Advanced Plus Security Gandalf_The_Grey's laptop config for 2020

[shmu26]

Got a new HP OfficeJet Pro 9015 All-in-One Printer this weekend:

https://store.hp.com/us/en/pdp/hp-officejet-pro-9015-all-in-one-printer

Unfortunately I couldn't get scanning over wifi to my laptop to work with Hard_Configurator at recommended settings.
And I couldn't find any blocks in the logs to help me troubleshoot that problem.
So I removed Hard_Configurator but kept ConfigureDefender, DocumentsAntiExploit and RunBySmartscreen.
I added SysHardner (recommended settings) and VoodooShield (AutoPilot Mode).
Now everything works fine.

Those HP wifi-enabled printers have a big problem with changing IP. You often need to restart the computer and/or the printer to get it to recognize the IP of the printer. Simply drives me crazy, so I made a wired connection from the printer to the router.
It is sort of a random issue, you never know when the printer will work and when it will not.
Just thought I would mention that -- you might have a different problem.

 

[blackice]

Those HP wifi-enabled printers have a big problem with changing IP. You often need to restart the computer and/or the printer to get it to recognize the IP of the printer. Simply drives me crazy, so I made a wired connection from the printer to the router.
It is sort of a random issue, you never know when the printer will work and when it will not.
Just thought I would mention that -- you might have a different problem.

I can second that I’ve had this problem. It’s also been worse on some routers than others.

 

[Gandalf_The_Grey]

Those HP wifi-enabled printers have a big problem with changing IP. You often need to restart the computer and/or the printer to get it to recognize the IP of the printer. Simply drives me crazy, so I made a wired connection from the printer to the router.
It is sort of a random issue, you never know when the printer will work and when it will not.
Just thought I would mention that -- you might have a different problem.

I can second that I’ve had this problem. It’s also been worse on some routers than others.

Thanks you both for your replies. Not a problem at the moment but good to know there is a workaround (wired connection)

 

[Gandalf_The_Grey]

It was not probably blocked by SRP default-deny, but by one o the hardening restrictions (from the right panel) or by one of FirewallHardening rules. HP printers use HTA scripts, and if mshta.exe outbound connections are blocked the Wi-Fi features may not work properly. Anyway, you did not need the H_C to be safe.

Thanks @Andy Ful
I had removed all FirewallHardening rules, so it was probably one of the hardening restrictions (from the right panel).
Good to know where to start troubleshooting if I want to return to the H_C one day.

 

[Andy Ful]

Thanks @Andy Ful
I had removed all FirewallHardening rules, so it was probably one of the hardening restrictions (from the right panel).
Good to know where to start troubleshooting if I want to return to the H_C one day.

By the way (for my knowledge) did you restarted the computer after removing Firewall rules?

 

[Gandalf_The_Grey]

By the way (for my knowledge) did you restarted the computer after removing Firewall rules?

Yes, I did restart my laptop.

 

[Andy Ful]

Yes, I did restart my laptop.

Thanks for testing.

 

[Gandalf_The_Grey]

COVID19 introduced working from home and like our president calls it intelligent self-isolation.
As a result, I use my personal laptop more and more, also for work and spent even more time here on MalwareTips.
After discussion with @oldschool and @The Cog in the Machine I realized that Windows Defender and VoodooShield are not the best combo.
Together they cause a delay when launching apps and that the by my ISP offered Ziggo Safe Online by F-Secure is a great alternative.
I had my doubts about SysHardner because it's not actively supported at the moment.
Luckily Hard_Configurator is a well-supported alternative, thanks again @Andy Ful !
I love to use tools like uBlock Origin, Hard_Configurator, and VoodooShield because of their logs.
With those logs, you can clearly see what's happening on your system.

 

[Divine_Barakah]

COVID19 introduced working from home and like our president calls it intelligent self-isolation.
As a result, I use my personal laptop more and more, also for work and spent even more time here on MalwareTips.
After discussion with @oldschool and @The Cog in the Machine I realized that Windows Defender and VoodooShield are not the best combo.
Together they cause a delay when launching apps and that the by my ISP offered Ziggo Safe Online by F-Secure is a great alternative.
I had my doubts about SysHardner because it's not actively supported at the moment.
Luckily Hard_Configurator is a well-supported alternative, thanks again @Andy Ful !
I love to use tools like uBlock Origin, Hard_Configurator, and VoodooShield because of their logs.
With those logs, you can clearly see what's happening on your system.

F-Secure is very decent and light on system resources. Are you planning to use Voodooshield with it (I would not)?

 

[Gandalf_The_Grey]

F-Secure is very decent and light on system resources. Are you planning to use Voodooshield with it (I would not)?

Yes, I use VoodooShield with it and did so before.
No issues with that combo and I really like the mail conversations I have with @danb

 

[Divine_Barakah]

Yes, I use VoodooShield with it and did so before.
No issues with that combo and I really like the mail conversations I have with @danb

The most important thing is that you like what you're doing so you will be fine. F-Secure is one of the best products I have ever tried.

 

[stefanos]

I tried f secure 2 months ago. And a year ago. Same results on my system. Low ram and cpu. Slow boot time , and delay the browsers and applications

 

[Divine_Barakah]

I tried f secure 2 months ago. And a year ago. Same results on my system. Low ram and cpu. Slow boot time , and delay the browsers and applications

While it is surprising to me, I know that the same product might behave differently on different systems. Anyway, I suggest you contact the support if it happens and you try F-Secure again; I feel that there was sth wrong on your device as I did not experience a delay in system startup even on a low-end laptop. The only slowdown happens when you enable F-Secure browser extension.

 

[stefanos]

While it is surprising to me, I know that the same product might behave differently on different systems. Anyway, I suggest you contact the support if it happens and you try F-Secure again; I feel that there was sth wrong on your device as I did not experience a delay in system startup even on a low-end laptop. The only slowdown happens when you enable F-Secure browser extension.

I have one year licence from MT. But for now i am so pleased with Kaspersky. My laptop start like ferari , so low RAM and CPU . Just perfect

 

[stefanos]

While it is surprising to me, I know that the same product might behave differently on different systems. Anyway, I suggest you contact the support if it happens and you try F-Secure again; I feel that there was sth wrong on your device as I did not experience a delay in system startup even on a low-end laptop. The only slowdown happens when you enable F-Secure browser extension.

For this i write on my system

 

[Gandalf_The_Grey]

@stefanos and @The Cog in the Machine No issues here with boot time and delays of the web browser.

For me, the boot time is always the same with Windows Defender, Kaspersky Security Cloud Free, and Ziggo safe Online:

Maybe disabling banking protection is the cause that I notice no delays in web browsing.

And of course, every system is different...

 

[shmu26]

After discussion with @oldschool and @The Cog in the Machine I realized that Windows Defender and VoodooShield are not the best combo.

Based on your post, I am now experimenting with Eset Nod32 default settings + VoodooShield autopilot + H_C recommended settings. So far, so good.

 

[Stopspying]

Yes, I use VoodooShield with it and did so before.
No issues with that combo and I really like the mail conversations I have with @danb

I'm using VS with F-Secure as well and am not finding any issues with this combination.

 

[Stopspying]

I noticed that you use PatchMyPC and SUMo, do you find that one of them finds enough updates that the other one misses to make it worthwhile to use both? Currently I'm only using PatchMyPC, I used to use both but I wasn't too sure what KCSoftwares (SUMo's makers) do with the information SUMo gathers from our devices.

I love to use tools like uBlock Origin, Hard_Configurator, and VoodooShield because of their logs.
With those logs, you can clearly see what's happening on your system.

 

[sepik]

Nice setup, indeed! How about Driver Easy, is it any good? Im using Driver Booster/Snappy Driver Installer Origin.
According to your hw spec, you are using 850 Evo m.2. About a week ago Samsung released v3.3 nvme m.2 drivers. Im using two years old Lenovo Legion desktop 'puter with OEM Samsung m2 nvme 256gb. So for testing purposes, i "forced" to install the new v3.3 driver. Then i ran crystal disk mark and noticed roughly +7 % read/write speed boost. Well, even +7% is not much, but not bad either.
EDIT: Forgot to say, for OEM nvme m2, Windows uses its own "Microsoft surface..." drivers. Force it to use samsung nvme m2, and speeds goes up to like 15%. Which is quite funny i think.