How to set up a security system WITHOUT using AV/AM software?

shmu26

Level 85
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Jul 3, 2015
8,153
In my opening post I also questioned NVTRP and AppGuard as to whether they use a malware database of any sort for their operation for I have not use them before. Can you confirm this? Thanks.
NVT ERP uses no malware database at all. By default it comes with a short list of trusted vendors, but that is completely customizable. It does not rely on the cloud, either. But it is not being actively developed, to our great dismay...

I am not an active AppGuard user, but I can tell you that it does not use a malware database.
 

HarborFront

Level 72
Thread author
Verified
Top Poster
Content Creator
Oct 9, 2016
6,141
NVT ERP uses no malware database at all. By default it comes with a short list of trusted vendors, but that is completely customizable. It does not rely on the cloud, either. But it is not being actively developed, to our great dismay...

I am not an active AppGuard user, but I can tell you that it does not use a malware database.

Thanks.

So the list of trusted vendors is by the NVTERP developer which means it'll be updated by the developer, right? Or is that a static list? This don't meet my requirement for the former. Like I said in my opening post if the program itself does an initial scan and generates a whitelist and then, later, the user added applications to the whitelist then this is considered as applicable.

Program and software vulnerabilities updates are acceptable.

I believe my opening post listed quite a number of requirements.
 

HarborFront

Level 72
Thread author
Verified
Top Poster
Content Creator
Oct 9, 2016
6,141
Check out the breakdown in this thread too from hjlbx
https://malwaretips.com/threads/default-deny-software.64274/

Yes, I have read the post. It's just a list of software being categorized according to their functions. Very informative indeed. i'll definitely make use of it later on.

The question is how many of the software listed there meet my requirements in my opening post? Can you list those that meet my requirements for I have not use many of them ?
 
Last edited:
  • Like
Reactions: _CyberGhosT_
U

uncle bill

I don't know if this is affordable to you or not but i would suggest these simples rules (despite being many others):
1) use a windows user with limited access to system resource;
2) change this user weekly (creating a new one and deleting the older ones);
3) configure your router or firewall to grant acces to specific external ports and blocking the rest;
4) keep your operating system up to date;
5) never ever think you are more knowledged and/or smart of others;
6) ask yourself as often as it's needed "do i really need this?" and "what i'm doing?".

:)
 
  • Like
Reactions: DardiM and askmark

HarborFront

Level 72
Thread author
Verified
Top Poster
Content Creator
Oct 9, 2016
6,141
Sandbox (sandboxie is free) and add an adblocker to your browser + UAC on max. If you learn how to use sandboxie you should be fine.

And the most important .... Common Sense Internet Security.

Yes, software using virtualization techniques do meet my requirement. Only program and security vulnerabilities need to be updated here.

I already have uBlock Origin, Ghostery, Adguard Adblocker, Avira Safe Browser, BitDefender Traffic Light etc on my Chrome/Firefox browsers.

Which adblocker do you recommend which don't require filters/definitions update for Chrome/Firefox?
 

shmu26

Level 85
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Jul 3, 2015
8,153
Thanks.

So the list of trusted vendors is by the NVTERP developer which means it'll be updated by the developer, right? Or is that a static list? This don't meet my requirement for the former. Like I said in my opening post if the program itself does an initial scan and generates a whitelist and then, later, the user added applications to the whitelist then this is considered as applicable.

Program and software vulnerabilities updates are acceptable.

I believe my opening post listed quite a number of requirements.
I was not able to wrap my mind around all the details in your original post, so please bear with me.
ERP trusted vendors list will not be updated by dev, and you will not be getting any program updates either, because the dev is not on the job. He has abandoned the project, at least temporarily. He might come back, don't count on it.
Nevertheless, ERP has its dedicated, die-hard followers, because there is really nothing like it.
There is no initial scan and no generated whitelist, although you can put it in training mode if you like.
 

ExoGen CyberSecurity

Level 3
Verified
Well-known
Sep 17, 2016
113
uBlock Origin as adblocker.

You can use your OS with no updates (if you understand how updates work you understand this point), the only way to protect is with some type of sandbox because you don't know what you install or what you allow, keep in mind that there are a lot of signed malware and so on.

I know my point of view is not that popular here but with HIPS/Default Deny you need to know what you are doing (else it's useless)

PS: check this post too.
 
Last edited:
  • Like
Reactions: DardiM

shmu26

Level 85
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Jul 3, 2015
8,153
by the way, you might actually like ReHIPS. It uses isolation of browser and other sensitive apps, it has a powerful default/deny mechanism, it does not rely on cloud or malware database.
It is highly customizable.
It is in private beta, but if you apply, you will be accepted.
 
  • Like
Reactions: _CyberGhosT_

Av Gurus

Level 29
Verified
Honorary Member
Top Poster
Malware Hunter
Well-known
Sep 22, 2014
1,767
Here is what it looks like:
Clipboard01.jpg

But I set it like this:
Clipboard02.jpg
 

HarborFront

Level 72
Thread author
Verified
Top Poster
Content Creator
Oct 9, 2016
6,141
I was not able to wrap my mind around all the details in your original post, so please bear with me.
ERP trusted vendors list will not be updated by dev, and you will not be getting any program updates either, because the dev is not on the job. He has abandoned the project, at least temporarily. He might come back, don't count on it.
Nevertheless, ERP has its dedicated, die-hard followers, because there is really nothing like it.
There is no initial scan and no generated whitelist, although you can put it in training mode if you like.

Hi thanks a lot

FYI, I have written to the NVTERP developer for its compatibility with Windows 10 Pro 64-bit and he replied. That's ok. I have written to VIPRE about its products but I got no reply. So forget it! I have written to Surfight on HitmanPro.Alert but got no reply but I'm using its program now to replace my just-expired Malwarebytes Antmlaware Premium and Anti-Exploits Premium. So it's alright for me and there are also forums here and at Wilders Security and BleepingComputer.

Coming to NVTERP. So I can add applications to its whitelist? If yes, then it meets my requirements......very likely to replace my VS.
 
Last edited:
  • Like
Reactions: Overkill

HarborFront

Level 72
Thread author
Verified
Top Poster
Content Creator
Oct 9, 2016
6,141
by the way, you might actually like ReHIPS. It uses isolation of browser and other sensitive apps, it has a powerful default/deny mechanism, it does not rely on cloud or malware database.
It is highly customizable.
It is in private beta, but if you apply, you will be accepted.

Any difference from Sandboxie, Shadow Defender and NVTERP combined? No point having software with overlapping features and protection.
 

shmu26

Level 85
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Jul 3, 2015
8,153
Hi thanks a lot

FYI, I have written to the NVTERP developer for its compatibility with Windows 10 Pro 64-bit and he replied. That's ok. I have written to VIPRE about its products but I got no reply. So forget it! I have written to Surfight on HitmanPAro.Alert but got no reply but I'm using its program now to replace my just-expired Malwarebytes Antmlaware Premium and Anti-Exploits Premium. So it's alright for me and there are also forums here and at Wilders Security and BleepingComputer.

Coming to NVTERP. So I can add applications to its whitelist? If yes, then it meets my requirements......very likely to replace my VS.
you can add apps to whitelist, for sure.

The advanced users of ERP like to whitelist specific command lines, when this is relevant.
The command lines are editable with wildcards, which is important, because otherwise you are likely to get repetitive prompts, when a vulnerable process was involved. This is because the vulnerable process list overrides the whitelisted programs list, unless you whitelisted a specific command line.
 

shmu26

Level 85
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Jul 3, 2015
8,153
Any difference from Sandboxie, Shadow Defender and NVTERP combined? No point having software with overlapping features and protection.
ReHIPS will do what sandboxie does (and much more), but it will do it with better isolation (although with less convenience). So you don't need SBIE, unless you really like certain sandboxie features.
As for SD, that is an animal of a different color. When you reboot, you lose all changes, for better or for worse. It will not protect you from infections. It just makes the infections temporary, but if your private data already leaked, too bad.
If you have ReHIPS, you don't need ERP. It incorporates the main features of ERP.
 

HarborFront

Level 72
Thread author
Verified
Top Poster
Content Creator
Oct 9, 2016
6,141
ReHIPS will do what sandboxie does (and much more), but it will do it with better isolation (although with less convenience). So you don't need SBIE, unless you really like certain sandboxie features.
As for SD, that is an animal of a different color. When you reboot, you lose all changes, for better or for worse. It will not protect you from infections. It just makes the infections temporary, but if your private data already leaked, too bad.
If you have ReHIPS, you don't need ERP. It incorporates the main features of ERP.

Ok, so you say ReHIPS is a good replacement for all 3 software I mentioned. This is great! But I'm no so sure my low IQ can handle it. I think I'll wait a little longer for the official version to be released. Using SB, SD and NVTERP combined might be a good start for me to get a feel.

With this ReHIPs how far can it protect the system as far as the definition of malware (mentioned in my opening post) is concerned? Will it be adequate to just use this ReHIPs alone or need to combine with others? Any others to make good companionship with ReHIPs?

Thanks
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top