Advanced Plus Security ErzCrz Security Config 2026

Last updated
Mar 15, 2026
How it's used?
For home and private use
Operating system
Windows 11
Other operating system
N/A
On-device encryption
BitLocker Device Encryption for Windows
Log-in security
    • Biometrics (Windows Hello PIN, TouchID, Face, Iris, Fingerprint)
Security updates
Allow security updates and latest features
Update channels
Allow stable updates only
User Access Control
Always notify
Smart App Control
Off
Network firewall
Enabled
About WiFi router
Sky Router with built-in IPV4/IPv6 Firewall
Real-time security
ESET Security Premium
CyberLock
Firewall security
Other - Internet Security (3rd-party)
About custom security
ESET Security Essentials - Default Settings
Cyberlock - ON - Firewall Rules for Unsafe Items. SmartFirewall Recommended, Require Captcha to exit.
RansomwareGuard
Periodic malware scanners
Malwarebytes
Emsisoft
Malware sample testing
I do not participate in malware testing
Environment for malware testing
N/A
Browser(s) and extensions
Primary: Edge with Osprey, uBlock Origin Lite & ESET
Secondary: Firefox with uBlock Origin & Osprey Browser Extension & ESET
Secure DNS
EU4DNS DNS. My ISP Sky DNS isn't secure enough.
Desktop VPN
ESET VPN Unlimited with ESET Premium
Password manager
Keepass 2.x
Maintenance tools
Windows built-in Disk Clean-up and Storage Sense.
File and Photo backup
AOMEI Backupper Pro - Monthly Full Backups & Weekly Differential Backups
Subscriptions
    • None
System recovery
Lenovo Built in Recovery, AOMEI Backupper Pro Recovering Environment & Bootable USB
Risk factors
    • Browsing to popular websites
    • Working from home
    • Making audio/video calls
    • Opening email attachments
    • Buying from online stores, entering banks card details
    • Downloading software and files from reputable sites
    • Gaming
    • Streaming audio/video content from trusted sites or paid subscriptions
Computer specs
Notable changes
See First Post Spoilers
08.02.2026 - 2026 setup - ESET Security Essentials, CyberLock, RansomwareGuard
11.03.2026 - Just minor tweak to DNS to DNS4EU servers.
15.03.2026 - Upgraded ESET to Premium
----------------------------------------
Disclaimer we use date format DD/MM/YYYY here in the UK
What I'm looking for?

Looking for minimum feedback.

Removed Privacy Badger for now, just trying to identify overlap with it and uBO and some page slows.
Did some CF testing but doesn't always seem to be filtering or just not showing in UI. I am seeing how the H_C setup goes but have been tempted with some of the BF offers or going with Emsisoft but who knows.
 
What's BF? BlackFog? Bitdefender Free? 🤔
Sorry, Black Friday. I forget to add proper context now and then :D

Just being a bit indecisive and with the layered approach I'm currently using it's probably enough, just having 3rd party sometimes makes you think it's doing more but MD is just if not more active protecting more things ;)
 
Back to my quandary, I don't have office 365 and only Home version of Win 11 so don't have extra Microsoft Defender features but that's what ConfigreDefender is for. Think I'll give CF Beta 2 another go.
 
Not sure when it started appearing but I noted today that MDCoreSvc Microsoft Defender Core Service was running even though I was testing out CIS Beta 2 with a couple of things today.

1701460289734.png


It'll probably just be MD until the next beta comes out but just happen to notice this service still running even though I have periodic MD scanning disabled. Not had time to check if it's the same with other AVs,
 
Not sure when it started appearing but I noted today that MDCoreSvc Microsoft Defender Core Service was running even though I was testing out CIS Beta 2 with a couple of things today.

View attachment 279957

It'll probably just be MD until the next beta comes out but just happen to notice this service still running even though I have periodic MD scanning disabled. Not had time to check if it's the same with other AVs,
Interesting. I don't have this service on my system.
 
  • Like
Reactions: Nevi and oldschool
It's still there with Emsisoft installed so it must be just a thing now. I do have the early updates enabled in Win 11 but just something I noticed.

I see. So you know on Windows 11, MD's "Antimalware Service Executable/MsMpEng.exe" always keeps running even when a third-party AV is installed. So maybe MS has now created this new "Antimalware Core Service" which will be the one that will now keep running always. Or maybe a name is happening where "Antimalware Service Executable" will be called "Antimalware Core Service" in the future.
What's the name of the exe file of this service?
 
  • Like
Reactions: Nevi and harlan4096
I see. So you know on Windows 11, MD's "Antimalware Service Executable/MsMpEng.exe" always keeps running even when a third-party AV is installed. So maybe MS has now created this new "Antimalware Core Service" which will be the one that will now keep running always. Or maybe a name is happening where "Antimalware Service Executable" will be called "Antimalware Core Service" in the future.
What's the name of the exe file of this service?
Yeah, must just be a something keeping your account protection etc monitored.

C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpDefenderCoreService.exe
1701522490941.png

Not using much resource at all which is great.

On a different note, not sure I'll renew Emsisoft though it is good. CF/MD probably my plans for 2024.
 
So you know on Windows 11, MD's "Antimalware Service Executable/MsMpEng.exe" always keeps running even when a third-party AV is installed. So maybe MS has now created this new "Antimalware Core Service" which will be the one that will now keep running always.
There is no instance of MsMpEng running on our Windows 11 systems with Kaspersky. I'll confirm and update here regarding this and the new service.
 
  • Like
Reactions: harlan4096
There is no instance of MsMpEng running on our Windows 11 systems with Kaspersky. I'll confirm and update here regarding this and the new service.
It may not always run on systems that were upgraded to 11 from 10 without freshly installing windows. Or if it was disabled using something like Defender Control or other manual method.
 
It may not always run on systems that were upgraded to 11 from 10 without freshly installing windows. Or if it was disabled using something like Defender Control or other manual method.
Ah okay. It's Win 11 as it was shipped and SAC disabled. Doesn't really matter since using MD anyway but just something I noticed when I was trying out a couple of different configurations ;) Thanks for the info.
 
Good seeing MD being more optimized.
RAM is regularly in the teens between both processes.
It may not always run on systems that were upgraded to 11 from 10 without freshly installing windows.
Indeed, mine was clean-installed earlier this year. I'm happy with 22H2's performance