Latest Changes
Dec 22, 2018
Operating System
Windows 10
Windows Edition
Home
Build
1809.195
System Architecture
64-bit OS
Security Updates
Check for Updates only - User interaction for download and installation
User Access Control
Always Notify
Firewall
Windows Firewall - Network security provided by Microsoft
Device Security
Disabled - Safety mechanisms are turned off
User Account
Administrator - User has complete control over the device
Recent Security Incidents
No malware or privacy issues
Malware Testing
None - No Malware on host PC or VM
Real-time Web & Malware Protection
UltraDNS Threat Protection
Windows Defender Firewall
Custom Settings For Real-Time Protection
Custom - Major changes for Increased Security
Virus and Malware Removal Tools
Random (CureIt/FRST/KVRT/NPE)
Browsers and Extensions
Yandex Browser - https://yandex.com/support/browser/security

AdBlocker for Youtube (effectively removes annoying contents, ads, and banners from YouTube)
Cache Killer (clears the browser cache automatically on opening a new tab or refreshing a tab)
Cookie AutoDelete (auto-delete unused cookies from closed tabs while keeping the ones you want)
Context Menu Search (use the right-click menu to search for selected text in any search engines)
Decentraleyes (protects against tracking through "free", centralized, content delivery)
Dictionary Lookup (look up any word in an inline frame with a simple click)
h264ify (makes YouTube stream H.264 videos instead of VP8/VP9 videos)
I don't care about cookies (get rid of annoying cookie warnings from almost all websites)
IDN Safe (blocks internationalized domain names to prevent visiting probable fake sites)
Netcraft (blocks XSS attacks, phishing and suspicious sites)
Poper Blocker (blocks annoying popups and some cryptomining)
Privacy Badger (blocks trackers and WebRTC, not ADs generally)
Youtube Auto HD + FPS (Automatically set the videos' quality on YouTube)
Web Privacy
Browser extensions listed above
SecureDNS via browser's dnscrypt
Password Management
Bitwarden (online) & Keepass (offline)
Default Web Search
DuckDuckGo (Uncensored)
System Utilities
Autoruns
Disc Cleanup
Driver Easy
Driver Store Explorer
Geek Uninstaller
Process Hacker Nightly
Windows Repair Toolbox
Wise Disk Cleaner
Wise Registry Cleaner
Data Backup
Copy/Paste - automatic backups deleted my files, twice, I will not fall for that again
Frequency of Data backups
Weekly
System Backup
None - System Backup trashed my system, besides, I can reinstall everything within an hour anyway
Frequency of System backups
None
Computer Specifications
http://steamcommunity.com/id/tairikuokami

TairikuOkami

Level 21
Content Creator
Verified
Plus my Windows Tweaks applied, which cripple Windows (sort of), but increase security, to sum it up:

As anti-malware tests regularly confirms, 99% of infections come either via an email or via a browser.
I open emails in txt and the browser is well protected. I can not use smartscreen, it blocks my files

Windows Defender Firewall is set to block inbound/outbound, no Windows processes are allowed.
Removed SearchUI.exe & Powershell. UAC with a password. "ValidateAdminCodeSignatures" is ON.
Disabled IPv6, WMI, WSH, almost all services & tasks, all Windows features, except NET Framework.

I turn off PC with Wise Cleaners + tweaks, to remove startup entries and restore my settings.
I have denied access to SYSTEM and set Users permissions to read only on a backup partition.
Yandex browser keeps running after closing, Cache Killer helps with that. Thanks @Sunshine-boy

Since 1803, it is no longer possible to uninstall network protocols, MS said: Because we say so ... .
So I have disabled their drivers, plus a few drivers related to remote management/sharing, thanks MS.
I have Server/Workstation disabled, that should take care of the "Client for Microsoft Network" & "File and Printer Sharing".

I have 2 short-stroked HDDs to improve their performance by ~30%. SSD is just a waste of money, it does not improve performance (no FPS gain in games), just loading times, there is not a single test proving otherwise. Better to buy more RAM, disable pagefile, to force games to load to RAM.

Mom's laptop: The same setup, but Windows Tweaks Light, FortiClient (Family WebFiltering enabled), WinFirewall Inbound ON, WinUpdates ON.

Please do not recommend following products:
Avira, Windows Defender - hardware killers.

Avast, AVG, Comodo, ZoneAlarm - cause BSOD.
Panda Dome - slows down and kills wireless internet.
KFA is a junkware with telemetry, KSC is picky about users.
CrowdStrike, ESET, Symantec have $$$ and also score well in test labs.
Malwarebytes - I would rather install malware than this junk PUPing everything.
 

Attachments

Last edited:

TairikuOkami

Level 21
Content Creator
Verified
What is the secret of your config?
My tweaks, not sure if it allowed to post it here, link to pastebin is on my profile. I turn off computer with CCleaner (to clean temps/caches, which might contain something) + my tweaks, which remove all startup entries (plus a few more things) and restore all settings, if changed by Windows or anything nasty.
 

Deletedmessiah

Level 21
Content Creator
Verified
Primary, but I have not been infected for years, so it is working for me. But I would not recommend it to others, obviously. ;)
Even if you're an advanced user, you should atleast enable built in Windows Defender, Windows Firewall and smartscreen. These are efficient and doesn't impact the performance much. They probably did in the past because of bugs but I've read most Windows 10 bugs are fixed by now.
 

Winter Soldier

Level 25
My tweaks, not sure if it allowed to post it here, link to pastebin is on my profile. I turn off computer with CCleaner (to clean temps/caches, which might contain something) + my tweaks, which remove all startup entries (plus a few more things) and restore all settings, if changed by Windows or anything nasty.
Making registry hacks doesn't guarantee a reliable protection system to your OS. Because with this config you are not secure on all layers. On Windows 10 I would at least enable WD and as I said also Zemana or VoodooShield (avalaible also in freeware version) or maybe you can use Shadow Defender for a ghost session.