Latest changes
Oct 28, 2020
Daily driver
My primary device
Operating system
Windows 10 Pro
OS version
Windows 10 Version 20H2 Build 19042.572
System type
64-bit operating system; x64-based processor
Security updates
Automatically allow security and feature updates
Windows UAC
Always notify
Firewall protection
Microsoft Defender Firewall
Account privileges
Administrator account
Account type
Sign in with associated Microsoft ID
Account log-in
  1. Windows Hello Fingerprint
  2. Windows Hello PIN
Exposure to malware
No malware samples are downloaded
Real-time Malware protection
Kaspersky Security Cloud Free 21.1.15.500(c)
Simple Windows Hardening 1.0.0.2
DocumentsAntiExploit 1.0.1.1
Run By SmartScreen 3.1.0.1
HomeCare by Trend Micro on TP-Link Archer AX6000 router
RTP configuration
Kaspersky Security Cloud Free:
No scanning for rootkits and weak windows settings (performance)
No HTTPS scanning of websites with an EV certificate (compromise on HTTPS scanning)
No notifications except for events, others unticked (no advertising, nag in free version)
Blocking data collection (privacy protection)
Periodic scanners
NPE, HitmanPro and AdwCleaner (for the kids)
Browser and Add-ons
Microsoft Edge with AdGuard, Bitwarden, Microsoft Editor, Kaspersky Protection
Privacy tools and VPN
MS Edge Tracking Prevention on Strict and AdGuard extension in incognito mode
Password manager
Bitwarden Premium
Search engine
Google
Maintenance tools
CCleaner, PrivaZer Donors version, PatchMyPC, SUMo and Driver Easy Pro
Photos and Files backup
Windows File History on external drive (weekly)
OneDrive with Microsoft 365 ransomware protection (always on sync)
File Backup schedule
Automatically sync to the cloud
Backup and Restore
Windows system image
Backup schedule
Once or more per year
Computer Activity
  1. Online banking
  2. Browsing the web and checking emails
  3. Streaming movies, TV shows and music from the Internet
  4. Shared computer is used by other family members
  5. Office and other work-related software (Work from Home)
  6. Recording and editing video or photos
Computer Specifications
Acer Aspire VN7-791G-576X
Intel Core i5-4210H
Intel HD Graphics 4600 / NVIDIA GeForce GTX 860M
Kingston 16GB Dual-Channel DDR3 PC3-12800 RAM
Samsung SSD 850 EVO M.2 250GB
Seagate HDD ST1000LM014-1EJ164 1TB
Realtek High Definition Audio
Your changelog
2020.02.23 removed VoodooShield and uBlock Origin and added Kaspersky Security Cloud Free and AdGuard (extension).
2020.03.09 removed AdGuard and Kaspersky Security Cloud Free and added Hard_Configurator 5.0.0.1 beta uBlock Origin and the Netcraft extension. replaced Bandizip with Explzh because of the advertisements in the free version.
2020.03.22 removed Hard_Configurator, kept ConfigureDefender, DocumentsAntiExploit and RunBySmartscreen.
Added NoVirusThanks SysHardener, VoodooShield and the Certificate Info extension.
2020.03.28 added Ziggo safe Online and Hard_Configurator and removed SysHardner.
2020.03.30 removed CCleaner Pro
2020.04.05 installed HC 5.0.01 beta with recommended settings. Removed VoodooShield.
Tried to minimize extensions: replaced uBlock Origin with AdGuard and removed Certificate Info and Netcraft. Added Microsoft Editor. All extensions are now from the Microsoft Store except Browsing Protection by F-Secure (installed automatically).
2020.04.22 Removed Ziggo Safe Online and Hard_Configurator Trying Windows Defender with Comodo Firewall.
2020.05.04 removed Comodo Firewall and installed Emsisoft Ant-Malware Home.
2020.05.08 replaced Emsisoft Anti-Malware with Kaspersky Security Cloud Free
2020.05.18 replaced KSC Free with WD and uninstalled some browser extensions.
2020.07.05 back to Bitwarden and Bitdefender TrafficLight and WhitelistCloud added.
2020.07.08 switched form WhitelistCloud to VoodooShield Pro. Went from uBlock Origin to AdGuard.
2020.07.15 Back to KSC Free.
2020.08.09 added SpywareBlaster 5.7 Private Beta with MS Edge support.
2020.08.12 back to Microsoft Defender Antivirus
2020.08.15 back to Kaspersky Security Cloud Free
2020.08.31 removed O&O ShutUp 10 and went back to Microsoft Defender
2020.09.27 removed Bitdefender TrafficLight and went back from Simple Windows Hardening to Hard_Configurator
2020.10.27 went from WD to KSCFree and from uBlock Origin to AdGuard.

Andy Ful

Level 64
Verified
Trusted
Content Creator
Thanks Andy (y)
This is the complete line in the log:
De beheerder heeft de toegang tot ...
\AppData\Local\Temp\7zS6ECF\FileExtractor.exe beperkt op locatie met de beleidsregel {1016bbe0-a716-428b-822e-3e544b6a3281} voor het pad C:\Users\*\AppData\Local\Temp\7z?????????\*.exe.
Your post was helpful to me.:)
Thanks to you I figured out how to avoid blocking software updates made via 7-Zip SFX installers. Simply, if one tries to run the executable from 7-Zip GUI, it is unpacked and executed in the temporary folder ...\AppData\Local\Temp\7zO....\ . But, when the application updates via SFX, it uses the folder ...\AppData\Local\Temp\7zS....\.
So the improved H_C rule should block only the first scenario by applying the SRP rule: ...\AppData\Local\Temp\7zO????????\*.exe
 

Gandalf_The_Grey

Level 36
Verified
Trusted
Content Creator
Your post was helpful to me.:)
Thanks to you I figured out how to avoid blocking software updates made via 7-Zip SFX installers. Simply, if one tries to run the executable from 7-Zip GUI, it is unpacked and executed in the temporary folder ...\AppData\Local\Temp\7zO....\ . But, when the application updates via SFX, it uses the folder ...\AppData\Local\Temp\7zS....\.
So the improved H_C rule should block only the first scenario by applying the SRP rule: ...\AppData\Local\Temp\7zO????????\*.exe
Great (y)
That means there is no more block when extracting a fresh copy of HP Print and Scan Doctor in future versions of HC?
You're spoiling me :D
 

Lenny_Fox

Level 14
Verified
@Gandalf_The_Grey

I am not using Office365, so I don't know anything about Office365 ransomware protection. Does his ransomware protection works without Windows Defender (since you are using Ziggo's rebranded F-secure)?

@Andy Ful
With all the Office and Script Attack Surface Reduction rules available for Windows Defender, my guess is that Windows Defender is probably the best AV to companion Microsoft Office. What is your take on this assumption?
 

Andy Ful

Level 64
Verified
Trusted
Content Creator
...
@Andy Ful
With all the Office and Script Attack Surface Reduction rules available for Windows Defender, my guess is that Windows Defender is probably the best AV to companion Microsoft Office. What is your take on this assumption?
It is the best solution among free AVs. Some MS Office 365 subscriptions (Office 365 Enterprise E5, Office 365 Education A5, and Microsoft 365 Business) additionally include Advanced Threat Protection.
Some paid AVs have also got dedicated protection for MS Office documents.
Most of the home users can simply tweak MS Office or use a configurator to block active content in documents, which also will provide strong protection.
 

Gandalf_The_Grey

Level 36
Verified
Trusted
Content Creator
@Gandalf_The_Grey

I am not using Office365, so I don't know anything about Office365 ransomware protection. Does his ransomware protection works without Windows Defender (since you are using Ziggo's rebranded F-secure)?

@Andy Ful
With all the Office and Script Attack Surface Reduction rules available for Windows Defender, my guess is that Windows Defender is probably the best AV to companion Microsoft Office. What is your take on this assumption?
This ransomware protection works without Windows Defender and is accessible through Windows Security Center:
Aantekening 2020-04-06 164958.png

Aantekening 2020-04-06 165416.png
 

Gandalf_The_Grey

Level 36
Verified
Trusted
Content Creator
To celebrate the comeback of @cruelsister I am using the combination of Windows Defender enhanced by @Andy Ful together with Comodo Firewall enhanced by @cruelsister :cool:
Q&A - What Browser Extensions are you using in 2020? made me install I don't care about cookies again.
By replacing Ziggo Safe Online and AdGuard with Windows defender and uBlock origin my browsing speed has improved.
Added Bitdefender TrafficLight to beef up the web protection of Edge and Windows Defender.
 

Gandalf_The_Grey

Level 36
Verified
Trusted
Content Creator
Controlled folder access is still a major pain in the ass... But like shown in the HUB tests done by @Solarquest necessary.

So far, I had to allow:
HP Officejet Pro 9015:
HPScan.exe
Comodo:
Autoruns.exe (not needed if you don't use that utility)
CCE.exe (not needed if you don't use that utility)
cis.exe
cmdagent.exe
Hitman Pro:
HitmanPro.exe
Windows:
svchost.exe
taskhostw.exe
WmiPrvSE.exe
TiWorker.exe

Hope I'm not punching too many holes in its protection 🤔
 
Last edited:

SeriousHoax

Level 30
Verified
Malware Tester
To celebrate the comeback of @cruelsister I am using the combination of Windows Defender enhanced by @Andy Ful together with Comodo Firewall enhanced by @cruelsister :cool:
Q&A - What Browser Extensions are you using in 2020? made me install I don't care about cookies again.
By replacing Ziggo Safe Online and AdGuard with Windows defender and uBlock origin my browsing speed has improved.
Added Bitdefender TrafficLight to beef up the web protection of Edge and Windows Defender.
Now this makes me wanna try CF too 😖 I'll do a fresh install of my system when Windows 10 2004 releases on May 12 so this is a good time for me to do some experiments 🧐
 

Gandalf_The_Grey

Level 36
Verified
Trusted
Content Creator
I had Comodo Firewall at CS settings and Windows Defender with Configure Defender for nearly a year .A few days ago,I ditched Comodo for H_C. How do you like CF version 12.2 ? Any glitches?
I just ditched H_C for Comodo Firewall :D
But keep being interested in its development.

There are so many great programs to choose from...Windows Defender (with Andy's tools), Kaspersky Security Cloud Free, F-Secure Safe, Comodo Firewall, VoodooShield (and of course the complete Hard_Configurator package).

The latest version 12.2.2.7036 of Comodo Firewall works great and without any issues on my system (y)
 
Top