Unverified Gandalf_The_Grey's PC Security Config

PC Setup Configuration Help & Showcase
131 Replies 37,159 Views
Original forum configuration · expand details
Last updated
Oct 19, 2025
Main use of this computer
For home and private use
Operating system
Windows 11
On-device encryption
Windows BitLocker / Device Encryption
Device sign-in security
    • Windows Hello PIN or biometric sign-in (face / fingerprint / Touch ID)
Security updates
Allow security updates and latest features
Update channels
Allow stable updates only
User Account Control (UAC)
Always notify
Smart App Control
Off
Network firewall
Enabled
Router and network details
Ziggo SmartWifi modem by Sagemcom with Safe Online Netwerk and Safe Online Modem activated
Real-time protection
Microsoft Defender Antivirus
Device firewall
Microsoft Defender Firewall
Custom security settings
DefenderUI 1.44
  • Recommended Profile
Windows 11 Pro 25H2
  • Memory integrity enabled
Resources and tools used to tweak privacy and security settings
Periodic malware scanners
Norton Power Eraser and Sophos Scan & Clean
Malware sample testing
I do not participate in malware testing
Environment for malware testing
None
Browsers and extensions
Microsoft Edge with uBlock Origin Lite, Consent-O-Matic, Bitwarden, Osprey as extensions
Secure DNS
From my ISP (Ziggo)
Desktop VPN
AdGuard VPN
Password and passkey manager
Bitwarden browser extension
Two-factor authentication
Microsoft Authenticator
Maintenance tools
Maintenance tools: BleachBit, Disk Cleanup, Optimize Drives, Autoruns.
Update tools: UCheck , Driver Easy.
File and photo backups
Windows Backup, OneDrive with Microsoft 365 ransomware protection (always on sync)
Subscriptions
    • Microsoft 365 Family (up to 1 TB per person)
System recovery
Windows system image
Usage and exposure
    • Visiting familiar websites
    • Visiting unknown or untrusted websites
    • Making audio/video calls
    • Opening email attachments
    • Online shopping and card payments
    • Logging into my bank account
    • Downloading software and files from reputable sites
    • Streaming audio/video content from trusted sites or paid subscriptions
Computer specs
malwaretips.com

PC Specs - Gandalf_The_Grey's new LG Gram 16

Bought myself a new laptop, a LG Gram 16 and for a limited time you get a free LG View 16-inch portable display. https://www.parkablogs.com/content/review-lg-gram-view-16-inch-portable-display https://www.parkablogs.com/content/designer-review-lg-gram-16-2022...
malwaretips.com malwaretips.com
Notable changes
2022.01.01 new config for the new year.
2022.01.31 removed Bitsum Process Lasso, Samsung Magician. Switched from DefenderUI Free and VoodooShield to the all-in-one DefenderUI Pro.
2022.02.12 back to Ziggo Safe Online by F-Secure
2022.02.16 added Quad9 secure DNS
2022.03.22 have to use Adobe Reader for work, removed KVRT.
2022.04.09 trying the AdGuard extension instead of uBlock Origin
2022.04.10 back to uBlock Origin
2022.05.01 removed Ziggo Safe Online, back to Microsoft Defender and installed Kerish Doctor
2022.05.04 installed the latest VoodooShield
2022.05.13 installed fs protection by F-Secure 18.4 beta 2
2022.05.20 back to Microsoft Defender Antivirus and Andy's tools
2022.05.23 changed from ConfigureDefender to DefenderUI
2022.06.07 back to fs protection and VoodooShield
2022.07.18 back to Microsoft Defender Antivirus with DefenderUI and VoodooShield
2022.08.14 reset of Windows 11 and added (back) Simple Windows Hardening
2022.08.31 small changes because of my new laptop
2022.09.06 went from uBlock Origin to AdGuard
2022.09.12 up to date with the latest changes in this form
2022.09.26 back to FS Protection
2022.10.23 reset of Windows 11 22H2 and using Microsoft Defender with ConfigureDefender on high
2022.12.12 filled the new fields and Smart App Control has turned itself off.
2023.01.01 back to FS Protection and running a trial of NoVirusThanks SysHardener
2023.01.29 removed NoVirusThanks SysHardener and switched from AdGuard MV3 to uBlock Origin
2023.03.20 back to Windows buit-in protection configured by Hard_Configurator
2023.03.15 back to Simple Windows Hardening
2023.05.19 up to date with the May 2023 Update of this form
2023.07.05 back to FS Protection
2023.08.17 testing Windows Hybrid Hardening
2024.02.02 using Windows Hybrid Hardening Light an added the I don't care about cookies extension
2024.04.20 removed I don't care about cookies and Bitdefender TrafficLight
2024.04.20 removed McAfee WebAdvisor
2024.04.24 changed from uBlock Origin to AdGuard
2024.06.19 added DefenderUI and switched from AdGuard to uBlock Origin Lite
2024.07.12 changed to Hard_Configurator and the AdGuard extension.
2024.10.20 Smart App Control on and uBlock Origin Lite and McAfee WebAdvisor as extensions.
2025.10.19 App Control Off, due to problems with shortcuts and got Windows 11 25H2.
Feedback preference

Only essential issues, please

Gandalf_The_Grey said:
-Secure still slows down my browsing somewhat so I'm back to Windows built-in protection configured by Hard_Configurator.
Click to expand...
Surprised ,as I'm sensitive to performance / speed and I was running my win10_vm with F-Secure 19.0 last night & thru vpn, and it was fast+, subjectively as fast as Bitdefender free and both are faster than MS Defender + H_C. Both Bitdefender & F-Secure on VM seems as fast win10 hardware host running ESET. And even MS Defender on VM is only slightly behind, but I am lucky enough to have download bandwidth of 500 mbps / and round 250 thru vpn.
 
simmerskool said:
Surprised ,as I'm sensitive to performance / speed and I was running my win10_vm with F-Secure 19.0 last night & thru vpn, and it was fast+, subjectively as fast as Bitdefender free and both are faster than MS Defender + H_C. Both Bitdefender & F-Secure on VM seems as fast win10 hardware host running ESET. And even MS Defender on VM is only slightly behind, but I am lucky enough to have download bandwidth of 500 mbps / and round 250 thru vpn.
Click to expand...
Maybe it is different on a VM? And it is always different between systems and configurations.
For me this feels faster and I can get 350 mbps on wifi, before with F-Secure it was 250 mbps on a 350 mbps connection.
 
Gandalf_The_Grey said:
Maybe it is different on a VM? And it is always different between systems and configurations.
For me this feels faster and I can get 350 mbps on wifi, before with F-Secure it was 250 mbps on a 350 mbps connection.
Click to expand...
good to hear, so you think there is (was) slowdown with F-Secure servers? I did not see that here yesterday, but then lately I was spending more time with Bitdefender VM and last 2 days with Linux VM, all I can say FS was standard fast+ for me yesterday.
 
Gandalf_The_Grey said:
Maybe it is different on a VM? And it is always different between systems and configurations.
For me this feels faster and I can get 350 mbps on wifi, before with F-Secure it was 250 mbps on a 350 mbps connection.
Click to expand...
When I recall right you have a TP-link router. I don't know whether you make use of TP link smart connect feature or air time fairness. When you use smart connect, you should use air time fairness and choose the AV with highest throughput (assuming MD + H_C is as good as F-secure). When you use separate channels than you can disable airtime fairness when you have a 350 mbps connection and a single device only maxes out to 250 mbps. Using 5/7th (250/350) of the maximum capacity could be faster in practice than enabling airtime fairness with 3 clients (350/3 = for longer througput only 1/3 of the 350 mbps per device).

MD is fast, I just switched to Avast Free (also tested Bitdefender and Ziggo's F-Secure) and all were slower than MD when making image backup's.(Avast 15% slower, Bitdefender and F-secure 20% slower). So your feel might reflect actual performance. As said I don't know with how many devices you are usually online, but 250 mbps might be faster in practise than 350 mbps depending on how you have setup your TP-link router and the number of devices usually online.
 
simmerskool said:
Surprised ,as I'm sensitive to performance / speed and I was running my win10_vm with F-Secure 19.0 last night & thru vpn, and it was fast+, subjectively as fast as Bitdefender free and both are faster than MS Defender + H_C. Both Bitdefender & F-Secure on VM seems as fast win10 hardware host running ESET. And even MS Defender on VM is only slightly behind, but I am lucky enough to have download bandwidth of 500 mbps / and round 250 thru vpn.
Click to expand...
If there is something I test often, it is speed both at Speedtest and others. I use cable, use win10, now have 250mb download and 250mb upload. I regularly test Norton VPN together with Norton 360 delux, PIA together with f-secure, PIA together with Norton, PIA together with Bitdefender and Kaspersky.

With VPV, fastest speed f-secure and PIA, approx. 246 down - 247 mb up, without VPN 252-252. With Norton and PIA 222 up 232 down. Norton and Norton VPN, 230 down, and 226 up. With Kaspersky, about the same as with Norton, and slightly better with Bitdefender, but the best solution for me is f-secure and PIA. I test both day and night.

When I had the 750mb line, the results were exactly the same between the programs just at a higher speed, the same with the 500mb line. Personally, I'm almost never online without a VPN connected, and I then use WireGuard with kill switch and PIA Mace and PIA DNS. ;)
 
Did an upgrade to my Wifi with a TP-Link Deco XE75 AXE5400 Tri-band Mesh Wifi 6E-systeem.
www.tp-link.com

AXE5400 Tri-Band Mesh Wi-Fi 6E System

The AXE5400 WiFi 6E Mesh WiFi System boosts your WiFi range and delivers ultra-fast WiFi speeds of up to 5400 Mbps.
www.tp-link.com www.tp-link.com
Thanks to the new SWH ver. 2.1.1.1 beta from @Andy Ful (added support for Windows 11 ver. 22H2) I'm back with Simple Windows hardening (y)
malwaretips.com

New Update - Simple Windows Hardening

SWH vs. Magniber JavaScript variant https://malwaretips.com/threads/mag...ers-via-javascript-files.117780/#post-1007487 https://threatresearch.ext.hp.com/m...geting-home-users-with-fake-software-updates/ Previously Magniber was primarily spread through MSI and EXE files, but in September 2022...
malwaretips.com malwaretips.com
 
Up to date with the latest tools from @Andy Ful
Back to FS Protection by F-Secure, because I couldn't acces my Enphase solar system with Microsoft Defender Antivirus.
And for the reasons listed here:
malwaretips.com

Advanced Plus Security - Gandalf_The_Grey's Laptop Config 2023

New config for the new year with the new tools released by @danb https://malwaretips.com/threads/voodooshield-7-0.111005/page-6#post-970076
malwaretips.com malwaretips.com
 
Do you also have smart monitors for energy? I have declined aĺl those free smart monitor options. The only hassle it gave me that once every few years they measure and calibrate your analog monitors (but they also do other safety and qyality checks as a bonus, e.g pressure drop for natural gas etc).
 
Max90 said:
Do you also have smart monitors for energy? I have declined aĺl those free smart monitor options. The only hassle it gave me that once every few years they measure and calibrate your analog monitors (but they also do other safety and qyality checks as a bonus, e.g pressure drop for natural gas etc).
Click to expand...
Yes, I have smart monitors. I also have a P1 and a Water monitor from HomeWizard.
 
As illustration some HomeWizard graphs:
1688632135424.png
 
Now running (and testing) Windows Hybrid Hardening by @Andy Ful

New Update - Testing Windows Hybrid Hardening (new hardening application).

Windows Hybrid Hardening. (updated in October 2023) https://github.com/AndyFul/Hard_Configurator/blob/master/WindowsHybridHardening/WHHLight_Package_1004.exe The link to the WHHLight website: https://github.com/AndyFul/Hard_Configurator/tree/master/WindowsHybridHardening...
malwaretips.com
 
Gandalf_The_Grey said:
Now running (and testing) Windows Hybrid Hardening by @Andy Ful

New Update - Testing Windows Hybrid Hardening (new hardening application).

Windows Hybrid Hardening. (updated in October 2023) https://github.com/AndyFul/Hard_Configurator/blob/master/WindowsHybridHardening/WHHLight_Package_1004.exe The link to the WHHLight website: https://github.com/AndyFul/Hard_Configurator/tree/master/WindowsHybridHardening...
malwaretips.com
Click to expand...
You are a brave man, and a hero! :cool:(y)
 

Recently browsing

Members who viewed this thread in the last 5 minutes

You may also like...

Continue exploring the conversation.

Back
Top