Basic Security Windows Security

[jetman]

Any comments welcome-

(Perhaps some repetition on Ad blocking, what do you think ?) Some websites do struggle to work properly.

Any other remarks about privacy, security and malware protection welcome- I am always seeking ideas for improvements.

Cheers.

 

[ForgottenSeer 55474]

Hello, I would set UAC to always notify, and you have to add a backup solution, good configuration!

 

[Gandalf_The_Grey]

You can set UAC to always notify to block UAC bypasses.
While I like and use VoodooShield, it's not needed with KIS.
Norton Safe Web is not needed with KIS and it's own extension.
You have No Script, uBlock Origin and AdGuard desktop.
Is AdGuard desktop not enough?
Multiple blockers make it harder to troubleshoot website issues.
uBlock origin can also block scripts in Medium mode if you want that kind of blocking:

Blocking mode

uBlock Origin - An efficient blocker for Chromium and Firefox. Fast and lean. - gorhill/uBlock

github.com

Another form of Medium Mode is discussed here:

New Update - uBlock0rigin in Medium mode for Lighter and Stronger Protection, with Less websites breakage and hassle

Why a seperate thread? I got a few questions of the uB0 settings I posted in Old School's uB0 tips and tricks. In stead of stealing that thread I thought it might be better to create a new thread to explain these settings. I also got a question how to apply this on other browsers, so I left out...

malwaretips.com

 

[oldschool]

You can set UAC to always notify to block UAC bypasses.
While I like and use VoodooShield, it's not needed with KIS.
Norton Safe Web is not needed with KIS and it's own extension.
You have No Script, uBlock Origin and AdGuard desktop.
Is AdGuard desktop not enough?
Multiple blockers make it harder to troubleshoot website issues.
uBlock origin can also block scripts in Medium mode if you want that kind of blocking:

Blocking mode

uBlock Origin - An efficient blocker for Chromium and Firefox. Fast and lean. - gorhill/uBlock

github.com

Another form of Medium Mode is discussed here:

New Update - uBlock0rigin in Medium mode for Lighter and Stronger Protection, with Less websites breakage and hassle

Why a seperate thread? I got a few questions of the uB0 settings I posted in Old School's uB0 tips and tricks. In stead of stealing that thread I thought it might be better to create a new thread to explain these settings. I also got a question how to apply this on other browsers, so I left out...

malwaretips.com

Most definitely to all of the above, especially sort out and simplify your adblocker setup.

 

[harlan4096]

Follow all the already mentioned suggestions, and agree KIS well tweaked or even with TAM on, does not need Voodoo Shield, and more considering You already applied NVT Hardener mitigations...

A DiskImage System BackUp solution is a must...

 

[jetman]

Hey thanks for these comments- they are noted and I will certainly review things in light of this (especially ad-blocking).

Here's some of my own questions and comments-

1. I normally use a 'standard user' account, but have an Admin account as well which I hardly ever log in to. If I install software in my everyday 'standard user' account then I am prompted to enter my admin password. Is this not sufficient protection ? If not, what do i need to do set up my UAC correctly ?

2. Do I really need a disk image solution when I synchronise my important files to a cloud service AND take monthly backups of my data on external hard disks ? If my system crashes I can just re-install Windows and re-load my data (either from my hard drives or the cloud). Its a bit of a nuisance but doesn't take THAT long- maybe a couple of hours.

3. I understand that Kaspersky with Trusted Application Mode may do a similar job to Voodooshield. However, is there any harm in keeping Voodoshield running as well ? Kaspersky is highly popular security software and there may be malware written to specifically bypass it. Whereas Voodoshield is pretty obscure and malware writers are unlikely to make provisions for it.

Thanks !

 

[oldschool]

I understand that Kaspersky with Trusted Application Mode may do a similar job to Voodooshield.

It's just simpler to let KIS do its job. @harlan4096 or other K users can help if you have setup questions. Either trust your software or don't use it.

VS is probably best for those who don't use a full AV suite, like myself.

 

[ForgottenSeer 823865]

Hey thanks for these comments- they are noted and I will certainly review things in light of this (especially ad-blocking).

Here's some of my own questions and comments-

1. I normally use a 'standard user' account, but have an Admin account as well which I hardly ever log in to. If I install software in my everyday 'standard user' account then I am prompted to enter my admin password. Is this not sufficient protection ? If not, what do i need to do set up my UAC correctly ?

Yes if you set UAC at max.
No, if UAC is at default, which is slightly better than nothing, but won't protect much.
Also, avoid install in SUA , if you have a dormant malware on SUA, it may use the elevation created by your installation to gain higher privileges.

2. Do I really need a disk image solution when I synchronise my important files to a cloud service AND take monthly backups of my data on external hard disks ? If my system crashes I can just re-install Windows and re-load my data (either from my hard drives or the cloud). Its a bit of a nuisance but doesn't take THAT long- maybe a couple of hours.

I rather do a 10mn restore of a clean install than a few hours new clean install.
Clean install should be done only when upgrading to a new Win10 build.

3. I understand that Kaspersky with Trusted Application Mode may do a similar job to Voodooshield. However, is there any harm in keeping Voodoshield running as well ? Kaspersky is highly popular security software and there may be malware written to specifically bypass it. Whereas Voodoshield is pretty obscure and malware writers are unlikely to make provisions for it.

What you are doing is like wearing a 2nd condom on top of another in case the first one breaks. If you don't trust Kaspersky, then just use VS only. VS won't add much more security to Kaspersky.
This is beginners belief that in security more is better. That is the opposite, "less but optimized" is better than "more".