Basic Security Evjl's Rain's security config

[Evjl's Rain]

All of these configurations are designed for PERFORMANCE AND USABILITY. Security is in the second place
SRP tweaks:

Spoiler: SRP

All other machines' fully automated configurations (for parents and friends who don't know much about computer)
- Windows 7 Pro/Ultimate (x86, x64)
- Avast Free (tweaked)
- CheckMAL Appcheck Anti-ransomware Free
- Unchecky
- Windows Firewall
- CocCoc browser/Chrome with uBlock Origin and uBlock Origin Extra + additional security filters
- Avira Browser Safety
- Windows Updates are disabled => broke or slowed down their machines significantly in the past + they don't want W10 or W10's upgrade nags
- CCleaner + CCEnhancer -> scheduled autoclean every Sunday 6PM

None of these machines have had malwares for years. Perhaps a few PUPs which hijacked the browsers

 

[Winter Soldier]

Thanks for sharing
I see a high security level and well-balanced, but sorry why is Windows update disabled?

 

[Deleted member 178]

hehe CocCoc browser (Vietnamese chromium fork)

 

[Evjl's Rain]

hehe CocCoc browser (Vietnamese chromium fork)

the best browser for vietnamese with built-in download accelerator + FB censorship bypassing

Thanks for sharing
I see a high security level and well-balanced, but sorry why is Windows update disabled?

because Windows Update broke/slowed down some of the machines and made them malfunctioned (+ some of them use cracked windows, not me ). It's like a malware for average users if they don't know what they are doing . I went to the computer repair shop last week and saw 6 people came to install W7 because they couldn't use W8.1 or 10 or they had annoying bugs (many people in my country can't speak/understand english). The computer guy also said my W10 was slow for all its power -> asked me to install W7 (he was right but I knew he just wanted to get some extra $$$ for installing windows)

 

[Winter Soldier]

the best browser for vietnamese with built-in download accelerator + FB censorship bypassing

because Windows Update broke/slowed down some of the machines and made them malfunctioned (+ some of them use cracked windows, not me ). It's like a malware for average users if they don't know what they are doing . I went to the computer repair shop last week and saw 6 people came to install W7 because they couldn't use W8.1 or 10 or they had annoying bugs (many people in my country can't speak/understand english). The computer guy also said my W10 was slow for all its power -> asked me to install W7 (he was right but I knew he just wanted to get some extra $$$ for installing windows)

Yeah, for sure MS should work in better way before release some updates.
A few months ago I was blocked without being able to work because during the restart for the updates installation, the system went into loop mode.
At the end, forced shutdown

 

[Deleted member 178]

The computer guy also said my W10 was slow for all its power -> asked me to install W7 (he was right but I knew he just wanted to get some extra $$$ for installing windows)

Inded very common practice over there, they are very good at fixing hardware but in term of OS deployment and optimization, many are clueless

 

[_CyberGhosT_]

Cool setup Rain, Thanks for the share brother.

 

[Andytay70]

Well covered, Thanks for sharing.

 

[aragornnnn]

Nice and strong config, thanks for the share!

 

[Parsh]

With enough care, this may be the simplest yet solid protection. Awesome
Do you have hardened mode (and if yes, which one) in AP enabled, having VDS alongside?

 

[Evjl's Rain]

With enough care, this may be the simplest yet solid protection. Awesome
Do you have hardened mode (and if yes, which one) in AP enabled, having VDS alongside?

yes, I have hardened mode aggressive enabled
VS in autopilot can help to catch those malwares which are missed by HM. Sometimes, HM allows some new malwares for unknown reasons

 

[shmu26]

Sometimes, HM allows some new malwares for unknown reasons

scripts?

 

[Evjl's Rain]

scripts?

probably scripts but scripts eventually download .exe in order to work, mostly


I saw HM blocked most undetected samples but slipped 1 sample => she stopped the video then
I don't know why it failed. Was the payload .exe missed by HM or did it use another kind of attack without an exe file?

 

[Deleted member 2913]

Strong & effective config my frd...Nothing to add from my side...

 

[Exterminator]

Very nice config!!! Thanks for sharing it with us

 

[JM Safe]

Good config, all layers are well covered.

Thanks for sharing.

 

[Evjl's Rain]

Added:
- Avast Premier -> Avast Free (with adblock tweak)
- Windows Firewall only
- (Right Click) Allow, Block or Remove - Windows Firewall (better than WFC )

Removed:
- Avast's Game Mode - potential cause of many problems

 

[Sr. Normal 2.0]

Very good config my Rainsomware friend

Thanks for sharing!

 

[Evjl's Rain]

Added:
- Zemana antilogger
- Comodo firewall (proactive)
- Norton safe web
- Youtube Plus

Removed:
- Avast free
- VTchromizer

 

[Evjl's Rain]

why removed avast and replaced it with cf?

to test this combo
faster than avast alone so far

zemana for basic signatures and lightness
comodo for the rest. Now without avast, I hope it won't cause BSODs