Basic Security imuade's security configuration

[imuade]

Hi all, I'm happy to be here at MalwareTips
Please feel free to drop a line about my config

 

[harlan4096]

Probably if You already applied SysHardener tweaks + Avast Free well tweaked, You don't need OSArmor...

I would recommend better for Image System Backups, Macrium Reflect Free or AOMEI Bakcuppper.

A PassWord Manager would be also welcome, and in Web Privacy, You may consider to add a VPN Service.

Thanks for sharing

 

[Evjl's Rain]

hi, I found that OSArmor is not compatible with avast because when test it, OSArmor didn't block anything

after 2 hours of normal usage, OSA suddenly started working again
I don't know what the reason is

syshardener with avast should be enough

 

[imuade]

Hi, thanks for your feedback
About OSArmor, I have it working with Avast without any exclusion, but OSArmor is very quiet.
To get a popup I have, for exemple, to launch powershell with administrative rights; like that I get a popup from OSArmor saying it blocked powershell execution

 

[LDogg]

The important things first:
- Set UAC to Always Notify
- With Avast you may not need OSArmor
- Avast w/ Hardened Mode set to aggressive with Syshardener @Evjl's Rain settings should be sufficient

Chrome Extensions:
- Cookie AutoDelete (self explanatory)
- Netcraft (further PUP & XSS browser protection)
- Scriptsafe (very good for stopping script, unwanted content & more, sites can be whitelisted too)
- Privacy Possum & Decentraleyes (privacy focused extensions that work well alongside uBlock Origin)

Change default search engine to DuckDuckGo or Startpage.

Could also add a VPN like Windscribe Free to your setup too.

~LDogg

 

[Moonhorse]

@LDogg Depends are you fanatic against google, and block most google domains with scriptsafe , i cant get decentraleyes activate at all ( only saw this during scriptsafe using default block option)

If you run scriptsafe default allow, decentraleyes will be working maybe, i have to test this soon

If you use scriptsafe default allow, it wont break sites but works well together with ublock origin and blocks unwanted content away, also easier to block domains with scriptsafe than with ublock ( advanced user; medium mode(?)

 

[LDogg]

@LDogg Depends are you fanatic against google, and block most google domains with scriptsafe , i cant get decentraleyes activate at all ( only saw this during scriptsafe using default block option)

If you run scriptsafe default allow, decentraleyes will be working maybe, i have to test this soon

If you use scriptsafe default allow, it wont break sites but works well together with ublock origin and blocks unwanted content away, also easier to block domains with scriptsafe than with ublock ( advanced user; medium mode(?)

Nope I just dislike how Google conducts it's business as a search engine. Which is why I give advice for alternatives.

I believe you could be right for Decentraleyes.

~LDogg

 

[imuade]

Thanks, I will have a look at those extensions

 

[Moonhorse]

@LDogg I know, i didnt meant that. I was about to say decentraleyes will be useless with scriptsafe if youre gonna block google domains anyways. ( scriptsafe ; default mode: block)

If you dont care about google, you can run scriptsafe ' default mode: allow' wich wont block google domains...and this is where decantraleyes gonna work because google domains are enabled.

 

[gin]

Brain Total Security 2018 you ready to go

 

[Moonhorse]

Brain Total Security 2018 you ready to go

But everyone makes mistakes

 

[imuade]

Update 31/07/2018
Removed NVT OSArmor
Changed NVT SysHardener settings to match @Evjl's Rain 's
Added Dism++, mainly to deep cleaning the PC (WinSxS and such)

 

[JM Safe]

Follow suggestions about backups.

Thanks for sharing.

 

[imuade]

Update 05/08/2018
Replaced Avast with Kaspersky Free: lighter
Replaced Sphinx-soft W10FC with Binisoft WFC: more configurable

 

[imuade]

Update 06/08/2018
KFA didn't update signatures for the whole day, the same bug I found some time ago... so, I removed it
Now I'm trying this light config:

• Cisco Immunet (ETHOS and SPERO cloud engines only)
• Heilig Defense RansomOff
• NoVirusThanks OSArmor

 

[Moonhorse]

Are you using advanced or simple mode on heilig?

 

[imuade]

Are you using advanced or simple mode on heilig?

Advanced.
I enabled only anti ransomware, MBR protection and HIPS lite modules

 

[imuade]

Update 19/08/2018
Back to Avast Free with Hardened Mode

 

[FrFc1908]

if it where me , I would turn UAC up to max and put my trust in aomei backupper free , or preferably macrium reflect free. thanks for sharing your config with us

 

[imuade]

if it where me , I would turn UAC up to max and put my trust in aomei backupper free , or preferably macrium reflect free. thanks for sharing your config with us

I've been hating UAC since its debut on Vista. I tried to use it at default for a while, but I can't get used of it popping up every time I run O&O ShutUp 10 or WPD...
About backups, I make one every month on an external HD by using the default SW (Win7-like)