Advanced Plus Security (From forum thread)dronefox1166's PC Security Config

[dronefox1166]

Hello !

my configuration, I don't know if is correct, i'm french...

 

[Back3]

Bienvenue !
If you have an issue with your PC, can you restore an image to make it run smoothly? I use Macrium...
For my documents and pictures, I make a backup on a second drive and also use the cloud. What do you do?

Add LanguageTool Extension to your browser. It will help you correct your spelling and grammar mistakes whenever you write something in the forum.

Grammar Checker for Chrome - LanguageTool

Advanced Grammar Checker and AI Paraphraser for your Chrome browser

languagetool.org

 

[dronefox1166]

Bienvenue !
If you have an issue with your PC, can you restore an image to make it run smoothly? I use Macrium...
For my documents and pictures, I make a backup on a second drive and also use the cloud. What do you do?

Merci (thanks)
I have a Synology NAS for backup for my documents and pictures. I also have a Mega.nz account and other cloud services.

 

[dronefox1166]

I don't use "Macrium Reflect" but I know this program. Thanks for share this idea/tips.

 

[harlan4096]

Please reflect those backup settings in Your config, thanks!

You can set Your cloud services in Personal Files & Photos backup.

Also consider to set Windows UAC to Always Notify.

 

[Shadowra]

Hello

I didn't know Blockada existed on Windows... however it's not a vpn, but rather a solution like NextDNS.
I recommend you to get a real VPN for this purpose.

You can also switch the UAC to Always Notified for better security.

Your backups, I saw that you use a NAS. Make system backups and backups of your files OTHER than on your NAS. Indeed, if one day you are victim of a Ransomware attack, it will have no difficulty in encrypting the NAS files... I recommend you to make a copy on removable media for security.

Otherwise the rest is good for me

 

[Back3]

OSArmor free version has not been updated in the last years. Consider reading about Simple Windows Hardening, Configure Defender and Hard_ Configurator. There are good threads about those applications in this forum.

 

[dronefox1166]

The UAC at max level does not match for me. I mean it's not a gain of time. I think before clic on a new program.

 

[dronefox1166]

How I have to put : "Defaut security level" on Hard_Configurator ?

Thx !

 

[Back3]

How I have to put : "Defaut security level" on Hard_Configurator ?

Thx !

Hard_ Configurator
Run Hard_Configurator and follow the instructions which are displayed on the first run.
It is recommended to allow Hard_Configurator making the System Restore Point, whitelisting the autoruns, and applying Recommended Settings. The restore point can be skipped when the kind of rollback software was installed.
After those actions, Windows restart will be required.
If Windows Defender is primary real-time protection, then <ConfigureDefender> option in Hard_Configurator (left violet button) can be used to activate advanced Windows Defender settings. It is recommended to apply <HIGH> Protection Level. The Windows restart is required to apply the new settings.
The firewall hardening is also possible by using <FirewallHardening> option (right violet button). It is recommended to apply 'Recommended H_C' rules and turn ON "Start logging events'. The Windows restart is required to apply the new settings.

What I would do:
Try Configure Defender at High Protection Level. Then install Simple Windows Hardening. For the first 2 days, just enable Windows Hardening. Then also enable Software Restriction Policies. If something goes wrong, check Blocked Events and Manage the Whitelist. With the other protection apps you already have, like Simplewall and KeyScrambler, that would be enough.

 

[dronefox1166]

Hard_ Configurator
Run Hard_Configurator and follow the instructions which are displayed on the first run.
It is recommended to allow Hard_Configurator making the System Restore Point, whitelisting the autoruns, and applying Recommended Settings. The restore point can be skipped when the kind of rollback software was installed.
After those actions, Windows restart will be required.
If Windows Defender is primary real-time protection, then <ConfigureDefender> option in Hard_Configurator (left violet button) can be used to activate advanced Windows Defender settings. It is recommended to apply <HIGH> Protection Level. The Windows restart is required to apply the new settings.
The firewall hardening is also possible by using <FirewallHardening> option (right violet button). It is recommended to apply 'Recommended H_C' rules and turn ON "Start logging events'. The Windows restart is required to apply the new settings.

What I would do:
Try Configure Defender at High Protection Level. Then install Simple Windows Hardening. For the first 2 days, just enable Windows Hardening. Then also enable Software Restriction Policies. If something goes wrong, check Blocked Events and Manage the Whitelist. With the other protection apps you already have, like Simplewall and KeyScrambler, that would be enough.

View attachment 266011

Thanks but the other day, I don't run any software, because he put "administrators rights or tell at your administrator" but I am the only user and administator.
I have to put msconig and restart on safe mode to uninstall Hard_configurator.

Ok, I will follow your recommandations.


Thanks

 

[dronefox1166]

Also, I use Excel (office 2019) and the other day, he destroy all my VS scripts and macros on my documents...

I want to configure manually this when I see Office script etc.

 

[Back3]

I use the paid version of Macrium. Before installing a new security app, I just do an Incremental image: it takes 2 minutes at most. Instead of uninstalling that security app, I restore that image. My computer stays clean with no registry remnants.

 

[dronefox1166]

Can I restore the image system on a external hard drive and clone it (from a external storage 2.5) on a new SSD M.2 NMVe ?

 

[Back3]

My PC has 2 drives: a SSD with Windows on it and a hard disk for data. I make images on that second drive and restore my SSD from those images. I have backups of my important stuff on external drives and online (Cloud).

 

[dronefox1166]

OSArmor free version has not been updated in the last years. Consider reading about Simple Windows Hardening, Configure Defender and Hard_ Configurator. There are good threads about those applications in this forum.

Anyway, it block some things on my computer. I delete it on the future if Hard_Configurator and Configure Defender are better and more efficient.
I will thing on that.

 

[Back3]

OSArmor has an excellent paid version. H_C, Configure Defender and SWH are free and excellent and the developper is very present on this forum. Esay to get help on issues.Been using SWH for 2 years with Microsoft Defender or F-Secure safe ( current)...My system is stable...and I think secure.

 

[Andy Ful]

Also, I use Excel (office 2019) and the other day, he destroy all my VS scripts and macros on my documents...

I want to configure manually this when I see Office script etc.

H_C settings only block macros (and VBA features) in MS Office. The macros are not destroyed - the original document does not change. If you want to configure MS Office restrictions manually, then set <Documents Anti-Exploit> = Adobe (or OFF).

Thanks but the other day, I don't run any software, because he put "administrators rights or tell at your administrator" but I am the only user and administator.

I am not sure what settings you applied. In Recommended Settings most applications should run without issues. Only the applications installed in custom locations (for example on non-system disk) will be blocked.

I have to put msconig and restart on safe mode to uninstall Hard_configurator.

It is not necessary. You can restore the Windows default settings by using the H_C option <Tools><Restore Windows Defaults>. If you want to uninstall H_C then you can use the option <Tools><Uninstall Hard_Configurator>.

Anyway, the suggestion about using simpler security like SWH + ConfigureDefender + FirewallHardening will serve you better. Hard_Configurator requires some learning.

 

[Andy Ful]

...
I want to configure manually this when I see Office script etc.

Do you mean that you need Marcos allowed?

 

[dronefox1166]

Do you mean that you need Marcos allowed?

Yes, I think. I mean, I use VB codes, etc. And one option delete all, I restore that, and it work fine now.