Advanced Plus Security ErzCrz's PC Security Config

[ErzCrz]

I love Comodo's auto-containment feature

Isn't this module + Cyberlock kind of redundant? Why would you need an anti-executable to stop untrusted files from being ran, if such files will be contained by Comodo anyways?

Thanks for feedback. Agreed, Comodo's containment is great.

The two are sort of redundant together though CL blocked the POCs people posted about to kill Comodo processes. I have a lifetime CL licence and it's very low on resource usage. I haven't seen any conflicting issues running both.

I can also use the Smart Firewall feature in CL creating LOLbin block rules in windows firewall like Andy Ful's Firewall Hardening.WF runs along side CIS as CIS doesn't disable it.

Anyway, having temporarily removed CIS for 26H2 update, planning to do fresh CIS install later.

 

[ErzCrz]

Been trialling Malwarebytes Browser Guard though it's been making me do captcha for incognito searches. I might look at other options. So far using Quad9 working pretty well but still testing. Osprey would be what I would revert to if not using system set dns.

 

[ErzCrz]

Just a reminder for people to enable Silent Mode if gaming or resource intensive stuff with CIS installed. Checking with HWMonitor I found a couple of my cores were overheating while gaming for half an hour or so showing peak at 97C. Resetting the reading figures in HWMonitor and then running similar test including in higher intensity environments in a game, my cores stayed 84 for Package for my intel i7-HX. My RTX4060 GPU wasn't affected previously, just my intel chip.

Anyway, remember to switch to silent mode as it doesn't happen automatically with CIS and your system will stay cool. This was just in today's testing and the figure held even after an hour in a game at Balanced mode with my 9th gen Lenovo Legion 5.

In between installs so will do a ESET + CyberLock test later though ESET automatically switches to game mode. EDIT: Fans sped up a lot more and pushed the mid-90s but ran smooth. Anyway, was an informative quick test.

 

[ErzCrz]

ErzCrz's PC Security Config · Setup v3
Updated Oct 18, 2026

What changed

• Real-time protection: Comodo Internet Security 2027
  CyberLock → ESET Security Premium
  CyberLock
• Notable changes: See First Post Spoilers
  
  08.02.2026 - 2026 setup - ESET Security Essentials, CyberLock, RansomwareGuard
  11.03.2026 - Just minor tweak to DNS to DNS4EU servers.
  15.03.2026 - Upgraded ESET to Premium
  24.06.2026 - Switched DNS back to Sky DNS (Sky Shield)
  23.07.2026 - Switched to Comodo Internet Security 2027
  26.09.2026 - Changed DNS to
  01.10.2026 - Minor updates and filled in missing parts.
  ----------------------------------------
  Disclaimer we use date format DD/MM/YYYY here in the UK → See First Post Spoilers
  
  08.02.2026 - 2026 setup - ESET Security Essentials, CyberLock, RansomwareGuard
  11.03.2026 - Just minor tweak to DNS to DNS4EU servers.
  15.03.2026 - Upgraded ESET to Premium
  24.06.2026 - Switched DNS back to Sky DNS (Sky Shield)
  23.07.2026 - Switched to Comodo Internet Security 2027
  26.09.2026 - Changed DNS to Quad9
  01.10.2026 - Minor updates and filled in missing parts.
  18.10.2026 - Returned to ESET & CyberLock stack
  ----------------------------------------
  Disclaimer we use date format DD/MM/YYYY here in the UK
• Custom security settings: Comodo Internet Security 2027 - Proactive, auto-containment to Restricted
  Cyberlock - ON - Firewall Rules for Unsafe Items. SmartFirewall Recommended, Create Rules for unsafe Enabled both Inbound/Outbound
  RansomwareGuard (Testing now and then but not enabled full time → ESET Security Premium - Default Settings
  Cyberlock - ON - Firewall Rules for Unsafe Items. SmartFirewall Recommended, Create Rules for unsafe Enabled both Inbound/Outbound
  RansomwareGuard (Testing now and then but not enabled full time)
  Quad9 DNS

Spoiler: Full setup snapshot

My current setup

• Operating system: Windows 11
• OS version and support details: N/A
• Real-time protection: ESET Security Premium
  CyberLock
• File and photo backups: AOMEI Backupper Pro - Monthly Full Backups & Weekly Differential Backups. On plug in of external for essential backups e.g. documents, photos etc.
• Device firewall: Other - Internet Security (3rd-party)
• Browsers and extensions: Primary: Firefox with uBlock Origin in Medium Mode and Malwarebytes Browser Guard
  Secondary: Edge with Stripped Back uBlock
• Main use of this computer: For home and private use
• On-device encryption: Encryption not enabled
• Device sign-in security: Windows Hello PIN or biometric sign-in (face / fingerprint / Touch ID)
• Security updates: Allow security updates and latest features
• Update channels: Allow stable updates only
• User Account Control (UAC): Always notify
• Smart App Control: Off
• Network firewall: Enabled
• Router and network details: Sky Router with built-in IPV4/IPv6 Firewall
• Custom security settings: ESET Security Premium - Default Settings
  Cyberlock - ON - Firewall Rules for Unsafe Items. SmartFirewall Recommended, Create Rules for unsafe Enabled both Inbound/Outbound
  RansomwareGuard (Testing now and then but not enabled full time)
  Quad9 DNS
• Periodic malware scanners: Malwarebytes
  Emsisoft
• Malware sample testing: I do not participate in malware testing
• Environment for malware testing: N/A
• Secure DNS: Quad9 DNS over HTTP
• Desktop VPN: Firefox Free Built-In.
• Password and passkey manager: Keepass 2.x
• Two-factor authentication: Keepass Built in TOTP
• Maintenance tools: Windows built-in Disk Clean-up and Storage Sense.
• Subscriptions: None
• System recovery: Lenovo Built in Recovery, AOMEI Backupper Pro Recovering Environment & Bootable USB. Weekly differential and essentials backup
• Usage and exposure: Visiting familiar websites, Working from home, Opening email attachments, Online shopping and card payments, Downloading software and files from reputable sites, Gaming, Streaming audio/video content from trusted sites or paid subscriptions
• Computer specs: ErzCrz Laptop Specs 2025
• Notable changes: See First Post Spoilers
  
  08.02.2026 - 2026 setup - ESET Security Essentials, CyberLock, RansomwareGuard
  11.03.2026 - Just minor tweak to DNS to DNS4EU servers.
  15.03.2026 - Upgraded ESET to Premium
  24.06.2026 - Switched DNS back to Sky DNS (Sky Shield)
  23.07.2026 - Switched to Comodo Internet Security 2027
  26.09.2026 - Changed DNS to Quad9
  01.10.2026 - Minor updates and filled in missing parts.
  18.10.2026 - Returned to ESET & CyberLock stack
  ----------------------------------------
  Disclaimer we use date format DD/MM/YYYY here in the UK
• Feedback preference: Detailed suggestions and alternatives welcome

Feedback on this setup is welcome.

 

[ErzCrz]

Returned to using ESET Security Premium with CyberLoc. Comodo is find though some stability issues here and there and ESET with CL works great.