Advanced Plus Security Gandalf_The_Grey's laptop config for 2020

Last updated
Nov 30, 2020
How it's used?
For home and private use
Operating system
Windows 10
Log-in security
Security updates
Allow security updates and latest features
User Access Control
Always notify
Real-time security
Microsoft Defender Antivirus
HomeCare by Trend Micro on TP-Link Archer AX6000 router
Firewall security
Microsoft Defender Firewall
About custom security
Microsoft Defender Antivirus set to High with ConfigureDefender
Controlled Folder Access enabled (not on the kid's laptops)
Memory integrity under Core Isolation enabled (not on the kid's laptops)
Hard_Configurator with Windows_10_Basic_Recommended_Settings
Periodic malware scanners
HitmanPro, Kaspersky Virus Removal Tool and AdwCleaner (for the kids)
Malware sample testing
I do not participate in malware testing
Browser(s) and extensions
Microsoft Edge with uBlock Origin, Bitdefender TrafficLight, Bitwarden and Microsoft Editor
Google Chrome with the same extensions plus the Microsoft Defender Browser Protection extension on the kid's laptops.
They use Edge for school and Chrome for fun
Maintenance tools
Autoruns, CCleaner, PatchMyPC, SUMo and Driver Easy Pro
File and Photo backup
Windows File History on external drive (weekly)
OneDrive with Microsoft 365 ransomware protection (always on sync)
System recovery
Windows system image
Risk factors
    • Browsing to popular websites
    • Logging into my bank account
    • Working from home
    • Streaming audio/video content from trusted sites or paid subscriptions
    • Streaming audio/video content from shady sites
Computer specs
Acer Aspire VN7-791G-576X
Intel Core i5-4210H
Intel HD Graphics 4600 / NVIDIA GeForce GTX 860M
Kingston 16GB Dual-Channel DDR3 PC3-12800 RAM
Samsung SSD 850 EVO M.2 250GB
Seagate HDD ST1000LM014-1EJ164 1TB
Realtek High Definition Audio
Notable changes
2020.02.23 removed VoodooShield and uBlock Origin and added Kaspersky Security Cloud Free and AdGuard (extension).
2020.03.09 removed AdGuard and Kaspersky Security Cloud Free and added Hard_Configurator 5.0.0.1 beta uBlock Origin and the Netcraft extension. replaced Bandizip with Explzh because of the advertisements in the free version.
2020.03.22 removed Hard_Configurator, kept ConfigureDefender, DocumentsAntiExploit and RunBySmartscreen.
Added NoVirusThanks SysHardener, VoodooShield and the Certificate Info extension.
2020.03.28 added Ziggo safe Online and Hard_Configurator and removed SysHardner.
2020.03.30 removed CCleaner Pro
2020.04.05 installed HC 5.0.01 beta with recommended settings. Removed VoodooShield.
Tried to minimize extensions: replaced uBlock Origin with AdGuard and removed Certificate Info and Netcraft. Added Microsoft Editor. All extensions are now from the Microsoft Store except Browsing Protection by F-Secure (installed automatically).
2020.04.22 Removed Ziggo Safe Online and Hard_Configurator Trying Windows Defender with Comodo Firewall.
2020.05.04 removed Comodo Firewall and installed Emsisoft Ant-Malware Home.
2020.05.08 replaced Emsisoft Anti-Malware with Kaspersky Security Cloud Free
2020.05.18 replaced KSC Free with WD and uninstalled some browser extensions.
2020.07.05 back to Bitwarden and Bitdefender TrafficLight and WhitelistCloud added.
2020.07.08 switched form WhitelistCloud to VoodooShield Pro. Went from uBlock Origin to AdGuard.
2020.07.15 Back to KSC Free.
2020.08.09 added SpywareBlaster 5.7 Private Beta with MS Edge support.
2020.08.12 back to Microsoft Defender Antivirus
2020.08.15 back to Kaspersky Security Cloud Free
2020.08.31 removed O&O ShutUp 10 and went back to Microsoft Defender
2020.09.27 removed Bitdefender TrafficLight and went back from Simple Windows Hardening to Hard_Configurator
2020.10.27 went from WD to KSCFree and from uBlock Origin to AdGuard.
2020.11.14 back to WD on high and simplified config

Stopspying

Level 19
Verified
Top Poster
Well-known
Jan 21, 2018
814
Did a clean install of Windows 10 version 20H2 Build 19042.423.
Got SpywareBlaster 5.7 Private Beta with MS Edge support from javacool at Wilders.
SpywareBlaster - there is a blast from the past. I used this for a long time, javacool were good at what they did IMO. Some AVs clashed with it so I stopped using it, it would be good to know if it still does does its job well.
 

Soulbound

Moderator
Verified
Staff Member
Well-known
Jan 14, 2015
1,761
how is spywareblaster so far after you added, considering it can be irrelevant due to your current security configuration. If you were running Windows Defender, then i would fully agree having SB in the system.
 

Gandalf_The_Grey

Level 76
Thread author
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Apr 24, 2016
6,505
how is spywareblaster so far after you added, considering it can be irrelevant due to your current security configuration. If you were running Windows Defender, then i would fully agree having SB in the system.
Well it still is a simple added layer of browser protection.
It blocks stuff like tracking cookies (example double-click) and scripts (example coin miners).
You can see the blocked items in the program itself and in the settings of the (supported) browsers.
No magic but less work for your adblocker and antivirus program.
It's more like privacy tools and system hardeners, you can do it yourself but not that easy.
 

Gandalf_The_Grey

Level 76
Thread author
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Apr 24, 2016
6,505
Block 3th party cookies in browser.


Mainstream browser do that already.

stay secure, not paranoid ;)
Well I do block third party cookies, but sometimes it's not easy.
Microsoft Teams on the web is a difficult one with third party cookies blocked.
Some media also need third party cookies to play.

I hope I stay secure and a little bit paranoid ;)
All those data leaks these days fuel my healthy paranoia :D
 

Gandalf_The_Grey

Level 76
Thread author
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Apr 24, 2016
6,505
This thread Q&A - Free Kaspersky Security Cloud’s notification, is it a mitm attack?? inspired me to go back to Microsoft Defender Antivirus and Bitdefender TrafficLight as extra browser protection.
Two annoying bugs left on my system:
Optimize drives tool doesn't remember when it was last run:
Had to turn off memory integrity to let Windows Defender Network Inspection Service run automatically:
Hope these will be fixed soon.
Then I can recommend Windows 10 2004 (20H2 is just a small upgrade) and Microsoft Defender Antivirus without any doubt.
 

Gandalf_The_Grey

Level 76
Thread author
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Apr 24, 2016
6,505
Back to Kaspersky Security Cloud Free.
Simply seems to work the best with my laptop, no delays opening folders, programs and when browsing and no unnecessary blocks.
From my SpywareBlaster thread, trying to keep things simple:
I use O&O ShutUp10 for privacy (also covers Edge), Simple Windows Hardening from @Andy Ful for as the name implies Windows hardening and SpywareBlaster for browser hardening next to uBlock Origin (adblocker).
It seems that MS Outlook uses IE11 for displaying HTML mails, so in that case SywareBlaster also protects MS Outlook in my system.
Programs and drivers are kept UpToDate using Internet, PatchMyPC, SUMo and Driver Easy Pro.
 

Gandalf_The_Grey

Level 76
Thread author
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Apr 24, 2016
6,505
Inspired by the blog postings of Wladimir Palant the developer of Adblock Plus I decided to go back to Microsoft Defender Antivirus.
The Windows Defender network inspection service fails to start bug was fixed with a platform update.
So, I could enable Memory Integrity again.
Removed O&O ShutUp 10 because I needed full telemetry to update to the latest beta builds.
Doing my own privacy settings manual with the help of these 2 resources:
 

blackice

Level 38
Verified
Top Poster
Well-known
Apr 1, 2019
2,731
Inspired by the blog postings of Wladimir Palant the developer of Adblock Plus I decided to go back to Microsoft Defender Antivirus.
The Windows Defender network inspection service fails to start bug was fixed with a platform update.
So, I could enable Memory Integrity again.
Removed O&O ShutUp 10 because I needed full telemetry to update to the latest beta builds.
Doing my own privacy settings manual with the help of these 2 resources:
I leaning the same way. Feeling kind of done with the messiness in 3rd party apps.
 
Last edited:

sepik

Level 11
Verified
Well-known
Aug 21, 2018
505
Hello,
Are you fighting against Microsoft telemetry or network and host mitigation or both? Andy's software is good, no question about that, but never ever rely on the windows own stuff, i suggest for Symantec SEP firewall IDS with Andy's own tool. You do need a proper IDS firewall, and Symantec SEP component is only that can provide that.
 
  • Like
Reactions: oldschool

Gandalf_The_Grey

Level 76
Thread author
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Apr 24, 2016
6,505
Hello,
Are you fighting against Microsoft telemetry or network and host mitigation or both? Andy's software is good, no question about that, but never ever rely on the windows own stuff, i suggest for Symantec SEP firewall IDS with Andy's own tool. You do need a proper IDS firewall, and Symantec SEP component is only that can provide that.
Well not really fighting Microsoft telemetry because some telemetry is useful to fix bugs, but it's more wanting to limit what's out there on me.
Not sure if a firewall and thus more third-party code is needed for me.
I have tried many firewall's in the past but found them more a nuisance than helpful when prompting to let stuff access the internet, but I have never tried Symantec SEP.
 

Gandalf_The_Grey

Level 76
Thread author
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Apr 24, 2016
6,505
@Gandalf_The_Grey when did you move to Windows Insider?

Thanks for the lead to that resource. (BTW, Malwarebytes BG blocked that site! :LOL:)
I moved to insider at the end of July too see the improved start menu and see if some bugs present in 2004 were resolved.
The optimize drives bug is still fixed only in the beta channel and still not in 2004.

It's an interesting blog from the developer/CEO of Adblock Plus, maybe there were some bugs in Malwarebytes published there in the past?
 
F

ForgottenSeer 85179

Doing my own privacy settings manual with the help of these 2 resources:
The askvg article is:
last updated on November 21, 2015 by VG

But the kaspersky is a good one (y)
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top