Advanced Plus Security Kongo's PC Security Config

[ForgottenSeer 97327]

+ added .zip and .mov to NextDNS blocked TLDs

FYI LennyFox on github published three TLD blocklists (which I have blocked in NextDNS)

Blocklists/Block_non_latin_TLDs.txt at master · LennyFox/Blocklists

My personal blocklist. Contribute to LennyFox/Blocklists development by creating an account on GitHub.

github.com

Blocklists/Block_TLDs_with_bad_reputation.txt at master · LennyFox/Blocklists

My personal blocklist. Contribute to LennyFox/Blocklists development by creating an account on GitHub.

github.com

Blocklists/Warn_for_countries_with_bad_reputation.txt at master · LennyFox/Blocklists

My personal blocklist. Contribute to LennyFox/Blocklists development by creating an account on GitHub.

github.com

I will browse the list in NextDNS again. Do you have a list of which TLDs you block in NextDNS?

 

[Kongo]

FYI LennyFox on github published three TLD blocklists (which I have blocked in NextDNS)

Blocklists/Block_non_latin_TLDs.txt at master · LennyFox/Blocklists

My personal blocklist. Contribute to LennyFox/Blocklists development by creating an account on GitHub.

github.com

Blocklists/Block_TLDs_with_bad_reputation.txt at master · LennyFox/Blocklists

My personal blocklist. Contribute to LennyFox/Blocklists development by creating an account on GitHub.

github.com

Blocklists/Warn_for_countries_with_bad_reputation.txt at master · LennyFox/Blocklists

My personal blocklist. Contribute to LennyFox/Blocklists development by creating an account on GitHub.

github.com

I will browse the list in NextDNS again. Do you have a list of which TLDs you block in NextDNS?

Most abused TLD and .zip + .mov

Nothing special

 

[Kongo]

Any reason(s) to use BitLocker at home?

No, not really. I mean it doesn't really affect me negatively so I just enabled encryption. But yeah, probably not needed for a Desktop PC.

 

[Kongo]

+ updated to Firefox v. 116.0.0

 

[Kongo]

- replaced Roguekiller with X-Sec

 

[brambedkar59]

- replaced Roguekiller with X-Sec

How good is X-sec?

 

[Kongo]

How good is X-sec?

Will test it in the coming days. It's using Rising Antivirus engine + its own engine for scanning. To be fair I didn't test it enough to make any assesments. But unlike HitmanPro it can also detect malicious scripts (vbs,js,jar etc.)

 

[brambedkar59]

Will test it in the coming days. It's using Rising Antivirus engine + its own engine for scanning. To be fair I didn't test it enough to make any assesments. But unlike HitmanPro it can also detect malicious scripts (vbs,js,jar etc.)

Keep us posted
One thing I noticed is that scans take pretty long. It took 17:36 min for only 30400 files (quick scan). And nothing was bottlenecked in the system (CPU, RAM or SSD).

 

[Kongo]

Little update:

Made a little test with a few malicious samples with various file types (ps1, js, html, xls)
I intentionally skipped PE-files as those are the easiest to detect for most scanners:

24 samples in total:

- HitmanPro detected as expected 0
- Norton Power Eraser detected 16
- X-Sec detected 13

Even tho Norton performed better, I think X-Sec performed pretty good considering how unknown it is.

Edit: I forgot to remove those shortcuts from the sample folder. So there would be only 22 actual malicious files. But doesn't matter as I just wanted to demonstrate that is also quite effective when you throw malicious scripts at it.

 

[simmerskool]

Will test it in the coming days. It's using Rising Antivirus engine + its own engine for scanning. To be fair I didn't test it enough to make any assesments. But unlike HitmanPro it can also detect malicious scripts (vbs,js,jar etc.)

You running X-Sec on same machine as DeepInstinct? (I did not dig into the details fo your security config)

 

[Kongo]

You running X-Sec on same machine as DeepInstinct? (I did not dig into the details fo your security config)

Yup. It's just a second opinion scanner so it doesn't conflict with Deep Instinct

 

[brambedkar59]

I knew the name sounded familiar. Lol, I tried this before in 2017 and had same feedback for the dev.

 

[Kongo]

I knew the name sounded familiar. Lol, I tried this before in 2017 and had same feedback for the dev.
View attachment 277822

I removed local signature for X-Sec Antivirus Engine, so first scan of a computer may cost much more time than before, but next scan it will use scan cache and become faster

 

[xywcloud]

For removal of local signature along with local cert blacklist/whitelist, based on the following reasons:
- don't have enough time to maintain
- some malware uses legit cert(eg: WHQL signed rootkit)

 

[xywcloud]

I knew the name sounded familiar. Lol, I tried this before in 2017 and had same feedback for the dev.
View attachment 277822

For slow scan speed, based on these reasons:
- I only use 2 threads for scan
- UI is written in .NET Core, but both X-Sec Antivirus Engine and Rising Antivirus Engine are written in C++, use P/Invoke may lose some performance
- Some modules of X-Sec Antivirus are protected by VMProtect(don't worry, it's genuine version, I renew license every year)
- Some design in scan logic and engine are not good enough, it could be better

 

[Kongo]

- updated Firefox to v. 118.0

 

[Kongo]

- replaced SUMo with UpdateHub

 

[simmerskool]

- replaced SUMo with UpdateHub

fwiw, I downloaded and "ran
UpdateHub-x64.exe sha256 80A081B63FAC71E96930C24C342ED51A184E9BCA964633D7D898B07B82F90B92
as administrator" from sua, but it would not install... now I have to hammer & bend it in...

 

[Kongo]

fwiw, I downloaded and "ran
UpdateHub-x64.exe sha256 80A081B63FAC71E96930C24C342ED51A184E9BCA964633D7D898B07B82F90B92
as administrator" from sua, but it would not install... now I have to hammer & bend it in...

Strange. It's working perfectly fine for me. Did you download it from here?

Release UpdateHub v2.2.3 · NexovaDev/UpdateHub

Version 2.2.3 Changelog Should've finally fixed the timeout error once and for all Fixed SyntaxError: "undefined" is not valid JSON error (fixes #248) Fixed TypeError: Cannot read properties of un...

github.com

 

[Shadowra]

fwiw, I downloaded and "ran
UpdateHub-x64.exe sha256 80A081B63FAC71E96930C24C342ED51A184E9BCA964633D7D898B07B82F90B92
as administrator" from sua, but it would not install... now I have to hammer & bend it in...

It's work for me :/