Latest Changes
Mar 17, 2019
Operating System
Windows 10
Windows Edition
Pro
Build
Version 1809 OS Build 17763.379
System Architecture
64-bit OS
Security Updates
Automatic Updates - All security and feature updates
User Access Control
Always Notify
Firewall
Windows Firewall - Network security provided by Microsoft
Device Security
Windows Defender SmartScreen (Windows 10)
User Account
Administrator - User has complete control over the device
Recent Security Incidents
No malware or privacy issues
Malware Testing
None - No Malware on host PC or VM
Real-time Web & Malware Protection
Emsisoft Anti-Malware 2019.2.0.9269 and Hard_Configurator 4.0.0.2
Custom Settings For Real-Time Protection
Custom - Minor changes for Increased Security
Custom Settings For Real-Time Protection Details
1) Install H_C (ConfigureDefender is already in H_C). Press <ConfigureDefender> button and apply <Defender High> settings.

Change the four Audit settings in ConfigureDefender to Disabled.

Close ConfigureDefender.

2) Use <Load Profile> option in Hard_Configurator and apply "Windows_10_Recommended_Enhanced" profile.

3) Use <Block Sponsors> button to block mshta.exe and iexplore.exe.

Press <APPLY CHANGES> button.

4) Configure browsers:

a) Disable IE11 in Windows10 (programs and features)

b) Add AdGuard extension to Microsoft Edge (enable malware protection to add chrome's + Yandex safe browsing).

c) Install Google Chrome and add the extension AdGuard and I don’t care about cookies.

d) Set the chrome flag "Extension Content Verification" to "Enforce strict.

5) Install Emsisoft Anti-Malware.
Virus and Malware Removal Tools
Windows Defender periodic scanning, HitmanPro and Zemana AntiMalware,
Browsers and Extensions
Google Chrome with AdGuard, I don’t care about cookies, Emsisoft Browser Security, Windows Defender Browser Protection and LastPass.
Microsoft Edge with AdGuard, Emsisoft Browser Security and LastPass.
Web Privacy
AdGuard Browser extension
Cloudflare and APNIC 1.1.1.1 DNS
Password Management
LastPass
Default Web Search
Google
System Utilities
Hard_Configurator, O&O ShutUp10, O&O AppBuster, Patch My PC, Autoruns, PrivaZer and Disk Cleanup
Data Backup
OneDrive, File History
Frequency of Data backups
Always-on Sync
System Backup
Windows system image
Frequency of System backups
Occasionally
Computer Activity
Banking
Browsing Internet and email
Watch movies and other video content on the Internet
Device is used by family members
Office and work related tasks
Video or photography editing
Computer Specifications
Acer Aspire VN7-791G-576X
Intel Core i5-4210H
Intel HD Graphics 4600 / NVIDIA GeForce GTX 860M
Kingston 16GB Dual-Channel DDR3 PC3-12800 RAM
Samsung SSD 850 EVO M.2 250GB
Seagate HDD ST1000LM014-1EJ164 1TB
Realtek High Definition Audio

Gandalf_The_Grey

Level 13
Verified
I'm thinking of changing AV again.
This time it's going to be Ziggo Safe Online 17.4 (= F-Secure).
Free for me from my ISP and better with malicious and phishing urls.

For myself I will combine it with Hard Configurator from @Andy Ful .

For my kids and older relatives I'm thinking about combining Ziggo Safe Online with SysHardener from @NoVirusThanks
Will that be enough protection or do i also need to add something like OSArmor?
 
Last edited:

Andy Ful

Level 38
Content Creator
Trusted
Verified
I'm thinking of changing AV again.
This time it's going to be Ziggo Safe Online 17.4 (= F-Secure).
Free for me from my ISP and better with malicious and phishing urls.

For myself I will combine it with Hard Configurator from @Andy Ful .

For my kids and older relatives I'm thinking about combining Ziggo Safe Online with SysHardener from @NoVirusThanks
Will that be enough protection or do i also need to add something like OSArmor?
Do your kids use Admin account or SUA?
 

Windows_Security

Level 21
Content Creator
Trusted
Verified
I would opt for the same setup every where. With Hard Configurator Software Restriction Policies installed except for Administrators, all updates and (richt click admin) installs won't be blocked. I use this and fine tune it on my own PC, until zero problems (chrome update works etc) and then copy it to other PC's. I use SysHardener and Hard_Configurator together (because HC is not signed and I also set UAC to block elevation of unsigned). They both dont eat CPU cycles. On my Windows 7 Desktop I used Ziggo's F-secure version for a while, worked fine with both.
 

Andy Ful

Level 38
Content Creator
Trusted
Verified
The children install games frequently, which like to install/update in the UserSpace. This requires more attention & work & skill from parents, when using H_C default deny-setup, because the parents have to install some games and applications. On the other side, this is also much safer, than using restricted default-allow setup. The best solution is using a gaming platform like Steam, because the games are installed/updated in one folder, that can be whitelisted.
'AV + SysHardener' is pretty good as a starting setup. If Gandalf_The_Grey will master H_C and will still like it, then he will know which setup will be the best for children. :giggle:
 

Andy Ful

Level 38
Content Creator
Trusted
Verified
Thanks to @Windows_Security @Andy Ful and @shmu26 I have accepted the challenge and changed my security config for myself and my kids to Hard Configurator and Ziggo Safe online (= F-Secure Safe). :D
The updated AdGuard browser extension is helped by I don't care about cookies and Cloudflare 1.1.1.1 DNS.
Please let me know, if you will encounter difficulties.:giggle:
 

Gandalf_The_Grey

Level 13
Verified
Removed Ziggo Safe Online because it's banking protection locked me out of a banking site.
Back to Emsisoft Anti-Malware and thinking about, but not sure just going for Windows Defender.
Finally removed CCleaner due to lost trust since Avast took over:
CCleaner Free update introduces Tools menu Popup annoyance - gHacks Tech News
Added PrivaZer Donors version and Autoruns to compensate the loss of CCleaner.
 

Similar Threads

Similar Threads