Advanced Plus Security Shukla44's Security Configuration 2018

[shukla44]

NOTE: Keep in mind, ONLY security-related programs on my system are mentioned above.

Previous Security Config (2017) - shukla44's Security Configuration (Desktop)

Spoiler: Vulnerable Processes

Vulnerable Processes on my system (Windows 7):

1. shell32.exe*
2. regsvr32.exe*
3. rundll32.exe*
4. cmd.exe**
5. mshta.exe**
6. wscript.exe***
7. cscript.exe***
8. powershell.exe***
9. powershell_ise.exe***

All process's both paths (system32 & syswow64) included.

* - Reported/Logged
** - Monitored/Prompts
*** - Blocked/Disabled

Spoiler: Vulnerable Apps

Vulnerable Apps & Programs on my System (beside Windows 7):

1. Browsers
2. Microsoft Office***
3. Thunderbird
4. Foxit Reader***
5. Adobe Photoshop 64-bit***
6. Windows Media Player***
7. uTorrent (3.3.2 Build 30586)
8. VLC Media Player***
9. K-Lite Mega Codec Pack With MPC-HC
10. Microsoft .NET Framework

*** - Internet connections (Incoming & Outgoing) are disabled in Firewall

Spoiler: Info

Additional Info:

1. I have 2 active user accounts - 1 admin (personal use only), 1 standard (friends & family use). The standard account enjoy the strict settings of kaspersky's parental control.
2. For financial/banking protection, i use kaspersky's safe money. For safe money, i use ie 64-bit only with one addon kaspersky protection & all others DISABLED, also settings in ie 64-bit is modified for max protection.
3. Firefox 64-bit is my primary browser. Internet explorer is only for banking.
4. I use shadow defender (on admin account only) as a sandbox for testing new settings or unknown apps.
5. Adguard desktop active filters - base filter, spyware filter, social media filter, annoyances filter, adblock warning removal, nocoin. I use custom user filters as well. Phishing & malware protection is ENABLED. Stealth mode ENABLED. https filtering ENABLED. Allow search ads & websites self-promotion is DISABLED.
6. Adguard protection is DISABLED on ie 64-bit. I have https scanning ENABLED in adguard & kaspersky both, so i need a seperate browser for banking only, where no conflicts should arise.
7. All the internet connections (incoming & outgoing) are DISABLED in kaspersky firewall for apps/programs that doesn't depend on Internet.
8. Windows is always fully updated. I install updates manually on every third tuesday.
9. All the important files/documents are backed up in a password-protected winrar archive file without the .rar file extension so that it cannot be encrypted by file-cryptors. For mbr-encryptors, it is also saved on the multiple cloud storage services.
10. All the important passwords are kept in a password-protected doc file within a password-protected archive within a password-protected thumb drive. For emergencies, i keep some of them on a piece of paper hidden in my room. For the rest of the passwords, i use sticky password.

Suggestions & feedback's always welcome.
If you have questions about my configuration, i'll be happy to answer as much as possible.​

 

[harlan4096]

The only "Cons" would be to upgrade to W10...

Thanks for sharing

 

[shukla44]

The only "Cons" would be to upgrade to W10...

Thanks for sharing

Can't. Outdated hardware NOT supportable by Win 10.
In future maybe, when i upgrade my system.

 

[harlan4096]

I had already imagined it

 

[ChemicalB]

Hey very nice setup, thanks for sharing

 

[bribon77]

Thanks for sharing

 

[LDogg]

Great setup for a Win7 system! Very well protected!

~LDogg

 

[FALLEN]

Great setup. :emoji_ok_hand: Thanks for sharing with us.

 

[shukla44]

Great setup for a Win7 system! Very well protected!

~LDogg

Thanks ldogg, i learned here that simplicity is better.
Cramming different security softwares together is just a recipe for infection/windows failure.
Regards.

 

[Dhruv2193]

good setup. Even i like to use windows 7 more than 10.

 

[LDogg]

Thanks ldogg, i learned here that simplicity is better.
Cramming different security softwares together is just a recipe for infection/windows failure.
Regards.

Very true my friend!

~LDogg

 

[JM Safe]

Good config @shukla44 !

 

[shukla44]

Added: AdwCleaner
Added: Wise Disk Cleaner
Added: Adguard Adblocker extension **

Removed: Zemana
Removed: Ccleaner

** Although i already have adguard for desktop, added adguard extension in firefox. As on some websites, assistant doesn't work.

 

[JM Safe]

Added: AdwCleaner
Added: Wise Disk Cleaner
Added: Adguard Adblocker extension **

Removed: Zemana
Removed: Ccleaner

** Although i already have adguard for desktop, added adguard extension in firefox. As on some websites, assistant doesn't work.

Why did you remove Zemana?

 

[shukla44]

Why did you remove Zemana?

It is too much work with zemana plus it's tracking files got bigger & bigger by day. It always finds every extension & setting in browser harmful even if i put it to exclusion, a small setting changed triggered it again. TBH got fed up. OD scanners should be for peace of mind.

 

[shukla44]

Added: Adguard DNS (Modem)

 

[Wraith]

It is too much work with zemana plus it's tracking files got bigger & bigger by day. It always finds every extension & setting in browser harmful even if i put it to exclusion, a small setting changed triggered it again. TBH got fed up. OD scanners should be for peace of mind.

You can try HitmanPro and Norton Power Eraser for on demand scanners.

 

[shukla44]

You can try HitmanPro and Norton Power Eraser for on demand scanners.

I can't install NPE, setup always crashes. Had HMP, removed it because it was just a scanner, i need a remover too. EEK & AdwCleaner seems the best choice for me.

 

[harlan4096]

NPE does not work with K2019 versions... that's why in my tests with Kaspersky in the Hub I had to stop using it...

 

[Wraith]

NPE does not work with K2019 versions... that's why in my tests with Kaspersky in the Hub I had to stop using it...

I didn't know about this. I have to test NPE on the PC running KAV free.