Question Kaspersky Plus: What do you guys think I have to configure?

Please provide comments and solutions that are helpful to the author of this topic.
Brahman said:
Your redundancy in this case should be
1.OS image backup and data backup at three different locations.
2. Properly configured system wide doh with filtering capabilities like a nextdns or similar
3. A browser based ad blocker
4. A good router with a strong firewall and decent update schedule like asus, mikrotik or unify.
Click to expand...
Isn't 3 locations for your data a bit much for home users? 🤔 I just have an OS image and I backup my files in OneDrive. Never had any issue. OneDrive even has a rollback for your files if you got ransomware'd.
 
  • Like
  • +Reputation
Reactions: Sorrento, Khushal, piquiteco and 1 other person
Victor M said:
Hi @Brahman I have 1,2,3,4. I use Quad9 doh, but not nextdns. Is that better ? My router is by MikroTik.
Click to expand...
I also use mikrotik. Quad 9 is not bad; in fact, it's pretty good. With nextdns you get logs and configurable block lists. You can configure nextdns doh in mikrotik router itself. Instructions are there on the settings page of nextdns. The image is just an example, The last line will change according to your account configuration.


1.jpg

After configuration it might look like this

1.jpg
 
Last edited by a moderator:
  • Like
Reactions: Sorrento, Zero Knowledge, Khushal and 2 others
RoboMan said:
Isn't 3 locations for your data a bit much for home users? 🤔 I just have an OS image and I backup my files in OneDrive. Never had any issue. OneDrive even has a rollback for your files if you got ransomware'd.
Click to expand...
The most critical flaw in the your logic is ignoring identity-level compromise. If Microsoft's automated algorithms flag your account for suspicious activity, or if your credentials are stolen, access to all cloud backups is instantly severed. You cannot roll back a OneDrive account you cannot log into.

Live-sync cloud storage is a two-way street. If your local machine is hit by a modern ransomware strain, the sync engine will immediately push those newly encrypted, corrupted files up to the cloud. While OneDrive does have a rollback feature, advanced threat actors know this; they routinely target your Microsoft 365 identity first, using stolen credentials or session tokens to purge your cloud version history before they ever drop the encryption payload on your local machine.

This is exactly why cybersecurity frameworks and government agencies like CISA now strongly recommend the 3-2-1-1-0 backup rule rather than the outdated baseline models. This modern standard mandates keeping three copies of your data across two different media types, with one offsite, and crucially, one that is either immutable or completely 'air-gapped.' An air-gapped backup is an external hard drive that is physically unplugged and sitting in a drawer. It has an attack surface of absolute zero. A hacker on the other side of the globe cannot encrypt a piece of hardware that has no physical connection to a network or a power source. Relying exclusively on the cloud is a gamble on normalcy; true data resilience requires physical isolation.
 
  • Like
  • Hundred Points
Reactions: Victor M, Khushal, simmerskool and 1 other person
Divergent said:
The most critical flaw in the your logic is ignoring identity-level compromise. If Microsoft's automated algorithms flag your account for suspicious activity, or if your credentials are stolen, access to all cloud backups is instantly severed. You cannot roll back a OneDrive account you cannot log into.

Live-sync cloud storage is a two-way street. If your local machine is hit by a modern ransomware strain, the sync engine will immediately push those newly encrypted, corrupted files up to the cloud. While OneDrive does have a rollback feature, advanced threat actors know this; they routinely target your Microsoft 365 identity first, using stolen credentials or session tokens to purge your cloud version history before they ever drop the encryption payload on your local machine.

This is exactly why cybersecurity frameworks and government agencies like CISA now strongly recommend the 3-2-1-1-0 backup rule rather than the outdated baseline models. This modern standard mandates keeping three copies of your data across two different media types, with one offsite, and crucially, one that is either immutable or completely 'air-gapped.' An air-gapped backup is an external hard drive that is physically unplugged and sitting in a drawer. It has an attack surface of absolute zero. A hacker on the other side of the globe cannot encrypt a piece of hardware that has no physical connection to a network or a power source. Relying exclusively on the cloud is a gamble on normalcy; true data resilience requires physical isolation.
Click to expand...
Explained extremely well. This two different media types saved me once, as my backup on veem refused to reimage from nas, i don't know why but it happened. I re-imaged my system using 2nd image residing on my hdd created by windows own backup function.
 
Last edited:
  • Like
Reactions: ForgottenSeer 123960, Sorrento, simmerskool and 1 other person
Honestly if you have AppGuard you don't need Kaspersky Plus with all its bells and whistles. A simple AV/AM like NOD32 or lowest tier Kaspersky or even AVG/Avast free.

Even WD together with AppGuard would be great. Don't over complicate matters, sometimes it defeats the purpose of protection.

You can have 100 security apps, HIPS up the wazoo but then if you fall for a phishing email or your data is in a huge breach then all the security apps in the world wont matter.
 
  • Like
  • Applause
  • Thanks
Reactions: Khushal, simmerskool, micasayyo and 2 others
Victor M said:
@Zero Knowledge I am not using AppGuard for this machine.
Click to expand...
Sorry misread your post, the AppGuard example/analogy got me, thought you were using it as well as K.

Second thoughts, Kaspersky is good and their detection/protection is awesome but sadly the geo-political situation makes it very hard to use it.

Personally I would go with ESET/AVAST/AVG, no political issues or problems and solid protection.
 
  • Like
Reactions: Khushal and simmerskool
My tips:

1.- Light Scan:

1775203184930.png

2.- Disable (if used), Anti-Banner and Private Browsing modules. Use extensions for that purpose in Your browsers.

3.- If You don't use Safe Money, disable Inject script:


1775203351348.png

4.- Disable completely Scan of Encrypted Connections (I PERSONALLY DO NOT RECOMMEND IT):


1775203462893.png
 
Last edited:
  • Like
  • Hundred Points
  • +Reputation
Reactions: Jonny Quest, Szellem, RoboMan and 8 others
  • HaHa
Reactions: harlan4096
harlan4096 said:
4.- Disable completely Scan of Encrypted Connections (I PERSONALLY DO NOT RECOMMEND IT):
Click to expand...
For Kaspersky, another downside of disabling it is that Kaspersky has some signatures that are made only for the WebAV component. They are not detected by the FileAV component. So if a malicious script is loaded and it's even saved in the browser cache, Kaspersky won't detect it if scanning of encrypted web connections is disabled. The separation was done to improve performance but there's this one downside.
 
  • Like
  • +Reputation
  • Hundred Points
Reactions: RoboMan, simmerskool, Parkinsond and 3 others
I’m reading all these kind of overkill systems for home users. People are too paranoia now a days . If one suite slightly lets a virus go through immediately change the security suite and then that one fails at one point and guess what ? Change again ! For me just install sit and forget you are not a target of you are not a company or a vip.
 
  • Like
Reactions: simmerskool, micasayyo, Khushal and 2 others
TuxTalk said:
I’m reading all these kind of overkill systems for home users. People are too paranoia now a days . If one suite slightly lets a virus go through immediately change the security suite and then that one fails at one point and guess what ? Change again ! For me just install sit and forget you are not a target of you are not a company or a vip.
Click to expand...
I couldn't care less about that line of thinking. Not yours, but what you wrote—that if something lets something through, it needs to be replaced immediately. That's bullshit. Everything has its weaknesses. I'm more concerned with it not causing any system impact, or at least keeping it to a minimum. I hope what I wrote made sense. My English isn't perfect.
 
  • Like
Reactions: RoboMan and Khushal
harlan4096 said:
My tips:

1.- Light Scan:

View attachment 296817

2.- Disable (if used), Anti-Banner and Private Browsing modules. Use extensions for that purpose in Your browsers.

3.- If You don't use Safe Money, disable Inject script:


View attachment 296818

4.- Disable completely Scan of Encrypted Connections (I PERSONALLY DO NOT RECOMMEND IT):


View attachment 296819
Click to expand...
Thanks, bro! I'll get right on it. I'm not going to disable secure connections. That's not a good solution. I noticed that too, because then, unfortunately, things slip through from the web. But I'll take care of the rest and get back to you. I really appreciate your help.
 
  • Like
Reactions: RoboMan, simmerskool, silversurfer and 3 others

You may also like...