Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 868642" data-attributes="member: 32260"><a href="https://malwaretips.com/goto/post?id=868394" target="_blank">HarborFront</a>,You have several solutions:<ol>
<li data-xf-list-type="ol">KIS + SysHardener - both on default settings. Good setup for most users. Most convenient. Basic script protection - do not block some scripts run by command-line. 
No false positives or very rare. The lack of information about processes blocked by SysHardener can be sometimes problematic.</li>
<li data-xf-list-type="ol">Tweaked KIS to block script interpreters. Very good if your devices do not require scripts.</li>
<li data-xf-list-type="ol">KIS + TAM. Very good setup. The executable files (including scripts) are additionally protected by TAM. Many false positives for applications and software updates.</li>
<li data-xf-list-type="ol">Tweaked KIS to simulate TAM.</li>
<li data-xf-list-type="ol">KIS on default settings + H_C Windows Security setup (allowed EXE and MSI files). If you use unsigned applications, then the option &lt;Validate Admin C.S.&gt; may be set to OFF. Very good setup if you have devices that have to use scripts (can be whitelisted). The user has to know how to use H_C Logs and adjust the setup by whitelisting the blocked scripts. 
The H_C settings cover additionally the shortcuts and more files with active content, so the malware often cannot use LOLBins.</li>
</ol>You can use VS instead of H_C, although I am not a fan of using two or more 3rd party security solutions on Windows 10.</blockquote>

[QUOTE="Andy Ful, post: 868642, member: 32260"] [URL='https://malwaretips.com/goto/post?id=868394']HarborFront[/URL], You have several solutions: [LIST=1] [*]KIS + SysHardener - both on default settings. Good setup for most users. Most convenient. Basic script protection - do not block some scripts run by command-line. No false positives or very rare. The lack of information about processes blocked by SysHardener can be sometimes problematic. [*]Tweaked KIS to block script interpreters. Very good if your devices do not require scripts. [*]KIS + TAM. Very good setup. The executable files (including scripts) are additionally protected by TAM. Many false positives for applications and software updates. [*]Tweaked KIS to simulate TAM. [*]KIS on default settings + H_C Windows Security setup (allowed EXE and MSI files). If you use unsigned applications, then the option <Validate Admin C.S.> may be set to OFF. Very good setup if you have devices that have to use scripts (can be whitelisted). The user has to know how to use H_C Logs and adjust the setup by whitelisting the blocked scripts. The H_C settings cover additionally the shortcuts and more files with active content, so the malware often cannot use LOLBins. [/LIST] You can use VS instead of H_C, although I am not a fan of using two or more 3rd party security solutions on Windows 10. [/QUOTE]

Verification