SECURE Shmu26 Config in 2017

Discussion in 'PC Security Configuration' started by shmu26, Feb 14, 2017.

  1. shmu26

    shmu26 Level 53

    Jul 3, 2015
    4,246
    13,484
    Utopia
    #1 shmu26, Feb 14, 2017
    Last edited: Apr 3, 2017
    Most recent changes:
    14/01/2018
    Operating System:
    • Windows 10
    OS Edition:
    Pro
    OS Build:
    Fall Creators Update
    OS Architecture:
    64-bit
    User Access Control:
    Always Notfiy
    Firewall:
    Windows Firewall
    OS Security Updates:
    Automatic Updates
    OS File Reputation:
    • SmartScreen for Windows 10
    Type of User Account:
    Microsoft Account
    Recent Malware Attacks:
    No
    Testing AV's with Malware Samples:
    No
    Real-time Malware Protection:
    Avast free, AppGuard
    On-demand Scanners:
    none
    Security Product Settings:
    Custom
    Browsers and Extensions:
    Google Chrome, Edge
    extensions: HTTPS Everywhere
    Preferred Search Engine:
    Google
    Password Manager:
    LastPass
    Content Blocker (Ads, Scripts, Trackers):
    UBlock Origin, UBlock Origin extra
    Frequently used System Utilities:
    VMware, 7-zip, Send to virus total
    Frequency of Data Backups:
    Custom Backups
    Data Backup Software:
    Macrium Reflect
    Frequency of System Image Backups:
    Manual / On-demand Backups
    System Image Backup Software:
    Macrium Reflect Home
    --
     
    Sunshine-boy, AtlBo, frogboy and 17 others like this.
  2. JM Security

    JM Security Level 28
    Trusted

    Apr 12, 2015
    1,746
    13,954
    SecureMyBit Developer
    Unknown
    I have nothing to add here, you are protected.

    Thanks for sharing.
     
    Vasudev, Sunshine-boy, AtlBo and 8 others like this.
  3. DracusNarcrym

    DracusNarcrym Level 19

    Oct 16, 2015
    909
    5,705
    Greece
    Windows 10
    Comodo
    Great security configuration.

    The only note I would like to make is for you to try to use a physically separate computer to run your virtual machines on, for maximum security, or even use a separate subnet for the virtual machines, to avoid contact with your main productive PC altogether.

    You obviously have backup images covered as well, so... I guess I cannot recommend anything else. :D

    Thanks for sharing your new config. :p
     
    Vasudev, Sunshine-boy, AtlBo and 9 others like this.
  4. Yash Khan

    Yash Khan Level 51

    Oct 22, 2012
    4,055
    8,960
    Light, strong & effective config...:)nothing to add from my side...;)
     
    Vasudev, Sunshine-boy, AtlBo and 8 others like this.
  5. aragornnnn

    aragornnnn Level 11

    Aug 18, 2016
    524
    6,236
    Warehouse Employee @ Nike ELC Belgium
    Belgium
    Windows 10
    Kaspersky
    Very good config, really can't find anything to add :)
     
    AtlBo, frogboy, _CyberGhosT_ and 5 others like this.
  6. carsten ibsen

    carsten ibsen Level 20

    Sep 18, 2016
    980
    5,200
    retired
    denmark
    Windows 10
    Microsoft
    Hello smu26 cant put my finger on anything,YES what a nice configuration.:D
     
    Vasudev, Sunshine-boy, AtlBo and 7 others like this.
  7. Sr. Normal 2.0

    Sr. Normal 2.0 Level 5
    Trusted

    Sep 14, 2016
    235
    6,280
    Talavera, España
    Windows 10
    Norton
    Great config. I really like your config. In fact, the only thing I would do would be to replace Zipware with Bandizip

    Thanks for sharing your extra-strong config :)
     
    Vasudev, Sunshine-boy, AtlBo and 7 others like this.
  8. shmu26

    shmu26 Level 53

    Jul 3, 2015
    4,246
    13,484
    Utopia
    thank you, and please tell me something about bandizip
     
    Vasudev, Sunshine-boy, AtlBo and 4 others like this.
  9. Winter Soldier

    Winter Soldier Level 25

    Feb 13, 2017
    1,466
    10,341
    PLC programmer - Robotics industry
    Wormhole
    Windows 10
    Emsisoft
    Really complete and nice setup! :)
    I've to show for this and other configs I've seen here, to my friends, hoping they learn something more! :D;)
     
    Vasudev, Sunshine-boy, AtlBo and 8 others like this.
  10. Umbra

    Umbra From Emsisoft
    Developer

    May 16, 2011
    17,162
    29,621
    Community manager
    Vietnam & France
    Windows 10
    Emsisoft
    By curiosity , what ERP will cover that KIS won't? (I don't know much of KIS because i don't like it ^^)
     
    Vasudev, AtlBo, _CyberGhosT_ and 4 others like this.
  11. XhenEd

    XhenEd Level 27
    Content Creator Trusted

    Mar 1, 2014
    1,607
    8,420
    Philippines
    Windows 10
    Default-Deny
    KIS, by default, "disables" HIPS (the traditional alerts). ERP can provide the alerts.
     
    Vasudev, AtlBo, frogboy and 6 others like this.
  12. Umbra

    Umbra From Emsisoft
    Developer

    May 16, 2011
    17,162
    29,621
    Community manager
    Vietnam & France
    Windows 10
    Emsisoft
    but you can still enables those alerts no?
     
    Vasudev, AtlBo, _CyberGhosT_ and 4 others like this.
  13. BugCode

    BugCode Level 10

    Jan 9, 2017
    460
    4,529
    FireFighter
    Oeno Island
    Looks great! But in my happits KIS (tweaked) & HMPA is enough, but you have put some really light resources, so doesn't matter. You know you are good to go dangerous world name internet with happy face :)
     
    Sunshine-boy, AtlBo, frogboy and 7 others like this.
  14. shmu26

    shmu26 Level 53

    Jul 3, 2015
    4,246
    13,484
    Utopia
    @Umbra and @BugCode: yes, Kaspersky can be tweaked and twisted to the point that it will do what ERP does. I just like the way ERP does it. Also, using both softwares at close to their default settings gives me two layers of protection
     
    Vasudev, Sunshine-boy, AtlBo and 8 others like this.
  15. Sr. Normal 2.0

    Sr. Normal 2.0 Level 5
    Trusted

    Sep 14, 2016
    235
    6,280
    Talavera, España
    Windows 10
    Norton
    Well it´s light, easy and very comfortable. Bandizip It is really fast and stable. Has some very practical features, like create new window in context menu. It's free, I'd recommend you try it. I love it :)
     
    Sunshine-boy, AtlBo, frogboy and 8 others like this.
  16. shmu26

    shmu26 Level 53

    Jul 3, 2015
    4,246
    13,484
    Utopia
    my alternate, non-paranoid config:

    Windows Defender
    Windows Firewall
    standard user account
    HitmanPro.Alert
    Startup Sentinel
    Process Lasso (to disallow script interpreters etc)
    Hard_Configurator (for a few simple tweaks)
     
  17. Exterminator

    Exterminator Super Moderator
    Staff Member

    Oct 23, 2012
    12,279
    46,648
    USA
    Windows 10
    Kaspersky
    Very nice config! +1 for KIS 2017
    I like the alternate "non-paranoid" config as well!!
    Thanks for sharing both with us :)
     
  18. shmu26

    shmu26 Level 53

    Jul 3, 2015
    4,246
    13,484
    Utopia
    uninstalled NoVirusThanks EXE Radar Pro.

    installed ReHIPS.
    the new version (RC4) has improved support for:
    * vulnerable processes
    * standard user accounts
     
  19. Parsh

    Parsh Level 24
    Trusted AV Tester

    Dec 27, 2016
    1,328
    12,031
    7 Islands of Bombay
    Windows 10
    Default-Deny
    That's a pretty no-nonsense setup. Total coverage :)
    I hope I get to try reHIPS sometime!

    Why dislike KIS :/
    Is it the alerts or something else? I am aware of your lockdown approach :) but you said you dislike a particular AV solution, that triggered my curiosity.
    In terms of standard AV solutions, it goes well beyond. I'll rate it in top two any time based on the features and protection.. my learning.
    Yes we can enable..And when enabled, it showers with notifications right :D
    Most of the times, looking at the application, I'll either "Trust the application" so that that sub-application/application related popups in the sequence are minimized. If it is not exactly trustable, I'll either respond to each (popups except during installations are quite less comparatively) or will trust the sequence for skipping its recurrence.

    If at all the concerned app is risky and I allow some initial actions, the System Watcher+other restrictions+ZETA approach of Kaspersky (and my complementary protections) should further do the guarding.
     
    Sunshine-boy, AtlBo, frogboy and 7 others like this.
  20. _CyberGhosT_

    _CyberGhosT_ Level 52
    Trusted

    Aug 2, 2015
    4,170
    27,465
    Retired
    Central US
    Linux Mint
    Default-Deny
    Sorry but I think Peazip is more a secure option.
    Here give it a peek @shmu26
    Peazip: PeaZip | Free archiver, free RAR TAR ZIP files utility
    I have used it for almost 2yrs now and very quickly fell in love with
    it's functionality and ease of use.
     
    Sunshine-boy, AtlBo, SHvFl and 5 others like this.
Loading...
Similar Threads Forum Date
Shmu26's new security config SCW Archive May 31, 2016
shmu26 security config SCW Archive Nov 24, 2015
UNVERIFIED Sunshine-boy Security config(2018) PC Security Configuration Today at 6:48 PM