because you haven't had your moning coffee yet!

I will, thx. Some long-story short guide?