Advanced Plus Security JasonUK's Security Config 2022

[JasonUK]

I change security settings pretty frequently and this is the latest iteration. I tend to layer / harden Windows Defender as I'm not 100% sold on it as sole protection despite its much improved results in Lab tests. No reason other than paranoia and its less than comprehensive reporting / GUI The computer itself is getting a bit long in the tooth (bought 2015?) but runs fast enough for me to delay upgrading to Windows 11 capable hardware.

 

[harlan4096]

Windows UAC?

 

[JasonUK]

Windows UAC?

Sorry missed that, added

 

[Kongo]

ConfigureDefender "Hard" ?

Do you mean the setting "high"?

Also I am pretty sure that the extension Click and Clean isn't doing anything that Brave can't do already. You can set Brave to delete everything on browser exit.

 

[JasonUK]

ConfigureDefender "Hard" ?

Do you mean the setting "high"?

Also I am pretty sure that the extension Click and Clean isn't doing anything that Brave can't do already. You can set Brave to delete everything on browser exit.

Yes, amended to be clearer

Click & clean allows you to selectively retain some cookies on exit which I use for a very small numbers of sites I visit frequently (obviously none that access personal or financial details)

 

[oldschool]

allows you to selectively retain some cookies on exit

Brave does this:

 

[JasonUK]

Brave does this:
View attachment 263640

I'm aware but if I want to I can clear all/as many Click & Clean retained cookie items I want en-masse rather than having to do each individually in Brave. It's just more convenient and one of my few concessions on extensions

 

[JasonUK]

Switched back to AdGuard for Windows. Replaced AdGuard AdBlocker v4 Beta extension (Brave & Edge) with AdGuard Browser Assistant extension (for the AdGuard desktop app). Secure DNS remains with Quad9 but through AdGuard for Windows rather than YogaDNS.

 

[JasonUK]

Switched back to Avast Free (4 core shields + ransomware) + Malwarebytes Premium combination.

Disabled or Removed:
Windows Defender + ConfigureDefender ('High' setting)
Wisevector StopX 3.03 (All shields, Firewall & HIPS 'High Security' Modes). WVSX retained as an on-demand, second opinion scanner

 

[Gandalf_The_Grey]

Switched back to Avast Free (4 core shields + ransomware) + Malwarebytes Premium combination.

Disabled or Removed:
Windows Defender + ConfigureDefender ('High' setting)
Wisevector StopX 3.03 (All shields, Firewall & HIPS 'High Security' Modes). WVSX retained as an on-demand, second opinion scanner

Just curious... Why that combination of Avast with Malwarebytes? Is Avast as AV not good enough? You could add Simple Windows Hardening or Hard_Configurator to harden your system.

 

[Moonhorse]

Switched back to Avast Free (4 core shields + ransomware) + Malwarebytes Premium combination.

Disabled or Removed:
Windows Defender + ConfigureDefender ('High' setting)
Wisevector StopX 3.03 (All shields, Firewall & HIPS 'High Security' Modes). WVSX retained as an on-demand, second opinion scanner

Any reason?

 

[JasonUK]

Just curious... Why that combination of Avast with Malwarebytes? Is Avast as AV not good enough? You could add Simple Windows Hardening or Hard_Configurator to harden your system.

I'm sure Avast Free is good enough but I've used the combination for significant periods in the past (setting exceptions in Avast for MBAM & vice versa) and they play nicely. MBAM's anti-exploit shield has a pretty good rep too. I have SWH (recommended settings) too

Any reason?

A few. For some reason WD is noticeably laggy on my system compared to Avast.. don't ask me why WD GUI even with DefenderUI is just not user friendly or informative enough. Controlled folder ransomware protection is a pain so I was relying on WVSX for that ~ Avast's is far more intuitive/easy to use. On WVSX I've no real issue but it conflicts with Avast and I'd really like to see some lab results for WVSX to use it long term.

 

[JasonUK]

Switched back to WD+ConfigureDefender ('High') + WVSX 3.05 combination.

Real time protection disabled/retained as secondary scanners:
Avast Free (4 core shields + ransomware)
Malwarebytes Premium

No particular reason for change.. both combinations work for me (I hadn't tested WVSX v3.05 so that's one small justification for change I suppose!)

 

[SeriousHoax]

Real time protection disabled/retained as secondary scanners:
Avast Free (4 core shields + ransomware)

Avast has a setting called, passive mode. This is better than disabling shields if you want to have Avast as a second opinion scanner.

 

[harlan4096]

I think already in that mode:

 

[SeriousHoax]

I think already in that mode:

View attachment 264869

Oops! Missed that.

 

[JasonUK]

Avast has a setting called, passive mode. This is better than disabling shields if you want to have Avast as a second opinion scanner.

Thanks for that suggestion. As @harlan4096 has commented it's an option I've already used not only so I could use Avast as a second opinion scanner but so Avast could be quickly re-selected as primary real-time protection if required without having to reinstall/set-up exceptions etc again (Avast settings backup doesn't save everything!)

 

[JasonUK]

Switched back to Avast Free (4 core shields + ransomware) but this time combined with VoodooShield Free v7.01 instead of MBAM.

Disabled or Removed:
Windows Defender + ConfigureDefender ('High' setting)
Wisevector StopX 3.05 (All shields, Firewall & HIPS 'High Security' Modes). WVSX retained as an on-demand, second opinion scanner

Reason for change: WD continues to be noticeably laggy on my system. Also this week Defender disabled itself entirely as it was unable to apply 'Microsoft Defender antimalware platform KB4052623 (Version 4.18.2202.4)' update. Having an AV switch itself off without any notification being displayed isn't great for starters but it was compounded by the fact the WIndows Security system tray icon hadn't loaded on boot either (which happens on occasion) so it was only by chance that I realised that Defender wasn't defending at all. WVSX which was running alongside Defender was active so I had some protection. I was able to subsequently apply upgrade on reboot but the fact that it switched itself off until it was able to upgrade is pretty poor. Decided to give VS another run.

 

[JasonUK]

Switched from AdGuard for Windows to AdGuard Adblocker v4 browser extension now it's a final release. Secure DNS remains with Quad9 but using YogaDNS client rather than AdGuard for WIndows.

Disabled or Removed:
AdGuard for Windows
Adguard Browser Assistant (Extension for AdGuard desktop app)

 

[JasonUK]

Removed VoodooShield Free v7.06 which I'd been running alongside Avast Free. VS is a very good product but with free option being discontinued I'm not sure I'd want to pay $30.00pa to continue this secondary level of protection although I would have gone for a 'lifetime' offer if it had been available. I noticed that I'd forgotten to disable SWH when I added VS which was an unnecessary overlap but as VS has now been uninstalled it's no longer an issue!

I've enabled Avast Free's Hardened Mode. I'll also try Hard_Configurator (with Avast Hardened Mode profile) again this month, replacing SWH and standalone RunBySmartScreen & FirewallHardening tools.