Advanced Plus Security StRonK's Laptop Config 2022

Last updated
Sep 5, 2022
How it's used?
For home and private use
Operating system
Windows 11
On-device encryption
Log-in security
    • Basic account password (insecure)
Security updates
Allow security updates and latest features
User Access Control
Always notify
Smart App Control
Network firewall
Enabled
Real-time security
Kaspersky Internet Security
Firewall security
Microsoft Defender Firewall
About custom security
  • Simple Windows Hardening (Recommended settings)
  • Firewall Hardening (LOLBins + Recommended settings)
  • O&O ShutUp10++ (Recommended settings + additional privacy settings)
  • O&O AppBuster (All unnecessary apps have been deleted.)
  • Simplewall
Periodic malware scanners
  • Kaspersky
  • AdwCleaner
  • HitmanPro
Malware sample testing
I do not participate in malware testing
Browser(s) and extensions
uBlock Origin
Bitwarden
Simple Translate
Enhancer for YouTube™
SponsorBlock
Secure DNS
NextDNS system wide and in my browser with different profiles
Desktop VPN
I use vpn servers in different locations that I set up with Tailscale.
Password manager
Bitwarden
Maintenance tools
BleachBit
File and Photo backup
I do not store any of my personal and non-personal files on the computer.
I only back up my game files to external drive.
System recovery
  • Macrium Reflect
Risk factors
    • Browsing to popular websites
    • Gaming
Notable changes
  • 8 September 2022
    • Windows UAC Maximum - always notify
    • AOMEI Backupper
  • 3 October 2022
    • Macrium Reflect
    • Simplewall
    • AdwCleaner,HitmanPro
    • Kaspersky Internet Security
What I'm looking for?

Looking for medium feedback.

StRonK

Level 1
Thread author
Apr 19, 2020
18
As of today I am using Windows 11 (Previously Windows 10). This is the configuration I use for my computer, I usually use my computer for games and series.
To be frank, I try to be an informed user, I pay attention to my privacy and security as much as possible. If you want to give advice, feel free to write, thank you.
Kind regards.

Policies that I edit for Edge when I have time
Code:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge]
"BuiltInDnsClientEnabled"=dword:00000001
"SpotlightExperiencesAndRecommendationsEnabled"=dword:00000000
"PersonalizationReportingEnabled"=dword:00000000
"DefaultSensorsSetting"=dword:00000002
"DefaultSerialGuardSetting"=dword:00000002
"AudioCaptureAllowed"=dword:00000000
"NewTabPagePrerenderEnabled"=dword:00000000
"DefaultSearchProviderEnabled"=dword:00000001
"DefaultSearchProviderName"="Google"
"DefaultSearchProviderSearchURL"="{google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}ie={inputEncoding}"
"DefaultSearchProviderSuggestURL"="{google:baseURL}complete/search?output=chrome&q={searchTerms}"
"EfficiencyMode"=dword:00000000
"StartupBoostEnabled"=dword:00000000
"ConfigureDoNotTrack"=dword:00000001
"DnsOverHttpsTemplates"="https://xxxxxxx.d.adguard-dns.com/dns-query"
"PrintingEnabled"=dword:00000000
"AutofillCreditCardEnabled"=dword:00000000
"AutomaticHttpsDefault"=dword:00000002
"BackgroundModeEnabled"=dword:00000000
"BingAdsSuppression"=dword:00000001
"BlockThirdPartyCookies"=dword:00000001
"ConfigureShare"=dword:00000001
"EdgeFollowEnabled"=dword:00000000
"EdgeShoppingAssistantEnabled"=dword:00000000
"FamilySafetySettingsEnabled"=dword:00000000
"MediaRouterCastAllowAllIPs"=dword:00000000
"MicrosoftEdgeInsiderPromotionEnabled"=dword:00000000
"ShowMicrosoftRewards"=dword:00000000
"WebWidgetIsEnabledOnStartup"=dword:00000000
"WebWidgetAllowed"=dword:00000000
"VisualSearchEnabled"=dword:00000000
"UserFeedbackAllowed"=dword:00000000
"TrackingPrevention"=dword:00000002
"NewTabPageAllowedBackgroundTypes"=dword:00000003
"NewTabPageHideDefaultTopSites"=dword:00000001
"EnableMediaRouter"=dword:00000000
"ShowCastIconInToolbar"=dword:00000000
"DefaultGeolocationSetting"=dword:00000002
"DefaultWebUsbGuardSetting"=dword:00000002
"DefaultWebBluetoothGuardSetting"=dword:00000002
"DefaultNotificationsSetting"=dword:00000002
"SleepingTabsTimeout"=dword:0000012c
"SleepingTabsEnabled"=dword:00000001
"MAMEnabled"=dword:00000000
"DefaultSearchProviderImageURL"="{google:baseURL}searchbyimage/upload"
"TyposquattingCheckerEnabled"=dword:00000001
"AdsTransparencyEnabled"=dword:00000001
"DnsOverHttpsMode"="automatic"
 

harlan4096

Moderator
Verified
Staff Member
Malware Hunter
Well-known
Apr 28, 2015
8,729
I would set Windows UAC to Maximum.

In Periodic security scanners: I don't scan unless there is anything suspicious, please specify the scanners used.

Also in Device recovery & backup, a full image backup solution would be welcome. I guess restoring a full system image backup with Macrium Reflect is faster than re-format the system, apply all the updates and re-install all the apps...

Thanks for sharing :)
 

StRonK

Level 1
Thread author
Apr 19, 2020
18
Thank you for your valuable comment.

I was using it in default as I don't know what the difference is between default and maximum in Windows UAC. I did what you said and set it to maximum.

Normally I used Kaspersky Internet Security, but now that my license has expired that's why I didn't add, I am trying Windows Defender, if I am not satisfied, I will probably continue to use Kaspersky Internet Security. Actually, to be honest, Windows Defender doesn't give me confidence, I will probably continue to use KIS.

thank you again for your answer ❤️
 

StRonK

Level 1
Thread author
Apr 19, 2020
18
Today I backed up my device following the advice given by @harlan4096 . I chose AOMEI Backupper software.

It's my first time using backup software and I'm really baffled. After backing up 19.5GB files, the backup size was 9.5GB, which is unbelievable. I also added AOMEI Backupper shortcut option to the boot menu, I can boot and restore from backup even if Windows crashes in any way, this feature is perfect.

I have learned a lot of useful information from this forum on this and other topics, thank you everyone.
 

StRonK

Level 1
Thread author
Apr 19, 2020
18
I uninstalled AOMEI Backupper software and will never use it again. Today I wanted to restore my system with the backup file that I have used many times, it loaded the backup correctly but the window did not open. I know that there is no problem with the backup I use, I have used it many times. Fortunately, for such situations, I wrote windows 10 winpe to the flash drive. There were a lot of software like Macrium Reflect in winpe. In Macrium Reflect settings, there is an option to edit boot-related errors, I used it and the system booted without any problems.
Macrium Reflect will be the only backup software I will use from now on.

Now I use Kaspersky Internet Security as anti virus.

Since nextdns is now connected to the correct server as a location, I switched from Adguard to Nextdns.

I will now periodically scan the system with AdwCleaner, HitmanPro software. (Kaspersky Internet Security always active)

I use Simplewall software with windows firewall to restrict network traffic and connect only the software I want to the internet.
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top