Danger TairikuOkami's Crippled Windows

[TairikuOkami]

Plus my Windows Tweaks applied, which cripple Windows (sort of), but increase security, to sum it up:

As anti-malware tests regularly confirms, 99% of infections come either via an email or via a browser.
I open emails in txt and the browser is well protected. I can not use smartscreen, it blocks my files

Windows Defender Firewall is set to block inbound/outbound, no Windows processes are allowed.
Removed SearchUI.exe & Powershell. UAC with a password. "ValidateAdminCodeSignatures" is ON.
Disabled IPv6, WMI, WSH, almost all services & tasks, all Windows features, except NET Framework.

I turn off PC with Wise Cleaners + tweaks, to remove startup entries and restore my settings.
I have denied access to SYSTEM and set Users permissions to read only on a backup partition.
Yandex browser keeps running after closing, Cache Killer helps with that. Thanks @Sunshine-boy

Since 1803, it is no longer possible to uninstall network protocols, MS said: Because we say so ... .
So I have disabled their drivers, plus a few drivers related to remote management/sharing, thanks MS.
I have Server/Workstation disabled, that should take care of the "Client for Microsoft Network" & "File and Printer Sharing".

I have 2 short-stroked HDDs to improve their performance by ~30%. SSD is just a waste of money, it does not improve performance (no FPS gain in games), just loading times, there is not a single test proving otherwise. Better to buy more RAM, disable pagefile, to force games to load to RAM.

Mom's laptop: The same setup, but Windows Tweaks Light, FortiClient (Family WebFiltering enabled), WinFirewall Inbound ON, WinUpdates ON.

Please do not recommend following products:
Avira, Windows Defender - hardware killers.
Avast, AVG, Comodo, ZoneAlarm - cause BSOD.
Panda Dome - slows down and kills wireless internet.
KFA is a junkware with telemetry, KSC is picky about users.
CrowdStrike, ESET, Symantec have $$$ and also score well in test labs.
Malwarebytes - I would rather install malware than this junk PUPing everything.

 

[lab34]

Hello,
I recommend you Macrium Reflect Free to do system image.
Thanks to MT, I've tried it, and it's easy and fast.

 

[brod56]

What? You disabled every security layer, including the AV, the firewall and Smartscreen.
Your browser is well protected, but that doesn't mean you should use no detection software!

 

[Deleted member 178]

What? You disabled every security layer, including the AV, the firewall and UAC.
Your browser is well protected, but that doesn't mean you should use no detection software!

I agree. Risky setup.

 

[TairikuOkami]

I recommend you Macrium Reflect Free to do system image.

I do not really like/need system imaging. I do clean install every time the new Windows Upgrade is released (twice a year).

 

[frogboy]

Agreed with @lab34 add Macrium Reflect for a solid free and reliable backup solution.

 

[Deletedmessiah]

Risky setup. I hope its your secondary machine and not primary.

 

[Winter Soldier]

What is the secret of your config?
Can you live without AV, firewall and any other security level without having consequences?
Just asking for...

 

[TairikuOkami]

Risky setup. I hope its your secondary machine and not primary.

Primary, but I have not been infected for years, so it is working for me. But I would not recommend it to others, obviously.

 

[Deleted member 178]

What is the secret of your config?

It is a VM !

 

[brod56]

Primary, but I have not been infected for years, so it is working for me. But I would not recommend it to others, obviously.

That is like driving a car without seatbelt. If you are a good driver, you will probably never have an accident, but that doesnt mean you should do it at all.

 

[TairikuOkami]

What is the secret of your config?

My tweaks, not sure if it allowed to post it here, link to pastebin is on my profile. I turn off computer with CCleaner (to clean temps/caches, which might contain something) + my tweaks, which remove all startup entries (plus a few more things) and restore all settings, if changed by Windows or anything nasty.

 

[Deletedmessiah]

Primary, but I have not been infected for years, so it is working for me. But I would not recommend it to others, obviously.

Even if you're an advanced user, you should atleast enable built in Windows Defender, Windows Firewall and smartscreen. These are efficient and doesn't impact the performance much. They probably did in the past because of bugs but I've read most Windows 10 bugs are fixed by now.

 

[Winter Soldier]

Primary, but I have not been infected for years, so it is working for me. But I would not recommend it to others, obviously.

I think that sometimes you should scan the system at least with Zemana Anti-Malware to have a reasonable opinion that your computer is really malware free.

 

[Deleted member 178]

My tweaks, not sure if it allowed to post it here, link to pastebin is on my profile.

@TairikuOkami ok i see now where are you coming from, i saw that pastbin before but didn't made the relation to you until now, you are even worse than me

 

[TairikuOkami]

The only services running + a system view about 10 mins after startup, calmer than a sea. I have tamed the beast (more like crippled actually).

 

[Winter Soldier]

My tweaks, not sure if it allowed to post it here, link to pastebin is on my profile. I turn off computer with CCleaner (to clean temps/caches, which might contain something) + my tweaks, which remove all startup entries (plus a few more things) and restore all settings, if changed by Windows or anything nasty.

Making registry hacks doesn't guarantee a reliable protection system to your OS. Because with this config you are not secure on all layers. On Windows 10 I would at least enable WD and as I said also Zemana or VoodooShield (avalaible also in freeware version) or maybe you can use Shadow Defender for a ghost session.

 

[Ink]

I think that sometimes you should scan the system at least with Zemana Anti-Malware to have a reasonable opinion that your computer is really malware free.

Won't work if the system think it's offline?

 

[TairikuOkami]

Won't work if the system think it's offline?

As far as I have tested, only HitmanPro has that problem, they refused to fix that issue.

 

[Winter Soldier]

Won't work if the system think it's offline?

You are correct, Zemana works only with an active internet connection.