Recent changes
Nov 30, 2020
Device priority
Primary device
Operating system
Windows 10
Sign-in account
Sign in with Microsoft ID
Log-in security
    • Windows Hello Fingerprint
    • Windows Hello PIN
Account permissions
Administrator account
Security updates
Automatically allow security and feature updates
Windows UAC
Always notify
Malware samples
No - Malware samples are not purposely downloaded
Real-time Malware protection
Microsoft Defender Antivirus
HomeCare by Trend Micro on TP-Link Archer AX6000 router
Firewall protection
Microsoft Defender Firewall
RTP configuration
Microsoft Defender Antivirus set to High with ConfigureDefender
Controlled Folder Access enabled (not on the kid's laptops)
Memory integrity under Core Isolation enabled (not on the kid's laptops)
Hard_Configurator with Windows_10_Basic_Recommended_Settings
Periodic scanners
HitmanPro, Kaspersky Virus Removal Tool and AdwCleaner (for the kids)
VPN and Privacy
MS Edge Tracking Prevention on balanced.
uBlock Origin with its own filters and some optimized and plus filters from FilterLists | Subscriptions for uBlock Origin, Adblock Plus, AdGuard, ...
Winscribe VPN
Browser(s) and Add-ons
Microsoft Edge with uBlock Origin, Bitdefender TrafficLight, Bitwarden and Microsoft Editor
Google Chrome with the same extensions plus the Microsoft Defender Browser Protection extension on the kid's laptops.
They use Edge for school and Chrome for fun
Maintenance tools
Autoruns, CCleaner, PatchMyPC, SUMo and Driver Easy Pro
Photos and Files backup
Windows File History on external drive (weekly)
OneDrive with Microsoft 365 ransomware protection (always on sync)
File backup schedule
Changes are automatically sync'd to my cloud storage provider
Backup and rollback
Windows system image
Backup schedule
Manually managed on a yearly basis
Activity usage
  1. Generic web browsing
  2. Financial and sensitive documents
  3. Working from home
  4. Video and photo editing
  5. Streaming audio and video content from the Internet
  6. Shared among other family members
Computer hardware
Acer Aspire VN7-791G-576X
Intel Core i5-4210H
Intel HD Graphics 4600 / NVIDIA GeForce GTX 860M
Kingston 16GB Dual-Channel DDR3 PC3-12800 RAM
Samsung SSD 850 EVO M.2 250GB
Seagate HDD ST1000LM014-1EJ164 1TB
Realtek High Definition Audio
Your changelog
2020.02.23 removed VoodooShield and uBlock Origin and added Kaspersky Security Cloud Free and AdGuard (extension).
2020.03.09 removed AdGuard and Kaspersky Security Cloud Free and added Hard_Configurator 5.0.0.1 beta uBlock Origin and the Netcraft extension. replaced Bandizip with Explzh because of the advertisements in the free version.
2020.03.22 removed Hard_Configurator, kept ConfigureDefender, DocumentsAntiExploit and RunBySmartscreen.
Added NoVirusThanks SysHardener, VoodooShield and the Certificate Info extension.
2020.03.28 added Ziggo safe Online and Hard_Configurator and removed SysHardner.
2020.03.30 removed CCleaner Pro
2020.04.05 installed HC 5.0.01 beta with recommended settings. Removed VoodooShield.
Tried to minimize extensions: replaced uBlock Origin with AdGuard and removed Certificate Info and Netcraft. Added Microsoft Editor. All extensions are now from the Microsoft Store except Browsing Protection by F-Secure (installed automatically).
2020.04.22 Removed Ziggo Safe Online and Hard_Configurator Trying Windows Defender with Comodo Firewall.
2020.05.04 removed Comodo Firewall and installed Emsisoft Ant-Malware Home.
2020.05.08 replaced Emsisoft Anti-Malware with Kaspersky Security Cloud Free
2020.05.18 replaced KSC Free with WD and uninstalled some browser extensions.
2020.07.05 back to Bitwarden and Bitdefender TrafficLight and WhitelistCloud added.
2020.07.08 switched form WhitelistCloud to VoodooShield Pro. Went from uBlock Origin to AdGuard.
2020.07.15 Back to KSC Free.
2020.08.09 added SpywareBlaster 5.7 Private Beta with MS Edge support.
2020.08.12 back to Microsoft Defender Antivirus
2020.08.15 back to Kaspersky Security Cloud Free
2020.08.31 removed O&O ShutUp 10 and went back to Microsoft Defender
2020.09.27 removed Bitdefender TrafficLight and went back from Simple Windows Hardening to Hard_Configurator
2020.10.27 went from WD to KSCFree and from uBlock Origin to AdGuard.
2020.11.14 back to WD on high and simplified config

Andy Ful

Level 65
Verified
Trusted
Content Creator
Thanks Andy (y)
This is the complete line in the log:
De beheerder heeft de toegang tot ...
\AppData\Local\Temp\7zS6ECF\FileExtractor.exe beperkt op locatie met de beleidsregel {1016bbe0-a716-428b-822e-3e544b6a3281} voor het pad C:\Users\*\AppData\Local\Temp\7z?????????\*.exe.
Your post was helpful to me.:)
Thanks to you I figured out how to avoid blocking software updates made via 7-Zip SFX installers. Simply, if one tries to run the executable from 7-Zip GUI, it is unpacked and executed in the temporary folder ...\AppData\Local\Temp\7zO....\ . But, when the application updates via SFX, it uses the folder ...\AppData\Local\Temp\7zS....\.
So the improved H_C rule should block only the first scenario by applying the SRP rule: ...\AppData\Local\Temp\7zO????????\*.exe
 

Gandalf_The_Grey

Level 38
Verified
Trusted
Content Creator
Your post was helpful to me.:)
Thanks to you I figured out how to avoid blocking software updates made via 7-Zip SFX installers. Simply, if one tries to run the executable from 7-Zip GUI, it is unpacked and executed in the temporary folder ...\AppData\Local\Temp\7zO....\ . But, when the application updates via SFX, it uses the folder ...\AppData\Local\Temp\7zS....\.
So the improved H_C rule should block only the first scenario by applying the SRP rule: ...\AppData\Local\Temp\7zO????????\*.exe
Great (y)
That means there is no more block when extracting a fresh copy of HP Print and Scan Doctor in future versions of HC?
You're spoiling me :D
 

Lenny_Fox

Level 15
Verified
@Gandalf_The_Grey

I am not using Office365, so I don't know anything about Office365 ransomware protection. Does his ransomware protection works without Windows Defender (since you are using Ziggo's rebranded F-secure)?

@Andy Ful
With all the Office and Script Attack Surface Reduction rules available for Windows Defender, my guess is that Windows Defender is probably the best AV to companion Microsoft Office. What is your take on this assumption?
 

Andy Ful

Level 65
Verified
Trusted
Content Creator
...
@Andy Ful
With all the Office and Script Attack Surface Reduction rules available for Windows Defender, my guess is that Windows Defender is probably the best AV to companion Microsoft Office. What is your take on this assumption?
It is the best solution among free AVs. Some MS Office 365 subscriptions (Office 365 Enterprise E5, Office 365 Education A5, and Microsoft 365 Business) additionally include Advanced Threat Protection.
Some paid AVs have also got dedicated protection for MS Office documents.
Most of the home users can simply tweak MS Office or use a configurator to block active content in documents, which also will provide strong protection.
 

Gandalf_The_Grey

Level 38
Verified
Trusted
Content Creator
@Gandalf_The_Grey

I am not using Office365, so I don't know anything about Office365 ransomware protection. Does his ransomware protection works without Windows Defender (since you are using Ziggo's rebranded F-secure)?

@Andy Ful
With all the Office and Script Attack Surface Reduction rules available for Windows Defender, my guess is that Windows Defender is probably the best AV to companion Microsoft Office. What is your take on this assumption?
This ransomware protection works without Windows Defender and is accessible through Windows Security Center:
Aantekening 2020-04-06 164958.png

Aantekening 2020-04-06 165416.png
 

Gandalf_The_Grey

Level 38
Verified
Trusted
Content Creator
To celebrate the comeback of @cruelsister I am using the combination of Windows Defender enhanced by @Andy Ful together with Comodo Firewall enhanced by @cruelsister :cool:
Q&A - What Browser Extensions are you using in 2020? made me install I don't care about cookies again.
By replacing Ziggo Safe Online and AdGuard with Windows defender and uBlock origin my browsing speed has improved.
Added Bitdefender TrafficLight to beef up the web protection of Edge and Windows Defender.
 

Gandalf_The_Grey

Level 38
Verified
Trusted
Content Creator
Controlled folder access is still a major pain in the ass... But like shown in the HUB tests done by @Solarquest necessary.

So far, I had to allow:
HP Officejet Pro 9015:
HPScan.exe
Comodo:
Autoruns.exe (not needed if you don't use that utility)
CCE.exe (not needed if you don't use that utility)
cis.exe
cmdagent.exe
Hitman Pro:
HitmanPro.exe
Windows:
svchost.exe
taskhostw.exe
WmiPrvSE.exe
TiWorker.exe

Hope I'm not punching too many holes in its protection 🤔
 
Last edited:

SeriousHoax

Level 32
Verified
To celebrate the comeback of @cruelsister I am using the combination of Windows Defender enhanced by @Andy Ful together with Comodo Firewall enhanced by @cruelsister :cool:
Q&A - What Browser Extensions are you using in 2020? made me install I don't care about cookies again.
By replacing Ziggo Safe Online and AdGuard with Windows defender and uBlock origin my browsing speed has improved.
Added Bitdefender TrafficLight to beef up the web protection of Edge and Windows Defender.
Now this makes me wanna try CF too 😖 I'll do a fresh install of my system when Windows 10 2004 releases on May 12 so this is a good time for me to do some experiments 🧐
 

Gandalf_The_Grey

Level 38
Verified
Trusted
Content Creator
I had Comodo Firewall at CS settings and Windows Defender with Configure Defender for nearly a year .A few days ago,I ditched Comodo for H_C. How do you like CF version 12.2 ? Any glitches?
I just ditched H_C for Comodo Firewall :D
But keep being interested in its development.

There are so many great programs to choose from...Windows Defender (with Andy's tools), Kaspersky Security Cloud Free, F-Secure Safe, Comodo Firewall, VoodooShield (and of course the complete Hard_Configurator package).

The latest version 12.2.2.7036 of Comodo Firewall works great and without any issues on my system (y)