Windows 10 - Making a FREE security config?

[LukeNukesEm]

My friend isn't too tech savvy but needs a free security config. I was thinking using:
- sophos home,
-comodo firewall,
-zemana,
-and adding ublock to his browser and have smartscreen to system wide.

Would this be enough for some decent free protection?

 

[Logethica]

Cool ... The permutations for a good "free"security config are almost endless IMO..
I see less reason for a config "not" to be free.

Personally,I would recommend..(as you say that your friend is not too tech-savvy)...
1) Free Isolation - Sandboxie
2) Free Anti-Exe - Voodoo Shield
3) Free AV - Avast, AVG, Avira (and/or Crystal Security)
...Plus (as you said) uBlock Origin

 

[jamescv7]

Sophos Antivirus is fine, the configuration is minimal which will be applicable for inexperience users.

Meanwhile Comodo Firewall even though free but the configuration is so complex that needs supervision.

Why not implement Windows Firewall control from Bininsoft or Tinywall for ease to use.

 

[CMLew]

Enable UAC
Enable PUP/PUA detection in Window Defender
Use only Edge + Chrome Browser w/ ublock origin
Install Evorim Free Firewall
Install Voodooshield Free and turn on Auto-Mode

If paranoid:
Add Toolwiz TimeFreeze (SD Alternative)
Add Cybergenic Shade Sandbox (SB Alternative)
Add MBAE Free or EMET

 

[Deleted member 178]

Cool ... The permutations for a good "free"security config are almost endless IMO..
I see less reason for a config "not" to be free.

Personally,I would recommend..(as you say that your friend is not too tech-savvy)...
1) Free Isolation - Sandboxie
2) Free Anti-Exe - Voodoo Shield
3) Free AV - Avast, AVG, Avira (and/or Crystal Security)
...Plus (as you said) uBlock Origin

if you have 1 and 2 , 3 is not needed

 

[hjlbx]

My friend isn't too tech savvy but needs a free security config. I was thinking using:
- sophos home,
-comodo firewall,
-zemana,
-and adding ublock to his browser and have smartscreen to system wide.

Would this be enough for some decent free protection?

Too much for IT unsavvy user. COMODO firewall no good, Sophos Home no good. Both will cause problems.

* * * * *
These are just options. If the person can't handle NVT ERP, then don't use it.

Actually, for someone who can't tolerate much then Reboot Restore RX or ToolWiz TIme Freeze are good options.

The whole premise is this:

1. Clean install OS
2. Install desired softs
3. Clean-up system using CCleaner and cleanmgr
4. System is clean
5. Install Reboot Restore RX or ToolWiz Time Freeze
6. Don't install any new softs
7. Use external USB flash drive to backup files

* * * * *

• uBlock Origin
• NVT ERP
• Reboot Restore RX (if have HDD - and not SDD) or ToolWiz Time Freeze
  
• Windows Defender
• Windows Smartscreen
• Windows Firewall

You can teach an IT-illiterate person to use NVT ERP (if you already know how it works entirely) within a few hours.

The above config is basic; the most "complex" being NVT ERP - and all freeware.

Reboot Restore Rx = start with clean system, install RR RX, it will take snapshot of clean system, and return system to clean snapshot every time system rebooted.

You just need to teach user to uninstall RR RX prior to W10 cumulative update is installed - or any MBR modifying update (usually large ones).

ToolWiz Time Freeze very simple to use if you don't think guy can handle RR RX.

This config is not difficult to manage...

 

[Sundaram999]

Sophos Antivirus is fine, the configuration is minimal which will be applicable for inexperience users.

Your feedback about Sophos Free makes me happy)))) because I'm using this AV

My friend isn't too tech savvy but needs a free security config. I was thinking using:
- sophos home,
-comodo firewall,
-zemana,
-and adding ublock to his browser and have smartscreen to system wide.

Would this be enough for some decent free protection?

I like your list)))) however I can not say anything about comodo firewall

 

[Logethica]

if you have 1 and 2 , 3 is not needed

I disagree..
The person in question is said to not be "tech savvy" ,in which case the safety net of an AV is a logical addition to the config...even if that AV is Windows Defender.

 

[Deleted member 178]

Sandboxie Free will isolate everything (browser, usb, etc...), VS will be the safeguard in case something will go out (with VS' uses of VT cloud scanners).

So throw in another AV is not absolute necessary.

 

[CMLew]

I disagree..
The person in question is said to not be "tech savvy" ,in which case the safety net of an AV is a logical addition to the config...even if that AV is Windows Defender.

AV while is a logical addition, it could bring false sense of security. Window Defender in this case, I myself would include it but not as a safety net. It's because WD comes in as default, turning/removing it off is bit of hassle which is why i left it there.

By right, we should educate users, especially those non-tech savvy, what are they facing and how running this program can affect you, thus the need (not want) of these protection. By introducing something and saying that it's a safety net, doesn't help.

PS: "safety nets" term are also use in construction industries. If your logical addition is valid, then every worker will have false sense of security and will not wearing any lifeline safety harness because they know it 'safety net will catch them if they fall".

 

[ExoGen CyberSecurity]

Sandboxie for the browser, Windows Defender (+ Smart Screen) and scan from time to time with a second opinion scanner.

Some type of AdBlocker is recommended (uBlock Origin if you ask me).

 

[Soulbound]

Since user is considered perhaps average pc user knowledge and is using windows 10, then built in windows 10 solutions are just fine: Smart Screen, WD, WFW.

No need to over complicate things.
One of my shared systems does not have any bells and whistles nor runs sandboxie etc (just adguard chrome extension), as well as above solutions and is yet to be infected.

If you want to go extra mile, replace AV with a free AV of your choice and thats about it.

COMODO on the other hand might cause headaches eventually so would stay clear of it.

 

[Quassar]

Isolation
1a)Sandboxie - partial sandbox specific program (Browser and other media apps like Mails clients)
1b)VMware Player - Full virtualization system

HIPS/Anti-exe + HIDS
2a)SpyShelter Free HIPS
2b)NVT ERP
2c)WinPatrol

Virus detection:
AV) Sophos Home + Avira boot cd & Malwarebytes.

Firewall
PrivateFirewall

Other:
Firefox with NoScript / RequestPolicy + uBlock Origin

Combo is a little big but is rly light

 

[Ink]

##### Step 1 - Keep it simple.

Avast Free Antivirus, if you have an Avast Account link use your referral URL on their PC to install.

Perform a Custom Install with the following that are highlighted in blue.

Security

• File System shield
• Mail shield
• Web shield
• Software Updater
• Browser Cleanup
• Home Network Security
• SafeZone Browser
• Security browser extension
• SafePrice browser extension

Privacy

• SecureLine VPN
• Passwords

Performance

• Cleanup

Optional (Bundled)

• Ignore Google Chrome software.

Remember to login into Avast from Avast Free to activate it's 365 Free License, and so it's linked to your account to be able monitor it's status (ex. Last updated or Recent detection).


###### Step 2 - Use built-in Windows 10 security features.


On Windows 10 Settings > Update & Security > Disable Periodic Limited Scanning.

The following Windows 10 settings should be left enabled and on default settings.

• Windows Smartscreen
• Windows Firewall
• User Access Control

##### Step 3 - Additional step to prevent PUP/PUA.


Unchecky is a completely free and helps protect the user by automatically un-checking unwanted software that is often bundled with 99% of freeware. Simply download, install and forget and it will update and work in the background.

• Download Unchecky - Keeps your checkboxes clear

##### Step 4 - Free Monthly check-ups with minimal performance impact.

Scan your PC for free on a monthly basis (or leave instructions in Notepad on desktop). Avoid upgrading to the Premium versions with real-time protection, as your PC is currently protected by Antivirus (Avast Free). I can recommend either:

• Zemana AntiMalware (Free Scanning & Removal)
• ESET Online Scanner (Free Scanning & Removal)

 

[LukeNukesEm]

So after reading all your responses I think I am just gonna go with the default windows 10 security settings. Along with VS on autopilot. He wouldn't like virtualization or rollback software. After that I would just tell him to only use edge or chrome and I'll just add ublock origin to both.

 

[Exterminator]

For the "not too tech savvy" user too much will not benefit them in fact it might make things worse.
Personally I would recommend AVAST Free with Windows Firewall.
UAC to Max setting and Smartscreen(system wide) enabled with defender set to "limited Periodic scanning"
One or two on demand scanners as @Spawn posted(ZAM & ESET Online Scanner are very good).
CCleaner which can be taught to the average user in a few minutes & basically back up every time.
uBlock origin and HTTPS Everywhere in their browser.
Voodooshield is a good program for the average user anything else would overwhelm them.

 

[rabnor]

AVAST Free AV/360 Total Security
Window Defender(Enable PUP)
Windows Smartscreen(system wide)
Zemana AntiMalware Free

Chrome/Firefox- uBlock Origin+Ghostery

These are already too much for not too tech savvy person.

***
1. Avoid Microsoft Edge(can't(mostly) detect phishing sites)
2. Don't use AV plugins for Browser
3. Stay away from PORN/Torrent sites

 

[Lucent Warrior]

My friend isn't too tech savvy but needs a free security config. I was thinking using:
- sophos home,
-comodo firewall,
-zemana,
-and adding ublock to his browser and have smartscreen to system wide.

Would this be enough for some decent free protection?

As you can see through out the thread are many "free" suggestions/combinations of. I would like to add, if you really want to help your friend out, concentrate on his back up solutions first. Make sure there are back ups of the full system and also back ups of all his personal files. Teach him to regularly back up his person files, then if something does go wrong, you/he has a fail safe.

 

[DJ Panda]

I would say use Avast or Windows Defender
Make sure Smartscreen is systemwide, UAC to MAX
Add a free on demand scanner like Zemana

 

[Atlas147]

I have a completely free config now comprising of free tools and giveaways which happen quite often on the forum so keep you eyes peeled.

Avast Free (tweak for high security, may cause usability to drop if your friend is not tech savvy)
Zemana AM (giveaway)
MCShield (Free)
HMPA (Free version)

2nd Opinion scanners
Zemana AM (giveaway)
Malwarebytes AM (free)
HitmanPro (free) - so far there aren't any detections by HMP that require a license to remove because avast catches them all.

Also I use the built in windows firewall because I think it's more than enough, plus Comodo firewall is heavy and very intrusive in a sense there are so many pop ups asking for human interaction, not something I would give to a person that is not very tech savvy.