Advanced Plus Security RoboMan's PC Security Config

Layout
Current configurationWindows 11
Revision 2Updated
Jump to discussion

Imported from an earlier discussion · awaiting owner confirmation

Suggestions on the main improvementsWhat changed
Staff assessment Advanced Plus Security

Earlier staff assessment. The reviewer, date and configuration version were not recorded. It has not been verified against the current Hub setup.

Device & operating system2
Operating system
Windows 11
OS version and support details
Windows 11 26H2
Protection & updates13
Real-time protection
  • Kaspersky Standard
  • SysHardener
Device firewall
Other - Internet Security (3rd-party)
On-device encryption
Windows BitLocker / Device Encryption
Device sign-in security
Windows Hello PIN or biometric sign-in (face / fingerprint / Touch ID)
Security updates
Allow security updates and latest features
Update channels
Allow stable updates only
User Account Control (UAC)
Always notify
Smart App Control
Off
Network firewall
Enabled
Custom security settings
  • Kaspersky Standard (Application Control set to NOT TRUST unknown files and NOT TRUST because of digital signature)
  • PatchMyPC daily schedule to avoid software vulnerabilities exploitation
  • SysHardener for general Windows Hardening and script protection
Periodic malware scanners
Emsisoft Emergency Kit
ESET Online Scanner
Malware sample testing
I do not participate in malware testing
Environment for malware testing
N/A
Browser & privacy5
Browsers and extensions
Brave
Built-in Microsoft Edge
uBlock Origin
Kaspersky Protection
Bitwarden
Secure DNS
Cloudfare DNS with Malware Protection
Desktop VPN
Windscribe
Password and passkey manager
Bitwarden
Two-factor authentication
Authy
Backup & recovery2
File and photo backups
OneDrive
Google Drive
System recovery
AOMEI Backup
Device & usage6
Main use of this computer
For home and private use
Maintenance tools
Bleachbit with a script for automated scheduled cleaning
Subscriptions
Google AI Pro (formerly Google One AI Premium), Microsoft OneDrive 100GB
Usage and exposure
Visiting familiar websites, Working from home, Making audio/video calls, Gaming, Streaming audio/video content from trusted sites or paid subscriptions
Feedback preference
Suggestions on the main improvements
Community rating

Community rating

How members rate the shared configuration. This is community feedback, not a security test.

5.0 / 5
1 member rating
Rating distribution

Sign in to rate this setup

Go to discussion

Shared by the member. This is a configuration record, not a device scan.

Archived configuration (not current) · expand details
Thread details
Last updated
Feb 17, 2026
Main use of this computer
For home and private use
Operating system
Windows 11
On-device encryption
Windows BitLocker / Device Encryption
Device sign-in security
    • Windows Hello PIN or biometric sign-in (face / fingerprint / Touch ID)
Security updates
Allow security updates and latest features
Update channels
Allow stable updates only
User Account Control (UAC)
Always notify
Smart App Control
On
Network firewall
Enabled
Real-time protection
  • Kaspersky Standard
  • SysHardener
Device firewall
Other - Internet Security (3rd-party)
Custom security settings
  • Kaspersky Standard (Application Control set to NOT TRUST unknown files and NOT TRUST because of digital signature)
  • PatchMyPC daily schedule to avoid software vulnerabilities exploitation
  • SysHardener for general Windows Hardening and script protection
Periodic malware scanners
Emsisoft Emergency Kit
ESET Online Scanner
Norton Power Eraser
Malware sample testing
I do not participate in malware testing
Environment for malware testing
N/A
Browsers and extensions
Google Chrome
Built-in Microsoft Edge
uBlock Origin
Kaspersky Protection
Bitwarden
Secure DNS
Cloudfare DNS with Malware Protection
Desktop VPN
Windscribe
Password and passkey manager
Bitwarden
Maintenance tools
Bleachbit with a script for automated scheduled cleaning
File and photo backups
OneDrive
Google Drive
Subscriptions
    • Google One Standard 200GB
    • Microsoft OneDrive 100GB
System recovery
AOMEI Backup
Usage and exposure
    • Visiting familiar websites
    • Working from home
    • Making audio/video calls
    • Opening email attachments
    • Online shopping and card payments
    • Downloading software and files from reputable sites
    • Requesting and accepting remote access
    • Gaming
    • Streaming audio/video content from trusted sites or paid subscriptions
Computer specs
Feedback preference

Suggestions on the main improvements

I think that you have to enable the option "Look for Startup programs and modules loaded in memory in Avast and AVG to support memory scanning. Maybe it is enabled by default. Don't know it anymore. It has been awhile since I used them.
 
Avast Antivirus :
  • Full Virus Scan: A predefined, in-depth scan of your system that checks your storage drives and memory for malware (including rootkits).
That's for the on-demand scanning. It's different from the real-time memory scanning capabilities of ESET, Kaspersky, Bitdefender and some other products. It seems Avast's real-time memory scanning is limited to what it can see for scripts through AMSI. But of course, Avast has other protection layers to compensate for the lack of real-time dedicated advanced memory scanning engine. So it's not a deal breaker.

For Bitdefender Free, there is no simple way to verify whether it has memory scanning or not. It doesn't use AMSI which can be proved since it does not inject their AMSI dll into processes like powershell unlike their paid products.
So following that pattern, it's likely that the free version also doesn't provide memory scanning and command line scanning features. These are relatively new addions into their product. Even without them, their behavioral engine is mature and one of the best, if not the best, among home AV products.
 
It's different from the real-time memory scanning capabilities of ESET, Kaspersky, Bitdefender and some other products
Looks MD does not have memory scanning as Avast; right?
It doesn't use AMSI which can be proved since it does not inject their AMSI dll into processes like powershell unlike their paid products.
But I can recall when using Bitdefender free with WDAC, there was an event of blocked AMSI dll related to B; the same occured with Avast and Kaspersky.
Inspite of this report in event viewer, they were working as normal.
 
Looks MD does not have memory scanning as Avast; right?
MD has memory scanning capabilities according to their doc, but it's highly cloud-dependent, so the cloud is its main powerhouse.
But I can recall when using Bitdefender free with WDAC, there was an event of blocked AMSI dll related to B; the same occured with Avast and Kaspersky.
Inspite of this report in event viewer, they were working as normal.
I just saw that with BD Total Security, their dedicated "antimalware_provider64.dll" was injected; with BD Free, it was not. So that's the limit of my knowledge, really.

Anyway, don't want to go off-topic too much here since it's a security configuration thread.
 
MD has memory scanning capabilities according to their doc, but it's highly cloud-dependent, so the cloud is its main powerhouse.
So MD regarding memory scanning is better than both B free and Avast free.
I just saw that with BD Total Security, their dedicated "antimalware_provider64.dll" was injected; with BD Free, it was not. So that's the limit of my knowledge, really.
I assume B free is installed with all the components of B paid (explains the large install size, aprox 800 MB similar to the paid version) but it enables only specific components.
The AMSI dll of B could be side loaded but not working in the free version.
 
So MD regarding memory scanning is better than both B free and Avast free.
Memory scanning is usually for when the MD cloud has been bypassed or not reacted fast enough. It's for when a malware has already unpacked itself into the memory. Sometimes, memory scanning might not be enough to stop the damage. Besides, for memory scanning, you would need high quality on device signatues and heuristics. MD is not known for this unlike ESET, Bitdefender and some others. Everyone benefits from the cloud, but for MD, the cloud is its oxygen.
 
Do you think Avast/AVG Free offer a more comprehensive and a smarter more complete protection than BD Free? Do you think, in ransomware attack or a RAT infection, Avast will perform better than BD Free? (take CyberLock out of the picture)
Yes Avast free offers almost identical protection to the paid version. It is the most complete free security product.
 
Hello there old friend @RoboMan . Nice to see you still here. Between BD Free & Avast Free, I would suggest Avast free since it has a complete package including a FW. You can disable ads and app sharing data by tweaking a few things. Since you already use CyberLock, adding Avast Free (with only the modules you require) would offer you solid protection. You have already used SWH to block scripts thereby eliminating 75% of the possible attack vectors. If you need any help in tweaking avast & disabling the ads, feel free to ask me.
 
From the setup owner View current setup
Finally could afford a license for Kaspersky Standard (don't need all the crap for the most advanced versions).

Removed
  • CyberLock (VS)
  • BitDefender Free
Added
  • Kaspersky Standard
Configured Application Control as UNTRUSTED for all unknown apps and NOT TRUST by digital signature alone. All other configurations as per my configuration thread.

I still have SysHardener installed for general OS hardening and script protection.
 
Finally could afford a license for Kaspersky Standard (don't need all the crap for the most advanced versions).

Removed
  • CyberLock (VS)
  • BitDefender Free
Added
  • Kaspersky Standard
Configured Application Control as UNTRUSTED for all unknown apps and NOT TRUST by digital signature alone. All other configurations as per my configuration thread.

I still have SysHardener installed for general OS hardening and script protection.
Simple but highly effective protection. Gets my vote.
 
From the setup owner View current setup
Finally could afford a license for Kaspersky Standard (don't need all the crap for the most advanced versions).

Removed
  • CyberLock (VS)
  • BitDefender Free
Added
  • Kaspersky Standard
Configured Application Control as UNTRUSTED for all unknown apps and NOT TRUST by digital signature alone. All other configurations as per my configuration thread.

I still have SysHardener installed for general OS hardening and script protection.
Replicated the same configuration for my working laptop. I tried several configurations in order to avoid paying for an antivirus license in a laptop I don't own (property of the company), having tried:
  • Microsoft Defender + VoodooShield CyberLock
  • BitDefender Free + VoodooShield CyberLock
  • Norton 360 for Gamers + VoodooShield CyberLock
On the first case I felt a bit unprotected on the behavioural defense.
On the BD Free case I felt like I was lacking important modules present on the paid version.
I hated Norton.

It's probably all in my mind, but I never feel as secure as when I'm using Kaspersky with Application Control set to Untrusted.
 
Comment on setup v2
I also moved back to kaspersky, feels its only antivirus that i can take seriously. Having tried pretty much everything now, except the endpoint ones, where licenses are more costly and harder to get i guess.

I run standard on default settings, i see youre also using standard...way cheaper and the vpn is not worth paying... its better to get actual vpn than just one bundled with antivirus just for security
 

Recently browsing

Members who viewed this thread in the last 5 minutes

Back
Top