Danger borkduck Security Config 2024

[borkduck]

I'm shopping around for an AV suite that doesn't take 4+hrs to complete a scan. Have AVGFree on my new box right now (using Windows 11 firewall) and it takes 4hr+ to complete a deepscan on 826GB; on my old box (Win7/KIS) I was able to complete a scan on 1.7 tB in 1-1 1/2 Hrs max.

Am a pretty complete techno moron (took me 10 min to complete form before posting), so catching up on a decade+ of change is daunting. Win7/Kaspersky was a gem for over 10 years for me(sure miss it)! Right now I'm looking at BitDefender, Eset and Checkpoint Harmony. Am pretty careful about what neighborhoods I wander into, but still want good protection if I inadvertantly find myself in an unsafe one.

Thanks in advance for any guidance,

bd

 

[harlan4096]

To run a full scan of 826GB makes no sense at all... I never run full scans, only systems folders / risky ones, for example:

C:\Windows\
C:\ProgramData\
C:\Users\<Your Account>\AppData\

Also, always 1st full scan takes longer, but the late ones are faster.

 

[oldschool]

I stick with quick scans, but @harlan4096's advice is sound.

 

[Berny]

I rarely scan , Kaspersky is continuously scanning in real time …

 

[borkduck]

I rarely scan , Kaspersky is continuously scanning in real time …

Yep. I miss 'em mucho...

bd

 

[Vitali Ortzi]

some options for checkpoint


zone alarm extreme Renewal 18$ 5 devices

harmony advanced CheckPoint License WebProtection Harmony Endpoint Advanced CP-HAR-EP-ADVANCED-1Y - 25$ 1 device
harmony basic CheckPoint License Software Harmony Endpoint Basic Protection CP-HAR-EP-BASIC-1Y 14$ 1 device


harmony extension Serious Discussion - [Extension]Checkpoint harmony web protection free unlimited and works with any av since its an extension



zonealarm beta is free too Download ZoneAlarm Software

 

[harlan4096]

User Access Control -> set to Always Notify.

Browser(s) and extensions: Firefox, Edge (occasionally; really slows things down!) -> please specify which add-ons do You use, for example Ublock Origin / Ublock Origin Lite, to block ads.

Secure DNS -> for example: Cloudflare (1.1.1.1)

Desktop VPN -> maybe You don't need this service, if a desktop and don't connect to public Wi-Fis

Password manager -> use a 3rd party tool, don't use integrated manager in browsers.

File and Photo backup -> any cloud service to back up data?

System recovery -> full system back up image solution, such as Macrium Reflect or Hasleo.

 

[Sorrento]

If you do a initial scan then have a AV running in the background there is no need to keep doing full scans, its unneeded & pointless.

 

[Vitali Ortzi]

If you do a initial scan then have a AV running in the background there is no need to keep doing full scans, its unneeded & pointless.

You should do a full scan once for the antivirus to know which files are trusted and improve performance but you wouldn't need to scan again as every non trusted file is scanned on access, execution, modification



But id you think you currently have malware you can try
Symantec diagnostic Wich is more aggressive then power eraser (Broadcom Managed File Transfer)

Kaspersky virus removal tool Free Virus Removal Tool - Online Virus Scan | Kaspersky

Hitmanpro HitmanPro and HitmanPro.Alert. Advanced Malware Scanning, Detection and Removal Tools.




About DNS if you don't care about piracy being blocked and live in the eu (to have close servers ) then DNS EU is the best one
Else I would go for quad9 wich is one of the most piracy, privacy friendly and have near the same amount of detection in recent tests
(Far above google , cloud flare etc)


But if you want to block ads too them control D, next have similar top detection of malicious sites and have adblocking , categories as well

 

[borkduck]

I rarely scan , Kaspersky is continuously scanning in real time …

Yep. I miss 'em mucho...

bd

User Access Control -> set to Always Notify.

Browser(s) and extensions: Firefox, Edge (occasionally; really slows things down!) -> please specify which add-ons do You use, for example Ublock Origin / Ublock Origin Lite, to block ads.

Secure DNS -> for example: Cloudflare (1.1.1.1)

Desktop VPN -> maybe You don't need this service, if a desktop and don't connect to public Wi-Fis

Password manager -> use a 3rd party tool, don't use integrated manager in browsers.

File and Photo backup -> any cloud service to back up data?

System recovery -> full system back up image solution, such as Macrium Reflect or Hasleo.

User Access Control -> set to Always Notify.
Currently set at Level 3

Browser(s) and extensions: Firefox, Edge (occasionally; really slows things down!) -> please specify which add-ons do You use, for example Ublock Origin / Ublock Origin Lite, to block ads.
None; formerly (on old box) KIS, Video DL Helper on FFox. No add blockers (tho sites frequently tell me that I need to 'turn off my ad blocker'. Another thing I don't get about the interwebs...

Secure DNS -> for example: Cloudflare (1.1.1.1)
Don't have any at the moment that I'm aware of. Is this included in some/most full version stand-alone AV suites?

Desktop VPN -> maybe You don't need this service, if a desktop and don't connect to public Wi-Fis
Desktop ethernet-only connection; public unless I need to access the printer, then switch to private

Password manager -> use a 3rd party tool, don't use integrated manager in browsers.
Don't have, have never used; keep all PW's in a secure location separate from the box

File and Photo backup -> any cloud service to back up data?
No cloud service of any kind

System recovery -> full system back up image solution, such as Macrium Reflect or Hasleo.
Win11 system image; why a 3rd party app?

* * *

​

Looks like the start of a good shopping list for AV offerings. I want something that has a secure browser connection (like KIS's 'Safe Money'). AVG Free has nothing like that. Currently using browser incognito windows for my 'secure' browser', which is no solution at all.

Thanks for the response, harlan4096. Much appreciated.

bd

 

[borkduck]

some options for checkpoint


zone alarm extreme Renewal 18$ 5 devices

harmony advanced CheckPoint License WebProtection Harmony Endpoint Advanced CP-HAR-EP-ADVANCED-1Y - 25$ 1 device
harmony basic CheckPoint License Software Harmony Endpoint Basic Protection CP-HAR-EP-BASIC-1Y 14$ 1 device


harmony extension Serious Discussion - [Extension]Checkpoint harmony web protection free unlimited and works with any av since its an extension



zonealarm beta is free too Download ZoneAlarm Software

Thanks for the steer. Much appreciated.

bd

 

[Vitali Ortzi]

Yep. I miss 'em mucho...

bd



User Access Control -> set to Always Notify.
Currently set at Level 3

Browser(s) and extensions: Firefox, Edge (occasionally; really slows things down!) -> please specify which add-ons do You use, for example Ublock Origin / Ublock Origin Lite, to block ads.
None; formerly (on old box) KIS, Video DL Helper on FFox. No add blockers (tho sites frequently tell me that I need to 'turn off my ad blocker'. Another thing I don't get about the interwebs...

Secure DNS -> for example: Cloudflare (1.1.1.1)
Don't have any at the moment that I'm aware of. Is this included in some/most full version stand-alone AV suites?

Desktop VPN -> maybe You don't need this service, if a desktop and don't connect to public Wi-Fis
Desktop ethernet-only connection; public unless I need to access the printer, then switch to private

Password manager -> use a 3rd party tool, don't use integrated manager in browsers.
Don't have, have never used; keep all PW's in a secure location separate from the box

File and Photo backup -> any cloud service to back up data?
No cloud service of any kind

System recovery -> full system back up image solution, such as Macrium Reflect or Hasleo.
Win11 system image; why a 3rd party app?

* * *

​

Looks like the start of a good shopping list for AV offerings. I want something that has a secure browser connection (like KIS's 'Safe Money'). AVG Free has nothing like that. Currently using browser incognito windows for my 'secure' browser', which is no solution at all.

Thanks for the response, harlan4096. Much appreciated.

bd

Symantec and checkpoint extensions are better then majority of other av extensions and chrome , edge etc is already sandbox , secure by default so I wouldn't really look specifically for a secure browser (btw some of the "secure browsers" are just chrome outdated versions of chrome Wich actually reduces security)

 

[Vitali Ortzi]

Serious Discussion - [Extension]Checkpoint harmony web protection

Chrome https://chromewebstore.google.com/detail/harmony-web-protection-ad/deakbjemijlmlcehdgejmdpekkceodmk/reviews Firefox (checkpoint domain for xpi file as I can't find the id in the store ) https://sc1.checkpoint.com/sba/ga/check_point_sandblast_agent_for_browsers.xpi Checkpoint harmony...

malwaretips.com

Serious Discussion - [Extension] Symantec browser protection(Symantec intelligence)

Symantec browser protection is an extension that brings Symantec STAR(Symantec intelligence) and is lightweight (lighter then trafficlight , Malwarebytes , avira and avast and many more extensions ) Download is availability is for chromium browsers exclusively (at least currently but Firefox...

malwaretips.com

Btw if you want an API key for checkpoint threat emulation and extraction I can dm you with an API key

Another tip turn on enhanced safe browsing in the browser it helps a little as well



Btw if you use chromium (chrome based browser) add this as well Microsoft Defender Browser Protection - Chrome Web Store


Because you have a high end pc you shouldn't feel much of a slowdown in browsing even with these three extensions although I would still recommend putting checkpoint into background scanning so it doesn't reduce page loading

Basically with Symantec intelligence (tons of feeds ) , quad9(lots of feeds , google /Microsoft (intelligence from a ton of users , checkpoint that has a ton of feeds , ai like plus zero pishing that work really well in detecting pishing pages that feeds can't detect

Should make any secure browser much worse in detection and the only feature missing would be a anti keylogger (scrambling of keys ) but there are free programs that offer that feature

 

[harlan4096]

Yep. I miss 'em mucho...

bd



User Access Control -> set to Always Notify.
Currently set at Level 3

Browser(s) and extensions: Firefox, Edge (occasionally; really slows things down!) -> please specify which add-ons do You use, for example Ublock Origin / Ublock Origin Lite, to block ads.
None; formerly (on old box) KIS, Video DL Helper on FFox. No add blockers (tho sites frequently tell me that I need to 'turn off my ad blocker'. Another thing I don't get about the interwebs...

Secure DNS -> for example: Cloudflare (1.1.1.1)
Don't have any at the moment that I'm aware of. Is this included in some/most full version stand-alone AV suites?

Desktop VPN -> maybe You don't need this service, if a desktop and don't connect to public Wi-Fis
Desktop ethernet-only connection; public unless I need to access the printer, then switch to private

Password manager -> use a 3rd party tool, don't use integrated manager in browsers.
Don't have, have never used; keep all PW's in a secure location separate from the box

File and Photo backup -> any cloud service to back up data?
No cloud service of any kind

System recovery -> full system back up image solution, such as Macrium Reflect or Hasleo.
Win11 system image; why a 3rd party app?

* * *

​

Looks like the start of a good shopping list for AV offerings. I want something that has a secure browser connection (like KIS's 'Safe Money'). AVG Free has nothing like that. Currently using browser incognito windows for my 'secure' browser', which is no solution at all.

Thanks for the response, harlan4096. Much appreciated.

bd

About Secure DNS, You can change / add it in Your W11 network settings: A List of Free and Public DNS Servers for 2024

Also, FireFox has its own Secure DNS that allows to enabled Cloudflare.

Ok, then please edit Your 1st post and add all the changes and missing data in Your config, thanks.

 

[borkduck]

About Secure DNS, You can change / add it in Your W11 network settings: A List of Free and Public DNS Servers for 2024

Also, FireFox has its own Secure DNS that allows to enabled Cloudflare.

Ok, then please edit Your 1st post and add all the changes and missing data in Your config, thanks.

FFox already had Default DNS protection enabled. Ditto Win11(DNS Server: Automatic (DHCP).

I have a feeling I'm building a mountain out of a molehill. Need to just find a reliable internet security suite a la KIS and fuggedaboutit. Pretty sure AVG isn't gonna be it, though.

Thanks,

bd

 

[Vitali Ortzi]

FFox already had Default DNS protection enabled. Ditto Win11(DNS Server: Automatic (DHCP).

I have a feeling I'm building a mountain out of a molehill. Need to just find a reliable internet security suite a la KIS and fuggedaboutit. Pretty sure AVG isn't gonna be it, though.

Thanks,

bd

I'm using ESET instead on one of my machines and it's pretty good really love that I can check reputation of each file used to have Kaspersky on that system but since ksn is getting a reduction of user base I have decided to move (I still upload suspicious files to their threat intelligence as it accurately marks safe files )

ESET has safe browsing but personally I don't use it and instead use brave browser for everything and hitmanpro alert as my anti keylogger lately but there are a ton of free anti keyloggers that work well too

 

[simmerskool]

(I still upload suspicious files to their threat intelligence as it accurately marks safe files )

fyi iirc last time I checked I could no longer reach Kaspersky threat intelligence portal from US.

 

[RoboMan]

My two cents: you mentiomed you use no ad-blocker because you usually need to disable it. I'd specially recommend using an adblocker, like uBlock, at least with just a few filter lists enabled to avoid browsing issues. Ad-blocking will reduce significantly malvertising and drive-by downloads, which is a potential threat in 2024.

 

[Vitali Ortzi]

My two cents: you mentiomed you use no ad-blocker because you usually need to disable it. I'd specially recommend using an adblocker, like uBlock, at least with just a few filter lists enabled to avoid browsing issues. Ad-blocking will reduce significantly malvertising and drive-by downloads, which is a potential threat in 2024.

he can use optimzed lists and brave adblocker GitHub - yokoffing/filterlists: Collection of blocklists to fill in the gaps then less websites will want him to disable it

 

[Victor M]

I have a feeling I'm building a mountain out of a molehill. Need to just find a reliable internet security suite

No AV suite is able to offer 100% protection. Each has weakness. So you compensate by adding security layers. It is normal when it comes to security.