SECURITY: Complete oldschool's 2020 laptop setup

Last updated
Dec 12, 2020
About
Personal, primary device
Desktop OS
Windows 10
Login security
    • Password (Aa-Zz, 0-9, Symbols)
Primary sign-in
Local account
Primary user
Standard user - Limited permissions
Security updates
Automatic - allow all types of updates
Windows UAC
Maximum - always notify
Real-time protection
AVG Internet Security v. 20.10.3157
Software firewall
Microsoft Defender Firewall
Custom RTP, Firewall and OS settings
Default settings + Hardened Mode
Malware testing
No malware samples
Periodic security scanners
Hitman Pro (paid)
Browsers, Search and Addons
Brave/Brave Nightly --> Brave Shields + ClearURLs + LocalCDN
Edge Chromium --> Strict Tracking Protection + ClearURLs + LocalCDN
Maintenance and Cleaning
Windows built-in
Personal Files & Photos backup
Copy/Paste --> Free Agent drive
Personal backup routine
Device recovery & backup
Aomei Backupper Pro --> image monthly or as needed
System protection --> restore points as needed @ app or data changes
Device backup routine
PC activity
  1. Browsing the web. 
  2. Browsing to unknown sites. 
  3. Working from home. 
  4. Multimedia. 
  5. Streaming. 
Computer specs
Lenovo L340 i3 8145U CPU @ 2.10 GHz 2.300 GHz 8GB DDR4 RAM 1 TB HDD
Personal changelog
5/3/20 --> Removed Bitdefender and back to Windows Defender --> Updated RunBySmartscreen
May 2020 ---> various small changes
3 June, 2020 --> updated to W10 2004
7 June 2020 --> rolled back to 1909
23 August 2020 --> Added LocalCDN to browsers
27 August 2020 --> Removed µBO in Edge
31 August 2020 --> Removed Bitdefender Free
--------------------> Reverted to Windows Defender
--------------------> Removed Trafficlight and added Malwarbytes Browser Guard
7 September 2020 --> Removed Malwarebytes Browser Guard
Later in September --> Enabled Google SafeBrowsing in Brave

SeriousHoax

Level 38
Verified
Mar 16, 2019
2,713
I couldn't tell you precisely, but I think it's pretty good. Again, ask @Robbie @stefanos maybe @SeriousHoax. They will know better than I.
Tbh, in my experience the default uninstaller worked better than the dedicated one. The dedicated one left some crucial things behind that the default one didn't. For example the dedicated uninstaller didn't remove some registry entries from Winodows Security integration. Let some more registry entries intact, didn't remove one driver and didn't remove Bitdefender's certificate from Windows certificate store that is used to scan HTTPS connections. The default uninstaller kept some blank folders and one or two files within behind but had no such problems with removing drivers, registry entries and certificate. This is my experience but then again the experience may vary for another user.
 

stefanos

Level 28
Verified
Oct 31, 2014
1,726
Tbh, in my experience the default uninstaller worked better than the dedicated one. The dedicated one left some crucial things behind that the default one didn't. For example the dedicated uninstaller didn't remove some registry entries from Winodows Security integration. Let some more registry entries intact, didn't remove one driver and didn't remove Bitdefender's certificate from Windows certificate store that is used to scan HTTPS connections. The default uninstaller kept some blank folders and one or two files within behind but had no such problems with removing drivers, registry entries and certificate. This is my experience but then again the experience may vary for another user.
Agree. First you must use the default uninstaller and after the dedicated. Personaly i use REVO pro and after check with everything.
 

blackice

Level 33
Verified
Apr 1, 2019
2,204
I love Revo Pro and Everything too. After uninstalling and rebooting I search with Everything and if it finds anything then I right click the folder and select uninstall with Revo. This is a very good method.
I discovered Everything from you and @stefanos on this thread. It has been so handy the last couple days! I love this community. Just wanted to say thanks. Sorry for going OT @oldschool .
 

oldschool

Level 62
Verified
Mar 29, 2018
5,105
Updated to W10 2004. Memory integrity enabled after the update and having received several Intel updates over the last week. All systems "Go". (y) :LOL:

FYI: Windows checks for driver incompatibility when you re-enable memory integrity after updating. (M$ thinks of everything!:LOL:)
 

SeriousHoax

Level 38
Verified
Mar 16, 2019
2,713
I often experienced some slowdowns in the past while installing a feature update like this using the update assistant tool/windows update.
Clean installation usually the best way to go but of course I understand that it can be a bit of a pain in the ass to reinstall.
 
Top