Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Software
Security Apps
Comodo
Comodo-Bitdefender Clash
Message
<blockquote data-quote="JoseyWales" data-source="post: 751708" data-attributes="member: 73787"><p>Here's my typical windows setup, including hibernate removal and options for DNS settings that I disable while the fresh copy is still <em><u>offline</u></em>...I also disable anything that has to do with Ip6 settings and permissions-</p><p>[SPOILER="Harden Windows 8.1"]Computer Browser (manual) (finds other PCs in the network)</p><p>Distributed Link Tracking Client (automatic) (maintain shortcuts if source file name has changed)</p><p>DNS client (automatic) (caches previously looked up domain names)</p><p>Family Safety (manual) (compatability stub for Vista apps)</p><p>Function Discovery Provider Host (manual) (HomeGroup)</p><p>Function discovery resource publication (manual) (HomeGroup)</p><p>HomeGroup Listener (manual) (HomeGroup)</p><p>HomeGroup Provider (manual) (HomeGroup)</p><p>Internet Connection Sharing (disabled) (makes PC act as router)</p><p>IP Helper (automatic) (IPv6 tunneling)</p><p>KtmRm for Distributed Transaction Coordinator (manual) (MS recommends to stop this service if not needed)</p><p>Link Layer Topology discovery mapper (manual) (network discovery)</p><p>Microsoft iSCSI Initiator Service (manual) (allows LAN or Internet based storage)</p><p>Net. TCP port Sharing service (disabled)</p><p>NetLogon (manual) (logon to Windows Server)</p><p>Network Access Protection Agent (manual) (reports security configuration)</p><p>Network Connected Devices Auto-Setup (manual) (autosetup devices in the network)</p><p>Network Connectivity Assistant (manual) (works with DirectAccess to provide setup of network devices. Relies on DNS client, IP Helper, Network Store Interface Service and Base Filtering Engine)</p><p>Peer Name Resolution Protocol (manual)</p><p>Peer Networking Grouping (manual) (HomeGroup, remote assistance)</p><p>Peer Networking Identity Mgr (manual) (HomeGroup, remote assistance)</p><p>Performance Counter DLL Host (manual) (allows remote query to performance counters)</p><p>Performance Logs & Alerts (manual) (collects remote and local perf data)</p><p>PNRP Machine Name Publication Service (manual) (server that responds with a machine name)</p><p>Printer Extensions and Notifications (manual) (receives input from remote printers and runs printer custom dialog boxes. Runs as LocalSystem if exploited)</p><p>Quality Windows Audio Video Experience (manual) (multimedia server)</p><p>Remote Access Auto Connection Mgr (manual)</p><p>Remote Access Connection Manager (manual) (dialup, VPN)</p><p>Remote Desktop Configuration (manual)</p><p>Remote Desktop Service (manual) (server allowing remote control)</p><p>Remote Desktop Service UserMode Port Redirector (manual)</p><p>Remote Registry (disabled) (allow remote PCs to modify your registry)</p><p>Routing and Remote Access (disabled)</p><p>Secondary logon (manual) (allow command line runas option to run programs as admin)</p><p>Secure Socket Tunneling Protocol service (manual) (VPN)</p><p>Sensor Monitoring Service (manual) (disable if you don't have any light sensors etc)</p><p>Server (automatic) (HomeGroup, File and Printer Sharing)</p><p>SNMP Trap (manual)</p><p>SSDP Discovery (manual)</p><p>TCP/IP NetBIOS Helper (automatic)</p><p>Telephony (manual) (affects Remote Access Connection mgr/ VPN)</p><p>UPnP Device host (manual)</p><p>Web Client (manual)</p><p>Windows Connect Now Config Registra (manual) (Wireless Setup - simplified configuration)</p><p>Windows Error Reporting Service (manual) (reports system problems to MS and fetches solutions)</p><p>Windows Event Collector (manual) (allow remote subscription to log events)</p><p>Windows Media Player Network Sharing service (manual)</p><p>Windows Remote Management (manual) (Server, listens for remote requests )</p><p>WMI Performance Adapter (manual) (provides performance data to other PC collecting it)</p><p>Work Folders (manual) (sync folders with server)</p><p>Workstation (automatic) (HomeGroup, AD)</p><p>Disable all references to Ip6</p><p>Windows Internet Options set to Med-High Security</p><p>UAC settings to full</p><p>Remove Hibernate File - powercfg.exe -h off</p><p></p><p>-Permit internet trafficking at this point-</p><p></p><p>Install preferred security suite at the first online connection(ie Comodo Premium)</p><p>Setup standard user account...log onto that account to complete system setups</p><p>Setup preferred browser(ie Dragon/Opera)</p><p>Setup preferred email app</p><p>Always use the standard account for the remainder of your system usage.[/SPOILER]</p></blockquote><p></p>
[QUOTE="JoseyWales, post: 751708, member: 73787"] Here's my typical windows setup, including hibernate removal and options for DNS settings that I disable while the fresh copy is still [I][U]offline[/U][/I]...I also disable anything that has to do with Ip6 settings and permissions- [SPOILER="Harden Windows 8.1"]Computer Browser (manual) (finds other PCs in the network) Distributed Link Tracking Client (automatic) (maintain shortcuts if source file name has changed) DNS client (automatic) (caches previously looked up domain names) Family Safety (manual) (compatability stub for Vista apps) Function Discovery Provider Host (manual) (HomeGroup) Function discovery resource publication (manual) (HomeGroup) HomeGroup Listener (manual) (HomeGroup) HomeGroup Provider (manual) (HomeGroup) Internet Connection Sharing (disabled) (makes PC act as router) IP Helper (automatic) (IPv6 tunneling) KtmRm for Distributed Transaction Coordinator (manual) (MS recommends to stop this service if not needed) Link Layer Topology discovery mapper (manual) (network discovery) Microsoft iSCSI Initiator Service (manual) (allows LAN or Internet based storage) Net. TCP port Sharing service (disabled) NetLogon (manual) (logon to Windows Server) Network Access Protection Agent (manual) (reports security configuration) Network Connected Devices Auto-Setup (manual) (autosetup devices in the network) Network Connectivity Assistant (manual) (works with DirectAccess to provide setup of network devices. Relies on DNS client, IP Helper, Network Store Interface Service and Base Filtering Engine) Peer Name Resolution Protocol (manual) Peer Networking Grouping (manual) (HomeGroup, remote assistance) Peer Networking Identity Mgr (manual) (HomeGroup, remote assistance) Performance Counter DLL Host (manual) (allows remote query to performance counters) Performance Logs & Alerts (manual) (collects remote and local perf data) PNRP Machine Name Publication Service (manual) (server that responds with a machine name) Printer Extensions and Notifications (manual) (receives input from remote printers and runs printer custom dialog boxes. Runs as LocalSystem if exploited) Quality Windows Audio Video Experience (manual) (multimedia server) Remote Access Auto Connection Mgr (manual) Remote Access Connection Manager (manual) (dialup, VPN) Remote Desktop Configuration (manual) Remote Desktop Service (manual) (server allowing remote control) Remote Desktop Service UserMode Port Redirector (manual) Remote Registry (disabled) (allow remote PCs to modify your registry) Routing and Remote Access (disabled) Secondary logon (manual) (allow command line runas option to run programs as admin) Secure Socket Tunneling Protocol service (manual) (VPN) Sensor Monitoring Service (manual) (disable if you don't have any light sensors etc) Server (automatic) (HomeGroup, File and Printer Sharing) SNMP Trap (manual) SSDP Discovery (manual) TCP/IP NetBIOS Helper (automatic) Telephony (manual) (affects Remote Access Connection mgr/ VPN) UPnP Device host (manual) Web Client (manual) Windows Connect Now Config Registra (manual) (Wireless Setup - simplified configuration) Windows Error Reporting Service (manual) (reports system problems to MS and fetches solutions) Windows Event Collector (manual) (allow remote subscription to log events) Windows Media Player Network Sharing service (manual) Windows Remote Management (manual) (Server, listens for remote requests ) WMI Performance Adapter (manual) (provides performance data to other PC collecting it) Work Folders (manual) (sync folders with server) Workstation (automatic) (HomeGroup, AD) Disable all references to Ip6 Windows Internet Options set to Med-High Security UAC settings to full Remove Hibernate File - powercfg.exe -h off -Permit internet trafficking at this point- Install preferred security suite at the first online connection(ie Comodo Premium) Setup standard user account...log onto that account to complete system setups Setup preferred browser(ie Dragon/Opera) Setup preferred email app Always use the standard account for the remainder of your system usage.[/SPOILER] [/QUOTE]
Insert quotes…
Verification
Post reply
Top