Advanced Security M4RT1NE2 Security Configuration 2024

[Freki123]

@Asterixpl Do you have an idea how your Trojan.Win32.Qhosts (A) got past Bitdefender and VS? Or was it a fp (or another system)?
Because this setup seems really solid for me.
Edit:
Thanks for your detailed answer

 

[M4RT1NE2]

@Asterixpl Do you have an idea how your Trojan.Win32.Qhosts (A) got past Bitdefender and VS? Or was it a fp (or another system)?
Because this setup seems really solid for me.

I have no idea how this happened. The best part is that the laptop did not give any signs of being compromised. Everything was running normally (system updates, browsing the internet, etc) I scanned the computer with BD TS and nothing was detected. I decided to install EEK (portable version) and it detected the threat and removed it nicely.
Scanning with other scanners later detected nothing.
My mistake - I could have saved that file for analysis.
Thanks to this, I learned a new thing today. To do a Farbar Recovery Scan Tool scan once in a while - review the logs or here on the forum cosmetically give it a check.
Thanks to EEK I learned that I had an infection (I guess that's what you can call it)

 

[M4RT1NE2]

As of today, I no longer use Opera. My main browser is MS EDGE.

Reason ? - I found that there is no sense in using third party browsers like Opera, FF, Chrome.

I added BD Anti-Tracker, AdGuard as addons.

One thing puzzles me: I have this message:

Managed by organization

Is it normal ? Do you also have this ?

 

[L0ckJaw]

As of today, I no longer use Opera. My main browser is MS EDGE.

Reason ? - I found that there is no sense in using third party browsers like Opera, FF, Chrome.

I added BD Anti-Tracker, AdGuard as addons.

One thing puzzles me: I have this message:

Managed by organization

Is it normal ? Do you also have this ?

View attachment 267184

View attachment 267185

Are you logged in with Microsoft account ?

 

[ForgottenSeer 77194]

I have this also.
It appeared for me after I changed a registry key or group policy related to edge.
Through apps such oo shutup or after enabling appcontainer for renderer process.

 

[M4RT1NE2]

Are you logged in with Microsoft account ?

Yes

 

[M4RT1NE2]

I have this also.
It appeared for me after I changed a registry key or group policy related to edge.
Through apps such oo shutup or after enabling appcontainer for renderer process.

Possibly - I used this program OO ShutUp

 

[Kongo]

Possibly - I used this program OO ShutUp

According to your Security config you are using O&O Shutup10 so it's most likely caused by this tool. Same on my system so you have nothing to worry about.

 

[silversurfer]

As of today, I no longer use Opera. My main browser is MS EDGE.

Reason ? - I found that there is no sense in using third party browsers like Opera, FF, Chrome.

I added BD Anti-Tracker, AdGuard as addons.

One thing puzzles me: I have this message:

Managed by organization

Is it normal ? Do you also have this ?

View attachment 267184

View attachment 267185

I had same "issue" once in the past, for me was the solution this guide below:

Remove Managed by your organization from Microsoft Edge

Here's how to remove Managed by your organization from Microsoft Edge.If you like to tweak the operating system, browser, or other apps on

winaero.com

 

[Gandalf_The_Grey]

It is caused by O&O ShutUP 10+++.
If you don't want it disable it's Edge settings and configure Edge yourself.

 

[M4RT1NE2]

Is it better to turn it off or leave it as it is ?

 

[Gandalf_The_Grey]

Is it better to turn it off or leave it as it is ?

If it doesn't cause any issues it is preferred to leave it as it is.
But if you don't want to see "Managed by organization" you can turn it off and change those settings in Edge yourself.
I did that and also turned the location and windows update options off, but it is up to personal preference.

 

[M4RT1NE2]

If it doesn't cause any issues it is preferred to leave it as it is.
But if you don't want to see "Managed by organization" you can turn it off and change those settings in Edge yourself.
I did that and also turned the location and windows update options off, but it is up to personal preference.

Ok. No problems so far. But I will turn it off

 

[M4RT1NE2]

Switching to the Brave browser.
Ms Edge terribly freezes browsing (Opera much faster). Brave is fast and secure.

 

[M4RT1NE2]

No changes.
After finishing my BD IS license (340 days left) I am making the switch to ARCABIT IS.
I got a 6 year license

 

[L0ckJaw]

No changes.
After finishing my BD IS license (340 days left) I am making the switch to ARCABIT IS.
I got a 6 year license

Why ?

 

[M4RT1NE2]

Why ?

I pity such a licence. Overall, ARCABIT is not so bad.
Recently, they even improved detection (new scanning functions were introduced). The program is developing on the plus side, it is of Polish production.

Second point.

I am not going to buy AV software anymore.

 

[L0ckJaw]

I pity such a licence. Overall, ARCABIT is not so bad.
Recently, they even improved detection (new scanning functions were introduced). The program is developing on the plus side, it is of Polish production.

Second point.

I am not going to buy AV software anymore.

Then go to Bitdefender Free

 

[M4RT1NE2]

Then go to Bitdefender Free

BD Free will be number 2 after Arcabit (in case Arcabit fails me). So far no infections have occurred while using Arcabit.
I had an infection recently but that was with Bitdefender installed. Problem solved then on the forum.

 

[L0ckJaw]

BD Free will be number 2 after Arcabit (in case Arcabit fails me). So far no infections have occurred while using Arcabit.
I had an infection recently but that was with Bitdefender installed. Problem solved then on the forum.

How can be infected ?