SECURITY: Complete oldschool's 2020 laptop setup

Last updated
Dec 12, 2020
Personal, primary device
Desktop OS
Windows 10
Login security
    • Password (Aa-Zz, 0-9, Symbols)
Primary sign-in
Local account
Primary user
Standard user - Limited permissions
Security updates
Automatic - allow all types of updates
Windows UAC
Maximum - always notify
Real-time protection
AVG Internet Security v. 20.10.3157
Software firewall
Microsoft Defender Firewall
Custom RTP, Firewall and OS settings
Default settings + Hardened Mode
Malware testing
No malware samples
Periodic security scanners
Hitman Pro (paid)
Browsers, Search and Addons
Brave/Brave Nightly --> Brave Shields + ClearURLs + LocalCDN
Edge Chromium --> Strict Tracking Protection + ClearURLs + LocalCDN
Maintenance and Cleaning
Windows built-in
Personal Files & Photos backup
Copy/Paste --> Free Agent drive
Personal backup routine
Device recovery & backup
Aomei Backupper Pro --> image monthly or as needed
System protection --> restore points as needed @ app or data changes
Device backup routine
PC activity
  1. Browsing the web. 
  2. Browsing to unknown sites. 
  3. Working from home. 
  4. Multimedia. 
  5. Streaming. 
Computer specs
Lenovo L340 i3 8145U CPU @ 2.10 GHz 2.300 GHz 8GB DDR4 RAM 1 TB HDD
Personal changelog
5/3/20 --> Removed Bitdefender and back to Windows Defender --> Updated RunBySmartscreen
May 2020 ---> various small changes
3 June, 2020 --> updated to W10 2004
7 June 2020 --> rolled back to 1909
23 August 2020 --> Added LocalCDN to browsers
27 August 2020 --> Removed µBO in Edge
31 August 2020 --> Removed Bitdefender Free
--------------------> Reverted to Windows Defender
--------------------> Removed Trafficlight and added Malwarbytes Browser Guard
7 September 2020 --> Removed Malwarebytes Browser Guard
Later in September --> Enabled Google SafeBrowsing in Brave

ForgottenSeer 823865

Removed VoodooShield to take up the Windows Defender only challenge. 1 year, WD only.
Are you ready to join? 🤔
Welcome to the club of those who just need built-in security and enjoy their computer instead of spending all time of making virtual fences.

I have Voodoshield free installed only because I regularly download samples and I fear what if I accidentally execute a sample that is not detected by WD yet
Would it be better for you to use a VM or an old spare PC?


Level 25
Sep 13, 2018
But I might get rid of it because it's slowing down startup.
This is exactly why I got rid of ERP, another anti-executable. After making some revisions, like adding 4 ASR rules via gpedit.msc, I don't miss it. Nor do I miss the 2 second delay at startup. When you are used to very fast, at times virtually instant performance, this would be otherwise unacceptable. And to manually start ERP every time you start up is just silly.


Level 62
Mar 29, 2018