Basic Security Browneylad's PC secufity config

[browneylad]

Hi, been away for some months & so old incomplete configuration thread must have been deleted. Finished now with most specs I know. Please mention where to improve. Do not test malware or beta softwares yet & this is used mostly as home pc. Will add Macrium Reflect free soon.

Couple of questions:

Do I need extra firewall software?
I have heard Webroot can be used as secondary av so curious about possibility of having Kaspersky free/Norton/Avast as primary av then Webroot. I have to contact webroot support possibly. Is it feasible?

Would love a recommendation for clearing/ spam mails. Any program/extensions...

 

[CoherentCrayon]

Enable OS Security updates. Either switch Webroot to another paid AV which probably provides better protection (for example Bitdefender, Kaspersky, Emsisoft or F-Secure, ...) or install a free AV alongside Webroot (for example Avast Free or Bitdefender Free) (I think Webroot is compatible with other AVs)

 

[Rengar]

Enable UAC and set it to max
Enable Smartcreen.

 

[harlan4096]

Guys: "OS File Reputation" can't be enabled in W7, because is only available since W8+

 

[browneylad]

Yeah that bit I've been neglecting for a while. Protonvpn & some newer softwares popped up with requiring Microsoft security updates. Early 2018 I'm getting Win10, about 3 months. Suppose I should turn security updates on soon.
I have less clear idea about OS file rep thing as I'm no technical guy.

 

[Rengar]

Guys: "OS File Reputation" can't be enabled in W7, because is only available since W8+

Damn, didnt see it

 

[browneylad]

Enable UAC and set it to max
Enable Smartcreen.

Smartscreen is for IE? Webroots got a filer extension for it. Anyway I changed & Smartscreen is enabled now.

 

[harlan4096]

In W7 there is SmartScreen for IE (for sites), but not OS File Reputation (also called SmartScreen)

 

[browneylad]

Yes checked IE & turned on. Webroot has installed browser extension on both chrome & FF with their filter setting(which frankly just slows down the browser).
Now need to sort out a good av.

 

[harlan4096]

You may also consider:

- Enable Automatic OS Updates (off => Risky),
- Add HitMan Pro and Norton Power Ereser as on demand scanners...
- Use Macrium Reflect or AOMEI Backupper.
- Run manual backups of important data to external device.

Thanks for sharing Your config!

 

[browneylad]

Going to add Macrium free soon. I do have 1 more HDD & couple of external drives where I backup data once 2-3 weeks. I'm a docu & movie junkie so external device backup is most important, even more than cloud backups!
Probably can't afford hitman pro if I'm going after Norton or Avast as paid av.
UAC => always notify is same as max setting right?

Thanks to everyone for valuable suggestions. Tweaked some, will add more soon.

 

[harlan4096]

UAC => always notify is same as max setting right?

-> right

HitMan Pro, after the trial period, You can continue using it to run scans although without deletion features

 

[Exterminator]

Enable important OS updates.You can set OS Updates to download but do not install.
You could add an additional on demand scanner(s).
Have you considered migrating to Windows 10?
Apart from the lack of important OS security updates you have a secure config.
Thanks for sharing it with us

 

[JM Safe]

Enable OS Security Updates.

Add MalwareBytes Free or Norton Power Eraser.

Thanks for sharing.

 

[browneylad]

Hi Exterminator yes I'll be getting Win10 by January 2018.
Changed Security updates settings as advised.
Smartscreen is enabled in IE(as advised by most & pointed by harlan above)
Going to add hitmanpro but only as on demand scan(without deletion)

Couple of more tweaks maybe. Trawling through forum for a week or more to choose new av alongside webroot. Those help me decide discussion threads are great!

 

[browneylad]

Installed hitmanpro. On 30 trial days now. Installing free firewall tonight, hopefully it will be good.
AV choices narrowing down to Avast/Norton IS/Comodo. As said before help me decide threads discussions are great. But lots of varying opinions. :X3:
Webroot said to uninstall it first, install whatever my primary av then reinstall, just whitelist webroot exe etc.
Added anti miner to browser. AntiMiner - #1 Coin Minerblock

 

[Handsome Recluse]

Do I need extra firewall software?
I have heard Webroot can be used as secondary av so curious about possibility of having Kaspersky free/Norton/Avast as primary av then Webroot. I have to contact webroot support possibly. Is it feasible?

Outbound maybe because you use traditional antivirus.

 

[browneylad]

Yes right, webroot has this outdated setting of allow connection by default after 120 sec. What security software has that sort of allow policy? Only use it as its small & less resource hungry. (& I got it at cheaper price).

 

[Handsome Recluse]

Added anti miner to browser. AntiMiner - #1 Coin Minerblock

Don't Adguard and Origin already have rules for those?

 

[browneylad]

Don't Adguard and Origin already have rules for those?

I don't know honestly. If they have then I will remove it. Basically trying out fancy new extension.