Most recent changes
Dec 11, 2018
Operating System
Windows 10
Windows Edition
Home
Build
1809.194
System type
64-bit OS
Security Updates
Check for Updates only - User interaction for download and installation
User Access Control
Always Notify - For App installs, Modify system & User settings
Device Firewall
Windows Firewall - Network security provided by Microsoft
Device Security
Disabled - Safety mechanisms are turned off
User Account
Administrator - User has complete control over the device
Recent Security Incidents
No malware or privacy issues
Malware Testing
None - No Malware on host PC or VM
Real-time Web & Malware Protection
UltraDNS Threat Protection
Windows Defender Firewall
Security Protection settings
Custom - Major changes for Increased Security
Virus and Malware Removal Tools
Random (CureIt/FRST/EEK/KVRT/NPE)
Browsers and Extensions
Yandex Browser - https://yandex.com/support/browser/security

AdBlocker for Youtube (effectively removes annoying contents, ads, and banners from YouTube)
Cookie AutoDelete (auto-delete unused cookies from closed tabs while keeping the ones you want)
Context Menu Search (use the right-click menu to search for selected text in any search engines)
Decentraleyes (protects against tracking through "free", centralized, content delivery)
Dictionary Lookup (look up any word in an inline frame with a simple click)
h264ify (makes YouTube stream H.264 videos instead of VP8/VP9 videos)
I don't care about cookies (get rid of annoying cookie warnings from almost all websites)
IDN Safe (blocks internationalized domain names to prevent visiting probable fake sites)
Netcraft (blocks XSS attacks, phishing and suspicious sites)
Poper Blocker (blocks annoying popups and some cryptomining)
Privacy Badger (blocks trackers and WebRTC, not ADs generally)
Youtube Auto HD + FPS (Automatically set the videos' quality on YouTube)
Web Privacy
Browser extensions listed above
Ipredator.se via browser's dnscrypt
Password Management
Keepass (offline)
Default Web Search
DuckDuckGo (Uncensored)
System Utilities collection
Autoruns
Disc Cleanup
Driver Easy
Driver Store Explorer
Geek Uninstaller
Process Hacker Nightly
Windows Repair Toolbox
Wise Disk Cleaner
Wise Registry Cleaner
Data Backup
Copy/Paste
Frequency of Data backups
Weekly
System Backup
None
Frequency of System backups
None
Device Specs
http://steamcommunity.com/id/tairikuokami

TairikuOkami

Level 19
Content Creator
Verified
Joined
May 13, 2017
Messages
926
Operating System
Windows 10
#1
Plus my Windows Tweaks applied, which cripple Windows (sort of), but increase security, to sum it up:

I can not use smartscreen, it blocks my files and no system backups either, not that I ever needed any.
I can restore Windows within 1 hour if needed, besides I reinstall Windows every 6 months anyway.

As anti-malware tests confirmed, 99% of infections come either via an email or via a browser.
I have emails set to open in plain text and the browser is well protected, so no need for an AV.

Windows Defender Firewall is set to block inbound/outbound, no Windows processes are allowed.
Removed SearchUI.exe & Powershell. UAC with a password. "ValidateAdminCodeSignatures" is ON.
Disabled IPv6, WMI, WSH, almost all services & tasks, all Windows features, except NET Framework.

I turn off PC with Wise Cleaners + tweaks, to remove startup entries and restore my settings.
I have denied access to SYSTEM and set Users permissions to read only on a backup partition.
Yandex browser uses Sophos URL filtering, scans files via Kaspersky and Bitdefender checks URLs.

Since 1803, it is no longer possible to uninstall network protocols, MS said: Because we say so ... .
So I have disabled their drivers, plus a few drivers related to remote management/sharing, thanks MS.
I have Server/Workstation disabled, that should take care of the "Client for Microsoft Network" & "File and Printer Sharing".

I have 2 short-stroked HDDs to improve their performance by ~30%. SSD is just a waste of money, it does not improve performance (no FPS gain in games), just loading times, there is not a single test proving otherwise. Better to buy more RAM, disable pagefile, to force games to load to RAM.

Mom's laptop: The same setup, but Windows Tweaks Light, FortiClient (Family WebFiltering enabled), WinFirewall Inbound ON, WinUpdates ON.

Please do not recommend following products:
Avast, AVG, ZoneAlarm - cause BSOD.
Avira, Windows Defender - hardware killers.
Panda Dome - slows down and kills wireless internet.
Comodo, IoBit, Malwarebytes, Zemana - untrustworthy.
KFA is a junkware with telemetry, KSC is picky about users.
CrowdStrike, ESET, Symantec - they $$$ test labs to score well.
 

Attachments

Last edited:

TairikuOkami

Level 19
Content Creator
Verified
Joined
May 13, 2017
Messages
926
Operating System
Windows 10
#12
What is the secret of your config?
My tweaks, not sure if it allowed to post it here, link to pastebin is on my profile. I turn off computer with CCleaner (to clean temps/caches, which might contain something) + my tweaks, which remove all startup entries (plus a few more things) and restore all settings, if changed by Windows or anything nasty.
 

Deletedmessiah

Level 21
Verified
Joined
Jan 16, 2017
Messages
1,010
Operating System
Windows 8.1
#13
Primary, but I have not been infected for years, so it is working for me. But I would not recommend it to others, obviously. ;)
Even if you're an advanced user, you should atleast enable built in Windows Defender, Windows Firewall and smartscreen. These are efficient and doesn't impact the performance much. They probably did in the past because of bugs but I've read most Windows 10 bugs are fixed by now.
 
Joined
Feb 13, 2017
Messages
1,465
Operating System
Windows 10
Antivirus
Emsisoft
#14
Primary, but I have not been infected for years, so it is working for me. But I would not recommend it to others, obviously. ;)
I think that sometimes you should scan the system at least with Zemana Anti-Malware to have a reasonable opinion that your computer is really malware free.
 
Joined
Feb 13, 2017
Messages
1,465
Operating System
Windows 10
Antivirus
Emsisoft
#17
My tweaks, not sure if it allowed to post it here, link to pastebin is on my profile. I turn off computer with CCleaner (to clean temps/caches, which might contain something) + my tweaks, which remove all startup entries (plus a few more things) and restore all settings, if changed by Windows or anything nasty.
Making registry hacks doesn't guarantee a reliable protection system to your OS. Because with this config you are not secure on all layers. On Windows 10 I would at least enable WD and as I said also Zemana or VoodooShield (avalaible also in freeware version) or maybe you can use Shadow Defender for a ghost session.