Shukla44's Security Config (Desktop)

[shukla44]

If you like you can install Yandex browser instead of chrome.
It has a good DNS list from open DNS to Adguard.
You can change the dns only with one click also you can have 2 DNS at the same time(one for IPV 4 and one in browser) it's like double protection:notworthy:
I have DNS watch(DNSSEC) for IPV 4 and DNS crypt(CS Switzerland DNSCrypt server) for the browser.

Thanks for your advice but i don't like chrome also. But cannot remove it cause i need a seperate browser for my VPN.
I have simpledns crypt already installed. I use it when i don't have to download anything.

 

[shukla44]

Removed: VT Hash Check (temporarily)

Kaspersky has been detecting PDM.Exploit in this program, didn't want to take risks so removed it temporarily.

Updated: Additional Info

 

[shukla44]

Disabled: Kaspersky Anti-Exploit Protection (conflicting with HMP.A & too many alerts lately)

Added: VT Hash Check (back after disabling Kaspersky's AEP)
Added: EEK (for on-demand scans)

Removed: NPE (too many cashes, cannot use it properly)

 

[shukla44]

Removed: Wise Registry Cleaner (No need, kerish doctor is more than enough)
Replaced: Wise Folder Hider Pro -> Kaspersky Data Encryption (license expired)

I guess Office 2007 support ended, but still gonna use it empowered by HMP.A, so no need to worry about security just the bug-fixes i'm gonna miss (if there were any).
Lets see how it goes, might even replace it with OpenOffice or LibreOffice. Already using LibreOffice on my netbook so i am used to it.

 

[shukla44]

Removed: EaseUS Partition Master pro (no need for it)
Updated: Additional info

Thinking of buying Macrium Reflect, need to save up as it's pricey (INR 4500).

 

[SHvFl]

Removed: EaseUS Partition Master pro (no need for it)
Updated: Additional info

Thinking of buying Macrium Reflect, need to save up as it's pricey (INR 4500).

Don't. The price is too high to worth it just to save 10 minutes when restoring stuff.

 

[yashiscool]

The configuration looks good to me but a few things that you might want to consider.
1) Not everything can be HTTPS, so I think you will need to use CFW tightly to scan every protocol accurately.
Also, I suggest to make use of CIS instead and take full advantage of the App Containment (Sandbox) and HIPS security features. On a timely basis, purge the firewall entries and the HIPS entries to ensure security.
2) I suggest to use a Disk encryption software. I personally prefer Bitlocker to be used. Pointsec or TrueCrypt are my second choices.
3) There is no mention about your router / modem in this config. Have you tightly configured your router too?
4) I would suggest using Keyscrambler to protect yourself from logging keystrokes.
5) I strongly suggest you upgrade your hardware.

Most importantly, no system is full proof but the way you use it can reduce the attacks on your system.

 

[yashiscool]

Thanks for your advice but i don't like chrome also. But cannot remove it cause i need a seperate browser for my VPN.
I have simpledns crypt already installed. I use it when i don't have to download anything.

Yandex is used by the russian intelligence to track and gather sensitive information that you browse or type. I would suggest to know the background of the applications before using any of them. Many country agencies use free software (even paid in some cases) to hack or gather sensitive user information without the user's knowledge.

 

[shukla44]

The configuration looks good to me but a few things that you might want to consider.
1) Not everything can be HTTPS, so I think you will need to use CFW tightly to scan every protocol accurately.
Also, I suggest to make use of CIS instead and take full advantage of the App Containment (Sandbox) and HIPS security features. On a timely basis, purge the firewall entries and the HIPS entries to ensure security.
2) I suggest to use a Disk encryption software. I personally prefer Bitlocker to be used. Pointsec or TrueCrypt are my second choices.
3) There is no mention about your router / modem in this config. Have you tightly configured your router too?
4) I would suggest using Keyscrambler to protect yourself from logging keystrokes.
5) I strongly suggest you upgrade your hardware.

Most importantly, no system is full proof but the way you use it can reduce the attacks on your system.

Did you even look at the config?

1) I am not using CFW. It was just a thought, which passed long ago.
2) I already use bitlocker & veracrypt.
3) Why?
4) I already have Kaspersky & HMP.A for keystrokes.
5) Why?

 

[shukla44]

Don't. The price is too high to worth it just to save 10 minutes when restoring stuff.

Thanks for your reply. I agree, the price is high. I guess it was a silly thought, as free also does the same thing as paid.

 

[SHvFl]

Thanks for your reply. I agree, the price is high. I guess it was a silly thought, as free also does the same thing as paid.

You don't get rapid restore but that is basically a few more minutes every time you restore. It's manageable if you don't want to spend the money.

 

[shukla44]

Added: Appcheck Pro (temporarily)
Updated: Additional Info

 

[Sunshine-boy]

Yandex is used by the russian intelligence to track and gather sensitive information that you browse or type

Where is your proof? :notworthy:even if they are spying on me let them do IDC (still better than NSA or Israel)

 

[bribon77]

Added: Appcheck Pro (temporarily)
Updated: Additional Info

Hello: What configuration do you have with APPCheck or what options have you played?

 

[shukla44]

Hello: What configuration do you have with APPCheck or what options have you played?

I removed appcheck & installed kaspersky again.
I installed appcheck on my netbook with VS Pro, Simplewall & HMP.A. On netbook, I have auto-back & auto-update disabled plus added some imp. folders to manual backup, that's it, everything else is default. Appcheck provides it's full protection in default mode itself. Only thing is, after registering pro, i had to enable MBR protection.

 

[yashiscool]

Where is your proof? :notworthy:even if they are spying on me let them do IDC (still better than NSA or Israel)

Do you think, you ever get a proof of what NSA or KGB does?

 

[yashiscool]

Did you even look at the config?

1) I am not using CFW. It was just a thought, which passed long ago.
2) I already use bitlocker & veracrypt.
3) Why?
4) I already have Kaspersky & HMP.A for keystrokes.
5) Why?

I know that you don't use CFW but I suggest that you use it with tightened security.

Your router or modem also plays an important role when it comes to security. It is not always necessary to explore the exploits in your system through the internet. Many a times, a malware bug in your network may be doing it silently undetected. There can also be Zero-Day exploits in your router's firmware.

Regarding the hardware suggestion, to maintain the high security and performance, you need a proper high end processor and memory like Ci5 or more. Dude, Ci3 is becoming a thing of the past in the current world especially if you are a gamer or doing high-end computations. If you are good with it then all is fine.

 

[shukla44]

I know that you don't use CFW but I suggest that you use it with tightened security.

Your router or modem also plays an important role when it comes to security. It is not always necessary to explore the exploits in your system through the internet. Many a times, a malware bug in your network may be doing it silently undetected. There can also be Zero-Day exploits in your router's firmware.

Regarding the hardware suggestion, to maintain the high security and performance, you need a proper high end processor and memory like Ci5 or more. Dude, Ci3 is becoming a thing of the past in the current world especially if you are a gamer or doing high-end computations. If you are good with it then all is fine.

Thanks but if i were to use CFW, i will use the Auto-sandbox. IMO that is the only & most effective way in CFW.

Yes, i know. I have all the beginner & advanced security options set in the modem config page. That is all their is to do with modem.
About zero-day exploits in firmware, nothing can be done.

Yes, i will love to use Ci7 8th gen but i can't afford that, & even if i can, i don't plan on wasting all that money for browsing & watching movies. I don't play games on computer, i already have gaming console for that.

EDIT: I am all for security but i avoid paranoia too.

Regards.

 

[shukla44]

Replaced: NoScript -> uMatrix (temporarily, but liking it so far, maybe permanent....)
Updated: Additional Info