Advanced Plus Security Lavamate´s Computer Security Config 2025

Last updated
May 28, 2025
How it's used?
For home and private use
Operating system
Windows 11
On-device encryption
N/A
Log-in security
    • Basic account password (insecure)
Security updates
Allow security updates and latest features
Update channels
Allow stable updates only
User Access Control
Always notify
Smart App Control
Off
Network firewall
Enabled
About WiFi router
Fritzbox
Real-time security

ESET Smart Security Premium 18​

Firewall security
Other - Internet Security (3rd-party)
About custom security
1 scan - every two weeks with my main protection
And i use two-factor authentication for all my important accounts
Periodic malware scanners
I make this second opinion scans at least once a month
  • EMSISOFT Emergency Kit
  • Malwarebytes Free
  • Norton Power Erase
Malware sample testing
I do not participate in malware testing
Environment for malware testing
N/A
Browser(s) and extensions
Primary - Brave with Bitwarden, ESET Browser Privacy & Security
For the unknown / untrusted / shady sites: Vivaldi with uBlock Origin, Emsisoft Browser Security
Secure DNS
Preferred: quad9 (DoH)
Alternate: quad9 (DoH)
same setting also on the Fritzbox (DoT)
Desktop VPN
N/A
Password manager
Bitwarden and Microsoft Authenticator for OTP
KeePass 2 (PW Backup)
Maintenance tools
Windows built-in
File and Photo backup
Personal Backup 6 - manual backup of important folders to my external drive (folders encrypted)
Onedrive - for my collections of Family Photos & Videos (folders encrypted)
Subscriptions
    • Microsoft 365 Family 6TB
System recovery
AOMEI Backupper (System Backup)
Risk factors
    • Browsing to popular websites
    • Browsing to unknown / untrusted / shady sites
    • Opening email attachments
    • Buying from online stores, entering banks card details
    • Logging into my bank account
    • Downloading software and files from reputable sites
    • Downloading software and files from unknown / untrusted / shady sites
    • Gaming
    • Gaming with third-party mods
    • Streaming audio/video content from trusted sites or paid subscriptions
Computer specs
GPU: AMD Radeon™ RX 7800 XT
CPU: AMD Ryzen™ 7 7700X
RAM: 32 GB DDR5-6000 G.Skill Flare X5
Internal storage: 1TB Seagate FireCuda 530 + 2 TB SanDisk Ultra 3D + 1TB SanDisk Ultra 3D
External storage: 1TB Seagate Barracuda + Hard Drive Enclosure
Notable changes
Following Divine_Barakah's recommendation, I switched my recovery backup from Windows built-in to AOMEI Backupper. (15.01.23)
After some Posts that i read here in the forum and elsewhere, I decided to delete Malwarebytes and replace it with Kaspersky Virus Removal Tool. (24.01.23) (Periodic scanners)
I change my Secure DNS (Alternate) from ControlD Free Malware to 1.1.1.2 (Malware Blocking Only) because unfortunately i noticed too often how it delays the connection to sites and because it often came to DNS request timed out errors. (26.01.23)
I change my Secure DNS (Alternate) from 1.1.1.2 to dns0.eu because its a French non‑profit organization. (19.02.23)
Exchange DNS Alternate with Preferred. (24.02.23)
New PC with a Fresh Windows 11 instalation (06.10.2023)
Change from Proton Pass to Keepass 2 as backup for my PW´s.(25.07.24)
Installed Malwarebytes Free as a second opinion scanner. (09.08.24)
I change my Secure DNS from dns0 to quad9 because its a Swiss non‑profit organization and it's notable faster for me. (18.01.25)
Switch from Firefox to Brave (04.05.25)
Switch from F-Secure to Eset after license expiration (28.05.25)
What I'm looking for?

Looking for medium feedback.

First update about changes

Following Divine_Barakah's recommendation, I switched my recovery backup from Windows built-in to AOMEI Backupper. (15.01.23)
After some Posts that i read here in the forum and elsewhere, I decided to delete Malwarebytes and replace it with Kaspersky Virus Removal Tool. (24.01.23) (Periodic scanners)
I change my Secure DNS (Alternate) from ControlD Free Malware to 1.1.1.2 (Malware Blocking Only) because unfortunately i noticed too often how it delays the connection to sites and because it often came to DNS request timed out errors. (26.01.23)
I change my Secure DNS (Alternate) from 1.1.1.2 to dns0.eu(Zero) because its a French non‑profit organization and of its hardened threat intelligence security. (19.02.23)
Exchange DNS Alternate with Preferred. (24.02.23)
 
Last edited:
  • Like
  • Applause
Reactions: Nevi, [correlate], oldschool and 3 others
Second update about changes
I change my Secure DNS from dns0.eu(Zero) to non-Zero because several serious websites could no longer be accessed with the Zero-Variant. (11.04.2023)
I'm currently experimenting with MB Windows Firewall Control, and so far, I'm very impressed. I use the settings recommended by piquiteco in this thread. (15.08.2023)
I added Netcraft Extension to Vivaldi for more security on unknown / untrusted / shady sites. (10.07.2023)
Proton Pass but just as backup for my PW´s. (17.08.2023)
 
  • Like
Reactions: Nevi, oldschool, [correlate] and 2 others
TairikuOkami said:
dns0.eu(Zero) has zero configuration, the original NextDNS is better, you can see what is blocked and add it to allowlist. dns0.eu was supposed to be user friendly, but it really is not.
Click to expand...
You are right but the 300,000 queries in the free version of NextDNS is not enough for me and I don't want to pay for the Pro version :whistle:
I only use NextDNS on the iPhone because the 300,000 queries there are enough, and it has impressed me so far because it has ad blocking and security features, but I don't really need that on the PC.
 
Last edited:
Lavamate said:
You are right but the 300,000 queries in the free version of NextDNS is not enough for me and I don't want to pay for the Pro version :whistle:
I only use NextDNS on the iPhone because the 300,000 queries there are enough, and it has impressed me so far because it has ad blocking and security features, but I don't really need that on the PC.
Click to expand...
Actually thats where you need it the most 👀
 
  • Hundred Points
  • Thanks
Reactions: Nevi and Lavamate
Kongo said:
Actually thats where you need it the most 👀
Click to expand...
If you look at the list above, you can see that I have actually done a lot to be on the safe side :D
BTW: dns0.eu has built-in protection against millions of malicious domains and that is enough for me together with the rest of my security measures
 
  • Like
Reactions: Kongo
Lavamate said:
If you look at the list above, you can see that I have actually done a lot to be on the safe side :D
BTW: dns0.eu has built-in protection against millions of malicious domains and that is enough for me together with the rest of my security measures
Click to expand...
Protection-wise definitely u are all set, but tracking and ad blocking could be an useful addition. But understandable if it's not worth the 19 dollars a year for you.
 
  • Like
Reactions: Nevi, Shadowra and Lavamate
Kongo said:
Protection-wise definitely u are all set, but tracking and ad blocking could be an useful addition. But understandable if it's not worth the 19 dollars a year for you.
Click to expand...
Yes, you are right about tracking and ad blocking. I will think about it and then decide whether to buy NextDNS or ControlD.
But shouldn't uBlock actually be enough?:unsure:
When I uses these filters:
uBlock filters – Ads, uBlock filters – Badware risks, uBlock filters – Privacy, uBlock filters – Quick fixes, uBlock filters – Unbreak, AdGuard – Ads, AdGuard Tracking Protection, AdGuard URL Tracking Protection, EasyPrivacy, Peter Lowe’s Ad and tracking server list, AdGuard – Other Annoyances, AdGuard – Popup Overlays, AdGuard – Social Media, AdGuard – Widgets, AdGuard/uBO – Cookie Notices, Fanboy – Anti-Facebook, uBlock filters – Annoyances, EasyList Germany, HaGeZi's Personal DNS Blocklist
 
  • Like
  • +Reputation
Reactions: Nevi, Shadowra and Kongo
Lavamate said:
Yes, you are right about tracking and ad blocking. I will think about it and then decide whether to buy NextDNS or ControlD.
But shouldn't uBlock actually be enough?:unsure:
When I uses these filters:
uBlock filters – Ads, uBlock filters – Badware risks, uBlock filters – Privacy, uBlock filters – Quick fixes, uBlock filters – Unbreak, AdGuard – Ads, AdGuard Tracking Protection, AdGuard URL Tracking Protection, EasyPrivacy, Peter Lowe’s Ad and tracking server list, AdGuard – Other Annoyances, AdGuard – Popup Overlays, AdGuard – Social Media, AdGuard – Widgets, AdGuard/uBO – Cookie Notices, Fanboy – Anti-Facebook, uBlock filters – Annoyances, EasyList Germany, HaGeZi's Personal DNS Blocklist
Click to expand...
I don't only mean browser ads and trackers. 🙃
 
  • Like
  • Thanks
Reactions: Nevi and Lavamate
Lavamate said:
Some slight changes recently
Replaced the Netcraft extension in Vivaldi with Emsisoft Browser Security
quad9 is the new main DNS
Switched to ESET after my license for F-Secure expired
Changed my Primary browser from Firefox to Brave
Click to expand...
Why not osprey extension it has emsisoft included too
Btw personally I wouldn't use ublock origin with brave as the brave AdBlocker is excellent and adding ublock won't stop many more are meanwhile it will slow down pages slightly (usually a few extra milliseconds )
 
  • Like
  • +Reputation
  • Thanks
Reactions: Lavamate, Digmor Crusher and Shadowra
The Fritzbox is a really good point , if you want to have control of the restriction from your internet provider, Fritzbox is the only one i know who has a lot of compatibility with internet services from your operator, and have more privacy of course ^^ (a VPN fritz-software passing trough the firewall of your computer or your mesh).

Configuring a firewall for FRITZ!VPN | FRITZ!Box 5690 Pro

The FRITZ!VPN software allows you to establish a secure VPN (Virtual Private Network) connection over the internet to your FRITZ!Box and access all of the devices and services in the home network of your FRITZ!Box. If the computer with FRITZ!VPN is protected by a firewall on the computer or an...
en.fritz.com en.fritz.com

Security functions (firewall) of the FRITZ!Box | FRITZ!Box 5690 Pro

en.fritz.com en.fritz.com

yes of course, this cost a highly price nearly 400 dollars,
but in long terms you can stay filtrated when this router has no backdoor, but it's better to buy it directly from a store and not a provider.

you can delete the auto-provisioning module request from your ISP and of course if you change the image of the system, this system is not locked, but you will loose your guaranty.
 
  • Thanks
Reactions: Lavamate

Vitali Ortzi said:
Why not osprey extension it has emsisoft included too
Btw personally I wouldn't use ublock origin with brave as the brave AdBlocker is excellent and adding ublock won't stop many more are meanwhile it will slow down pages slightly (usually a few extra milliseconds )
Click to expand...
Thanks for the hint, I will transfer my lists to brave if not already available and delete ublock.
Osprey is a great extension, but the web protection from ESET is actually enough for me. I only installed Emsisoft Browser Security as a backup, but so far ESET has blocked everything without any problems.
 

You may also like...