Advanced Plus Security Moonhorse 2026 windows config

[micasayyo]

6.1.2026

Did some cleanup on photos, files i dont need, backupped everything needed to external hdds.
> clean install

Im going now after 2 months of McAfee with most simple setup, so the current setup is:

- Microsoft defender
- Smart application Controld (sac) enabled
- microsoft edge as browser, ublock origin lite as adblocker
- ControlD DNS - Hagezi Pro list as DNS

Thanks to dns thread i went for this config

You've tried quite a few antivirus programs (Microsoft Defender, Comodo Internet Security, Trend Micro Maximum Security, Kaspersky Premium, McAfee Total Security, F-Secure Total, ZoneAlarm Next Gen, Sophos Home Free, Norton 360 Deluxe) and you almost always go back to Microsoft Defender. I've only tried ESET, Kaspersky, and Bitdefender, and I almost always end up going back to Microsoft Defender. Sometimes the simplest solution is the best. Happy New Year!

 

[Moonhorse]

You've tried quite a few antivirus programs (Microsoft Defender, Comodo Internet Security, Trend Micro Maximum Security, Kaspersky Premium, McAfee Total Security, F-Secure Total, ZoneAlarm Next Gen, Sophos Home Free, Norton 360 Deluxe) and you almost always go back to Microsoft Defender. I've only tried ESET, Kaspersky, and Bitdefender, and I almost always end up going back to Microsoft Defender. Sometimes the simplest solution is the best. Happy New Year!

in the past i was tempted to try every antivirus, changed config quite often but now i have been more chill about it. I still think the antivirus engine of defender can compete with any other av, and the biggest threat is phishing still, but i have safe practices, adblocker, tracking protection & smartscreen of edge, also the controld with hagezi pro. Also its free and simple config, sometimes less is more (reminds me of @oldschool 's phrases. Happy new year to you too!

Anyways i have question, probs dumb one but i use hagezi pro throught controlD DNS, i live in finland but the dns routes throught netherlands, i dont have any problems with internet browsing speed, but could it somehow affect ping in games?

 

[Moonhorse]

8.1.2026
added norton safe web
edit: also moved from controld to cloudflare , due region matchs the current im living now.

 

[ForgottenSeer 123960]

Anyways i have question, probs dumb one but i use hagezi pro throught controlD DNS, i live in finland but the dns routes throught netherlands, i dont have any problems with internet browsing speed, but could it somehow affect ping in games?

While DNS does not carry game traffic, utilizing a Dutch DNS resolver while physically located in Finland creates a specific risk vector known as "GeoDNS Misrouting." This could trick matchmaking algorithms into assigning you to Amsterdam (AMS) servers rather than Helsinki (HEL) servers, indirectly increasing your ping by adding physical distance to your connection.

DNS is strictly a directory service. It translates game.server.com to 192.168.x.x. Once this "lookup" is complete (milliseconds), the DNS server is disconnected from the loop. The actual game packets (UDP/TCP) travel directly between your Finnish client and the game server.

Many modern services (including Cloudflare, AWS, and specific game matchmakers) use EDNS Client Subnet (ECS) or the IP address of your DNS Resolver to guess your physical location.

Scenario
You (Finland) -> DNS Server (Netherlands).

Result
The game’s load balancer sees the request coming from the Netherlands.

Consequence
It may route you to a "local" server in Amsterdam.

Net Impact
You play on a server 1,500km away instead of one 50km away, effectively increasing your ping despite the DNS itself not carrying traffic.

 

[Moonhorse]

While DNS does not carry game traffic, utilizing a Dutch DNS resolver while physically located in Finland creates a specific risk vector known as "GeoDNS Misrouting." This could trick matchmaking algorithms into assigning you to Amsterdam (AMS) servers rather than Helsinki (HEL) servers, indirectly increasing your ping by adding physical distance to your connection.

DNS is strictly a directory service. It translates game.server.com to 192.168.x.x. Once this "lookup" is complete (milliseconds), the DNS server is disconnected from the loop. The actual game packets (UDP/TCP) travel directly between your Finnish client and the game server.

Many modern services (including Cloudflare, AWS, and specific game matchmakers) use EDNS Client Subnet (ECS) or the IP address of your DNS Resolver to guess your physical location.

Scenario
You (Finland) -> DNS Server (Netherlands).

Result
The game’s load balancer sees the request coming from the Netherlands.

Consequence
It may route you to a "local" server in Amsterdam.

Net Impact
You play on a server 1,500km away instead of one 50km away, effectively increasing your ping despite the DNS itself not carrying traffic.

i did some googling , but you added much new info. Anyways i changed to cloudflare malware blocking dns, as i was bit unsure about the controld anyways.

Tried cloudflare zero trust too, but on android it makes discord not to work (doesnt load messages properly, no internet connection)
- even i added bypass rule on app > discord and domain discord.com too

Cheers for answer, MalwareTips is always helpful

 

[Moonhorse]

14.1.2026
+ Added DefenderUI - Aggressive profile

I was thinking about adding malwarebytes anti-exploit , but seems its not updated in year ( beta ) but it would still work i guess , just doesnt require update

Also was thinking about checkmals appcheck app, but after all i decided to go with defenderUI for ASR rules

 

[Kongo]

14.1.2026
+ Added DefenderUI - Aggressive profile

I was thinking about adding malwarebytes anti-exploit , but seems its not updated in year ( beta ) but it would still work i guess , just doesnt require update

Also was thinking about checkmals appcheck app, but after all i decided to go with defenderUI for ASR rules

How about adding SiriusGPT to DefenderUI instead?

 

[Moonhorse]

How about adding SiriusGPT to DefenderUI instead?

should i keep the dui as agressive like its currently is and just install sirius as bonus? Or just set defender to default and let sirius do the work?

 

[lokamoka820]

should i keep the dui as agressive like its currently is and just install sirius as bonus? Or just set defender to default and let sirius do the work?

You might want to watch this test to evaluate it yourself:

App Review Thread 'Microsoft Defender Antivirus (Default Settings + DefenderUI Recommanded Settings)'

Sep 9, 2024

Microsoft Defender is the anti-malware solution present on Windows since Windows 8.
It offers completely free protection powered by daily updates and cloud-based protection powered by AI Machine Learning.

In this test, we will compare the antivirus twice.
The first time, configured by Microsoft, as if you had installed Windows.
The second time, we'll use the DefenderUI tool, which we'll set to “Recommended Settings”.
Is it useful to configure Defender...

• Shadowra
• Replies: 56
• Forum: Video Reviews - Security and Privacy

• 
• 
• 

 

[Kongo]

should i keep the dui as agressive like its currently is and just install sirius as bonus? Or just set defender to default and let sirius do the work?

Well I think setting DefenderUI to "High" + SiriusGPT is nicely balanced between usability and protection. I don't see any reason not to set DefenderUI to aggressive if you want to tho. Normally Microsoft Defender should detect malware pre-execution, SiriusGPT on-execution and if even SiriusGPT misses it, then you still have Defenders post-execution-protection. Just make sure to get SiriusGPT and not SiriusLLM

And here a test of SiriusGPT as an addition to @lokamoka820 post:

App Review Thread 'SiriusGPT Anti-Malware'

Sep 5, 2025

SiriusGPT is a new anti-malware program developed by the VoodooShield/CyberLock ( @danb ) team using LLM technology.
LLM (Large Language Model) technology is used in malware research to analyze code semantics, detect anomalous patterns, and enhance threat classification beyond traditional signature-based methods.

Let's take a look at this technology and how it reacts to malware and four programs that are commonly used in cases of false positives.

...

• Shadowra
• Replies: 15
• Forum: Video Reviews - Security and Privacy

• 
• 
• 

 

[Moonhorse]

16.1.2025
+ added NextDNS free, with hagezi multi, lets see if i survive that 300k queries a month or have to buy it later.

About siriusGPT i havent decided yet if i start using it, im waiting for shadowras test on hawk eye

 

[Divine_Barakah]

16.1.2025
+ added NextDNS free, with hagezi multi, lets see if i survive that 300k queries a month or have to buy it later.

About siriusGPT i havent decided yet if i start using it, im waiting for shadowras test on hawk eye

How many devices you have connected to NextDNS?

 

[Parkinsond]

16.1.2025
+ added NextDNS free, with hagezi multi, lets see if i survive that 300k queries a month or have to buy it later.

About siriusGPT i havent decided yet if i start using it, im waiting for shadowras test on hawk eye

Which one is the most valuable filter list of NextDNS?

 

[Moonhorse]

How many devices you have connected to NextDNS?

My gaming pc + my pixel 6a

Which one is the most valuable filter list of NextDNS?

I only have 1 third party filter and its hagezi multi or ulti, dont remember right now. I just use nextdns for NRD:s. I guess its time to buy year of license with 20$ if i want to keep using this

by the way, i tried also cloudflare zero trust and had multiple issues with discord not working, tried all guides i found, asked chatgpt and did some own research, but didnt managed to get it work.

Sure i have 2,5 years of adguard dns available , and it has NRD option too.

 

[Divine_Barakah]

gaming pc + my pixel 6a

300k should be more than enough.

 

[Parkinsond]

300k should be more than enough.

I never reached half of the quota with NextDNS; only AG free consumes queries like a crazy, whatever I make changes to settings.

 

[harlan4096]

I have free NextDNS set in my W11 and also in my Mozilla FireFox, and every month I surpass easily those 300000 1 week before the end of the month.

 

[Divine_Barakah]

I have free NextDNS set in my W11 and also in my Mozilla FireFox, and every month I surpass easily those 300000 1 week before the end of the month.

Maybe Kaspersky has sth to do with it?

 

[harlan4096]

I visit, of course, daily Kaspersky community and Kaspersky Beta testing site.

 

[harlan4096]

But it is true that my PC is connected around 13–14 hours daily...