Advanced Plus Security tharunnamboothiri's PC Security Config

[tharunnamboothiri]

This is my current personal DELL laptop configuration.

 

[Parkinsond]

I would avoid "maintenance" tools.

 

[Jonny Quest]

I would avoid "maintenance" tools.

Or at least in using so many? Windows defrag, Windows Disk cleanup, occasionally cleaning out the temp/%temp% folders (Windows Run) and manually cleaning browser History etc. (I don't have them set to auto clean on browser exit) is where I'm at. Am I missing anything else? Not to hijack a members PC Setup Configuration thread, but just in case it's helpful

 

[harlan4096]

System recovery: Custom EMERGENCY DISK iso made by me with complete system configuration inbuilt.

Why not to use better a full image system back?

 

[tharunnamboothiri]

I would avoid "maintenance" tools.

I know! But based on my usage mode, I need them (Paranoid about left overs)

 

[tharunnamboothiri]

Or at least in using so many? Windows defrag, Windows Disk cleanup, occasionally cleaning out the temp/%temp% folders (Windows Run) and manually cleaning browser History etc. (I don't have them set to auto clean on browser exit) is where I'm at. Am I missing anything else? Not to hijack a members PC Setup Configuration thread, but just in case it's helpful

I know bro, but for many personal reasons, I need to have them! I have ensured that those crap don't connect to internet in any ways though

 

[tharunnamboothiri]

Why not to use bettera full image system back?

Haven't used it before but would give it a try. Thanks for the suggestion!

 

[Jonny Quest]

I know bro, but for many personal reasons, I need to have them! I have ensured that those crap don't connect to internet in any ways though

No problem, friend, we all have to do and use what's in our comfort zone and our circumstances

 

[lokamoka820]

After running PrivaZer, can other cleaners find anything else, based on my knowledge that it is thorough enough compared to anything else?

 

[Divine_Barakah]

I would avoid "maintenance" tools.

Kerish Doctor is reliable.

 

[Parkinsond]

Kerish Doctor is reliable.

Only need to clean temp files monthly after W update; W built-in tool can do the job.
For registry, I do it manually after program uninstall to avoid breaking things.

 

[tharunnamboothiri]

After running PrivaZer, can other cleaners find anything else, based on my knowledge that it is thorough enough compared to anything else?

PRIVAZER does most of the job, but it's lengthy. I mean, I can't run it each time I close my browser, right?

 

[tharunnamboothiri]

Only need to clean temp files monthly after W update; W built-in tool can do the job.
For registry, I do it manually after program uninstall to avoid breaking things.

Which built in Windows tool are you referring to? Disk Cleanup? If so, it's far behind compared to the maintenance tools that I have mentioned.

 

[Parkinsond]

it's far behind compared to the maintenance tools that I have mentioned

To leave some files is better to break things; I have plenty of spare space on SSD

 

[Khushal]

Ah the nice latitude of old days
Never forget what they took from us.
https://x.com/IntCyberDigest/status/2018828258658406698/photo/1

 

[tharunnamboothiri]

tharunnamboothiri's PC Security Config · Setup v2
Updated Oct 4, 2026

What changed

• OS version and support details: NA → IoT Enterprise LTSC Build 26100.ge_release_240331-1435
• User Account Control (UAC): Never notify (disabled) → Always notify
• Smart App Control: Off → Evaluation mode
• Real-time protection: ESET NOD32 Antivirus → Windows Defender Antivirus + Windows Firewall
• Device firewall: Other - Next-generation Firewall (NGFW) → Microsoft Defender Firewall with Advanced Security
• Custom security settings: I use ESET NOD32 Antivirus combined with FORT FIREWALL. Have UAC, SMART APP CONTROL and BITLOCKER DRIVE ENCRYPTION disabled due to personal reasons, although I DON'T recommend anyone try it unless you know exactly what you are doing. → Not specified
• Periodic malware scanners: Bi weekly scans using ESET NOD32 antivirus and MALWAREBYTE'S ANTIMALWARE → Bi weekly scans using Windows Defender and Malwarebyte's Antimalware
• Environment for malware testing: Previously I have been testing but for personal reasons, I am NOT currently a malware tester. → Not specified
• Browsers and extensions: BRAVE with uBlock origin, Internet Download Manager and Bitwarden extensions. Brave has crypto stuff disabled, DNS set to Cloudflare but rest of the configuration is intact. → Google Chrome with UBO Lite, Google Password manager, DNS set to Cloudflare but rest of the configuration is intact.
• Password and passkey manager: Bitwarden (paid version) → Google Password Manager
• Maintenance tools: CCLEANER (with internet access blocked and all the files except the CCleaner64.exe removed), PRIVAZER (paid version), IOBIT DRIVER BOOSTER (paid version), ADVANCED SYSTEMCARE (giveaway version with internet access blocked), GLARY UTILITIES (giveaway version with internet access blocked) → None. Using Windows built in disk cleanup and defragmenter.
• Subscriptions: None → Google AI Pro (formerly Google One AI Premium), Google One Basic 100GB
• Computer specs: Model: DELL Latitude 5290
  Storage: 256GB nVME
  RAM: 12GB DDR4 clocked at 3200Mhz
  GPU: Intel Core i5 7300U → Model: DELL Latitude 5290
  Storage: 256GB Kioxia nVME
  RAM: 12GB DDR4 clocked at 3200Mhz
  GPU: Intel Core i5 7300U
• On-device encryption: Older selection — review required → Windows BitLocker / Device Encryption
• Device sign-in security: Older selection — review required → Windows Hello PIN or biometric sign-in (face / fingerprint / Touch ID)
• Two-factor authentication: Not specified → Ente Auth
• Usage and exposure: Older selection — review required → Visiting familiar websites, Visiting unknown or untrusted websites, Browsing the dark web, Working from home, Making audio/video calls, Opening email attachments, Online shopping and card payments, Logging into my bank account, Downloading software and files from reputable sites, Downloading files from unknown or untrusted sources, Sharing and receiving files and torrents, Gaming, Streaming audio/video content from trusted sites or paid subscriptions, Coding and development
• Feedback preference: Older selection — review required → Detailed suggestions and alternatives welcome

Spoiler: Full setup snapshot

My current setup

• Operating system: Windows 11
• OS version and support details: IoT Enterprise LTSC Build 26100.ge_release_240331-1435
• Real-time protection: Windows Defender Antivirus + Windows Firewall
• File and photo backups: None (Manual offline backups only)
• Device firewall: Microsoft Defender Firewall with Advanced Security
• Browsers and extensions: Google Chrome with UBO Lite, Google Password manager, DNS set to Cloudflare but rest of the configuration is intact.
• Main use of this computer: For home and private use
• On-device encryption: Windows BitLocker / Device Encryption
• Device sign-in security: Windows Hello PIN or biometric sign-in (face / fingerprint / Touch ID)
• Security updates: Allow security updates and latest features
• Update channels: Allow stable updates only
• User Account Control (UAC): Always notify
• Smart App Control: Evaluation mode
• Network firewall: Enabled
• Router and network details: Default GENEXIS router provided by my ISP (ASIANET)
• Periodic malware scanners: Bi weekly scans using Windows Defender and Malwarebyte's Antimalware
• Malware sample testing: I do not participate in malware testing
• Secure DNS: Cloudflare
• Desktop VPN: Proton VPN (free version)
• Password and passkey manager: Google Password Manager
• Two-factor authentication: Ente Auth
• Maintenance tools: None. Using Windows built in disk cleanup and defragmenter.
• Subscriptions: Google AI Pro (formerly Google One AI Premium), Google One Basic 100GB
• System recovery: Custom EMERGENCY DISK iso made by me with complete system configuration inbuilt.
• Usage and exposure: Visiting familiar websites, Visiting unknown or untrusted websites, Browsing the dark web, Working from home, Making audio/video calls, Opening email attachments, Online shopping and card payments, Logging into my bank account, Downloading software and files from reputable sites, Downloading files from unknown or untrusted sources, Sharing and receiving files and torrents, Gaming, Streaming audio/video content from trusted sites or paid subscriptions, Coding and development
• Computer specs: Model: DELL Latitude 5290
  Storage: 256GB Kioxia nVME
  RAM: 12GB DDR4 clocked at 3200Mhz
  GPU: Intel Core i5 7300U
• Notable changes: NA
• Feedback preference: Detailed suggestions and alternatives welcome

Feedback on this setup is welcome.