Advanced Plus Security ErzCrz Security Config 2026

Last updated
Mar 15, 2026
How it's used?
For home and private use
Operating system
Windows 11
Other operating system
N/A
On-device encryption
BitLocker Device Encryption for Windows
Log-in security
    • Biometrics (Windows Hello PIN, TouchID, Face, Iris, Fingerprint)
Security updates
Allow security updates and latest features
Update channels
Allow stable updates only
User Access Control
Always notify
Smart App Control
Off
Network firewall
Enabled
About WiFi router
Sky Router with built-in IPV4/IPv6 Firewall
Real-time security
ESET Security Premium
CyberLock
Firewall security
Other - Internet Security (3rd-party)
About custom security
ESET Security Essentials - Default Settings
Cyberlock - ON - Firewall Rules for Unsafe Items. SmartFirewall Recommended, Require Captcha to exit.
RansomwareGuard
Periodic malware scanners
Malwarebytes
Emsisoft
Malware sample testing
I do not participate in malware testing
Environment for malware testing
N/A
Browser(s) and extensions
Primary: Edge with Osprey, uBlock Origin Lite & ESET
Secondary: Firefox with uBlock Origin & Osprey Browser Extension & ESET
Secure DNS
EU4DNS DNS. My ISP Sky DNS isn't secure enough.
Desktop VPN
ESET VPN Unlimited with ESET Premium
Password manager
Keepass 2.x
Maintenance tools
Windows built-in Disk Clean-up and Storage Sense.
File and Photo backup
AOMEI Backupper Pro - Monthly Full Backups & Weekly Differential Backups
Subscriptions
    • None
System recovery
Lenovo Built in Recovery, AOMEI Backupper Pro Recovering Environment & Bootable USB
Risk factors
    • Browsing to popular websites
    • Working from home
    • Making audio/video calls
    • Opening email attachments
    • Buying from online stores, entering banks card details
    • Downloading software and files from reputable sites
    • Gaming
    • Streaming audio/video content from trusted sites or paid subscriptions
Computer specs
Notable changes
See First Post Spoilers
08.02.2026 - 2026 setup - ESET Security Essentials, CyberLock, RansomwareGuard
11.03.2026 - Just minor tweak to DNS to DNS4EU servers.
15.03.2026 - Upgraded ESET to Premium
----------------------------------------
Disclaimer we use date format DD/MM/YYYY here in the UK
What I'm looking for?

Looking for minimum feedback.

After testing for a few days, definitely faster without Adguard in a lot of ways. In a bit of a paranoid mood so I might try out NoScript again but I found that always works best when you're just visiting a regular set of sites and then happy click something by mistake. Still, a useful tool and without uBO Origin capabilities the paranoid me might give it a go.
 
After testing for a few days, definitely faster without Adguard in a lot of ways. In a bit of a paranoid mood so I might try out NoScript again but I found that always works best when you're just visiting a regular set of sites and then happy click something by mistake. Still, a useful tool and without uBO Origin capabilities the paranoid me might give it a go.
Yeah, AdGuard definitely slows down even though the slowness in most cases would be acceptable for most people. But switching from ADG Desktop to uBO, the speed difference is immediately noticeable.
I tried the route of using uBO in hard mode a few years ago and it was not bad. But the amount of things I had to whitelist was a lot. So in the end didn't make much difference. Also just remembered, for whatever reason, at that time some sites with a lot of javascripts were slightly slower to load only in Firefox with uBO hard mode compared easy mode. That was a very odd thing for me because I expected the opposite.
I could never get comfortable with NoScript's UI. I used uMatrix when it was still a thing and uBO hard mode after that.
 
I tried the route of using uBO in hard mode a few years ago and it was not bad. But the amount of things I had to whitelist was a lot. So in the end didn't make much difference.
Similar to you, I've used hard mode and would revert to medium mode for tricky sites, which is fairly problem-free. In the end, it almost made sense to just use medium mode. 🤔
 
Similar to you, I've used hard mode and would revert to medium mode for tricky sites, which is fairly problem-free. In the end, it almost made sense to just use medium mode. 🤔
Yeah, AdGuard definitely slows down even though the slowness in most cases would be acceptable for most people. But switching from ADG Desktop to uBO, the speed difference is immediately noticeable.
I tried the route of using uBO in hard mode a few years ago and it was not bad. But the amount of things I had to whitelist was a lot. So in the end didn't make much difference. Also just remembered, for whatever reason, at that time some sites with a lot of javascripts were slightly slower to load only in Firefox with uBO hard mode compared easy mode. That was a very odd thing for me because I expected the opposite.
I could never get comfortable with NoScript's UI. I used uMatrix when it was still a thing and uBO hard mode after that.

Agreed about uBO Medium mode with some only allow TLD rules and blocking HTTPs Rules. The below are my default in uBO but it gets tedious when some streaming sites require xhr whitelisting to work but still block the streaming ads.

! Block beacons, obsolete plugins and websocket biderectional data connections on insecure websites
|HTTP://*$ping,object,websocket,important

! Block potentially unsafe third-party content linking to unsafe unencrypted websites
|HTTP://*$third-party,~document,~stylesheet,~image,~media,important

! Warn when opening webpages on top level domains and countries I never visit
||*$document,domain=~com|~info|~io|~eu|~net|~org|~uk|~ms|~gov

I use Edge for default browser because Microsoft Defender works best with it but I inevitably have to stream on Firefox for sites with Ads that I need uBO Origin for.

NoScript can be a little tedious and I miss that the Mcafee Site Advisor would tell you for example that it's just a site media server but uBO is my favourite for all around protection ugh MV3 /shrug though uBOL is fine in Optimal for ad blocking but I miss the control of Origin.

Sorry for wall of text. I tend to ramble on a bit when I'm reducing steroids...
 
Well, Firefox does recognise MD / WF in About:support so I suppose it doesn't matter which browser, just use what works best for you ;)

1746835486877.png
 
Just something different I noticed. I decided on trying out Intel Driver Assistant and updated Intel Iris xe graphics driver from 30.01.101.166 to 32.0.101.6790. Well, MyAsus took over and rolled back the driver to 30.01.. Not that I had issue with current driver but was in response to a Hogwarts Legacy warning about issues with the driver but turns out it ran anyway whether I updated it or not. Just an observation. I suppose MyAsus will update the driver when it wants :)
 
Try repairing the database:
is there any error code?
I didn't see any error code. Works fine now. I've checked that I at least have a current back up. Probably just some sort of glitch though not sure what was the cause. Will have to look at the windows event viewer for any clues.
 
Just reverting to Microsoft Defender, DefenderUI (because I like it over CD), CyberLock and WFC.
A bit intermittent with WFC as I've seen some network stutters now and then with it it but can't quite whether WFC was the cause.
Hi, @ErzCrz, how are you? Just a question about Comodo. When you used Comodo, did you use CIS or did you use CF + MD? Thanks! :)
 
  • Wow
Reactions: Sorrento
Hi, @ErzCrz, how are you? Just a question about Comodo. When you used Comodo, did you use CIS or did you use CF + MD? Thanks! :)
Hi. I just use Comodo Firewall with CruelSister settings. I have installed it now and then to assist people using it but I use CyberLock so it's overkill with Comodo. Anyway, just use CS's settings, don't mess about with it much and it'll be a great set and forget. Oh yeah, you have to disable MD realtime protection temporarily to install KillSwitch as MD detects the installer as a Trojan and the installation fails. Once installed, remember to re-enable MD realtime proteciton. You'll then see an CFW/CIS program update which updates the signature of KillSwitch and the update will run fine.

You can enable IPv6 filtering but you'll need to redo the Firewall Task - Stealth Ports and then create the following global rules for IPv6 to work.

Allow ICMP In IPv6 - Packet to big
Allow ICMP In IPv6 - Time Exceeded
Allow ICMP In IPv6 - Custom type 134 - 0 (Router Advertisement required rule)
Allow ICMP In IPv6 - Custom type 135 - 0 (Neighbour solicitation required rule)
Allow ICMP In IPv6 - Custom type 136 - 0 (Neighbour advertisement required rule)

You don't need HIPS with Containment set to Restricted or Untrusted.
Webfiltering doesn't work with anything other than firefox and internet explorer so you can technically disable that as well though I would leave it unless you experience issues.
 
Trialled ESET for 15 days, it was light on the system but I felt some system slows here and there. Comparing it with Microsoft Defender and CyberLock (and DefenderUI or ConfigureDefender) I feel that setup is just as secure if not more so. It was within the 30-days so a refund was simple but I may revisit ESET at some stage again in the future. My laptop is just notably felt faster overall without ESET. I was running Eset with CL, not issues there. Anyway, it was worth giving it a go and while it's a decent product, just not right for me and my setup currently. I'd still recommend it to people who want to use 3rd party AV :)
 
You have just killed ESET; it is the main marketing point for 😁
I've not killed ESET :D It was light on the system, just with out it things were a little snappier and without using ESET's secure browsing thpere was a fraction less delay in page loads. Comparing it with other 3rd party products that use more ram or cpu, it's on top, for sure and if I hadn't removed it to test the system without it as a comparative, I was surprised that things were a little quicker but maybe that's Microsoft resource management or something. People say Avast is fast on their system, even in Av-comparative tests but when I tested it out in the past, it affected performance as well. Maybe I'm unique /shrug.
 
I've not killed ESET :D It was light on the system, just with out it things were a little snappier and without using ESET's secure browsing thpere was a fraction less delay in page loads. Comparing it with other 3rd party products that use more ram or cpu, it's on top, for sure and if I hadn't removed it to test the system without it as a comparative, I was surprised that things were a little quicker but maybe that's Microsoft resource management or something. People say Avast is fast on their system, even in Av-comparative tests but when I tested it out in the past, it affected performance as well. Maybe I'm unique /shrug.
Never used ESET before, so cannot compare with Avast, but currently using AVG, its cpu usage is equal or less than MSD, regarding RAM utilization, it is more than MSD by 50% or less.