Basic Security Moonhorse's config 2018

[Moonhorse]

I will research the following modifications:

Default Web Search Google --> Searx

System Utilities collection Unchecky --> PiHole+Custom filters

Real-time Web & Malware Protection Voodooshield --> NoVirus Thanks ExeRadar Pro

Browsers and Extensions Google chrome; malwarebytes, tunnelbear blocker, bitwarden --> Chromium+Wireguard as VPN, many people are currently looking for betatesting Wireguard, like azirevpn.

Nice solution.

Regards,

Also Neustars recursive DNS is blocking pretty much all content where u would get infected from

Im home user, but i use their business secure..so far no problems or false blocks for me

 

[oldschool]

You could add:

@Andy Ful's ConfigureDefender to harden WD.

TinyWall to WF to harden and control - very simple to use. You can get it here with updated installer that works with W10 1803: Windows 10 Privacy Guide - Spring Creators Update

Nano Adbocker for Edge - based on uBO but more effective.

 

[Moonhorse]

You could add:

@Andy Ful's ConfigureDefender to harden WD.

TinyWall to WF to harden and control - very simple to use. You can get it here with updated installer that works with W10 1803: Windows 10 Privacy Guide - Spring Creators Update

Nano Adbocker for Edge - based on uBO but more effective.

Sorry to say but i have moved back to comodo internet security, i just trust too much to comodo firewall. And the antivirus is most light out there. other solutions just cant compete with it

i liked voodooshield , just noticed few false positives and with conficuredefender it could be stronger yes.
I just trust more to long term company, so i will get future updates for sure.

I have tried nano with edge, only thing i dont like is that edge is very laggy with youtube and video streams like twitch takes too much memory compared to chrome.

Edge + duckduckgo for ' privacy ' is excellent solution over firefox and clones, but chrome just feel superious.

Chrome with extensions still uses less memory than edge without extensions

removed:
- voodooshield

added:
- comodo internet security

Neustar dns from family protect > business secure.

Im willing to try voodooshield with conficure defender some day, for sure

 

[Moonhorse]

- removed comodo internet security
- removed google chrome

+ added avast free ( hardened mode)
+ added comodo firewall

+ switched chrome to comodo dragon; default extensions, comodo built in dns replaced by neustars dns, nano blocker with evil rains filters, nano defender, malwarebytes extension, norton safe web, bitwarden

Thinking about addin osarmor too

 

[Moonhorse]

Update:
- Removed avast weeks ago

+ installed comodo internet security back

+ comodo dragon extensions updated:
- comodo online security
- norton safe web
- nano adblocker
- nano defender
- privacy possum
- duckduckgo privacy essential
- bitwarden
- Decentraleyes
+ also using browser built in comodo secure dns, instead of neustar

Due recent talking about fingerprints i have been looking for decent extension for it, tunnelbear is decent one but running tunnelbear + nano same time is just pointless, and tunnelbear is lacking adding custom host lists

Privacy possum does block fingerprint (3rd party ones atleast) but not all, so im looking for other extensions
(im aware about canvas defender)

Included picture of my hostslist on nano adblocker, the ones evjl rain suggested

 

[Evjl's Rain]

I suggest adding more filters they are one of the best tracking blockersavailable

http://1hosts.cf/
http://1hosts.cf/addon/

 

[Moonhorse]

I suggest adding more filters they are one of the best tracking blocker available

did, cheers

 

[Evjl's Rain]

did, cheers

1 more thing I noticed, coinblocker list have been moved to gitlab stead of github
the github links are outdated

https://zerodot1.gitlab.io/CoinBlockerLists/list.txt
https://zerodot1.gitlab.io/CoinBlockerLists/list_optional.txt

 

[Moonhorse]

Update:

+ added immunet ( along with cis) ( letting it settle down)
+ added forticlient ( webfilter ) 6.0 release seems to have fixed ping / proxy issue!!

+ comodo ice dragon(32bit) as main browser
+ extensions:
- comodo online security
- Ublock origin
- Nano defender
- Norton safe web
- canvasblocker
- bitwarden

Fast review of canvasblocker is that it seems beating chrome extensions very well

 

[Evjl's Rain]

if you use immunet, I recommend you to:
- disable the ClamAV engine, clam update
- disable CIS's antivirus component
- add exclusion of comodo folder in immunet setting
- Enabled scan packed files

 

[Moonhorse]

if you use immunet, I recommend you to:
- disable the ClamAV engine, clam update
- disable CIS's antivirus component
- add exclusion of comodo folder in immunet setting
- Enabled scan packed files

Did this all, annoying just to see comodo acting about disabled av component , aswell security center does ( even it already noticed immunet is doing antiviruses work)

What do you think?
Shoud i just uninstall cis, re-install cf to run along with immunet?

 

[Evjl's Rain]

Did this all, annoying just to see comodo acting about disabled av component , aswell security center does ( even it already noticed immunet is doing antiviruses work)

What do you think?
Shoud i just uninstall cis, re-install cf to run along with immunet?

it's up to you but now you should keep CIS. I don't touch it, just disable the AV

 

[Moonhorse]

it's up to you but now you should keep CIS. I don't touch it, just disable the AV

Yeah, well i can run scans with comodo av whenever i want to but let immunet do realtime protection. What i just thought / why i installed immunet were because i thought immunet could run alongside with av component. Comodo av already detected immunet as malware > i reported it as false to comodo .. but thats all so far

 

[Evjl's Rain]

Yeah, well i can run scans with comodo av whenever i want to but let immunet do realtime protection. What i just thought / why i installed immunet were because i thought immunet could run alongside with av component. Comodo av already detected immunet as malware > i reported it as false to comodo .. but thats all so far

immunet is a companion AV, which is designed to run alongside other AVs so it's safe to run them together
however, I prefer running only immunet because it's really fast, light and has very very good signatures
comodo's AV component seems to be heavier than immunet (Cloud only, disabled the useless clamAV)

 

[LDogg]

Immunet is fairly iffy. I'm surprised people still use it tbh. Like Malwarebytes it's fallen from grace in recent times.

~LDogg

 

[Moonhorse]

Immunet is fairly iffy. I'm surprised people still use it tbh. Like Malwarebytes it's fallen from grace in recent times.

~LDogg

im running it along with comodo av module tho
That extra 15mb idle memory isnt hurting really at all

 

[LDogg]

Ah doesn't sound too bad then, how you getting on with Comodo Cloud AV & Immunet together?

~LDogg

 

[Moonhorse]

Ah doesn't sound too bad then, how you getting on with Comodo Cloud AV & Immunet together?

~LDogg

Im using comodo internet security, immunet is just extra antivirus to be used with main one.

If i would be worried about ram/cpu usage i always could disable comodos antivirus module, and let immunet do real world protection alone. Theyre both light products

 

[lowdetection]

I like this config, how Neustar recursive DNS performs?

Personally I will remove adwcleaner, and malwarebytes; eventually replacing with FRST and HitmanPro,

Unchecky can be removed too and the list of blocked hosts can be used in place,

If not used, I will add Comodo KillSwitch, I find the only tool that worth being used,

Zemana AntiMalware, unfortunately is not what was some years ago,

Nice config!

P.S. If you use adwcleaner, last build I tried actively employed telemetry,
telemetry-01.adwc.fr33tux.org

 

[Moonhorse]

I like this config, how Neustar recursive DNS performs?

Personally I will remove adwcleaner, and malwarebytes; eventually replacing with FRST and HitmanPro,

Unchecky can be removed too and the list of blocked hosts can be used in place,

If not used, I will add Comodo KillSwitch, I find the only tool that worth being used,

Zemana AntiMalware, unfortunately is not what was some years ago,

Nice config!

P.S. If you use adwcleaner, last build I tried actively employed telemetry,
telemetry-01.adwc.fr33tux.org

Neustar is better than norton dns imo, anyways im using comodo dragon/ ice dragon with built-in secure dns that goes over neustar automatically.

just scanned adwcleaner:

PUP.Optional.Legacy HKLM\Software\Wow6432Node\Classes\TypeLib\{39A37965-0A96-43A3-870E-821FE5C84B0B}
PUP.Optional.Legacy HKLM\Software\Classes\TypeLib\{39A37965-0A96-43A3-870E-821FE5C84B0B}
PUP.Optional.Legacy HKLM\Software\Classes\CLSID\{E5AFF088-92F8-41a9-8CAB-E9CDCCE967AC}
PUP.Optional.Legacy HKLM\Software\Classes\CLSID\{6DFC0DC7-FDC5-44C2-8B80-5977BA8F8ACC}
PUP.Optional.Legacy HKLM\Software\Wow6432Node\Classes\Interface\{65416821-217D-44BD-9C61-F53398FB1B46}
PUP.Optional.Legacy HKLM\Software\Classes\Interface\{65416821-217D-44BD-9C61-F53398FB1B46}
PUP.Optional.Legacy HKLM\Software\Classes\CLSID\{65416821-217D-44BD-9C61-F53398FB1B46}

Not sure yet what they are, but i guess those are just immunet ones