- Jul 2, 2020
- 306
This is my setup...any advice would be great
ZeePriest's Security Config 2020
- Thread starter ZeePriest
- Start date
- Jan 14, 2015
- 1,761
Please explain reasons behind such suggestion. Without such details users who ask for feedback will not understand why suggestions are being made. This can also result in posts being removed.Please set UAC to maximum and Windows Updates to automatic installation
- Jun 14, 2011
- 1,861
Are you using McAfee and EAM both in realtime?
- Apr 28, 2015
- 8,916
@ZeePriest: full overkill in real-time protection 
:
Also overkill in browser add-ons...
About the need (or not) of setting UAC to max/always notify:
www.bleepingcomputer.com
daniels-it-blog.blogspot.com
So finally is the OP decision...
:Also overkill in browser add-ons...
About the need (or not) of setting UAC to max/always notify:
Bypassing Windows 10 UAC with mock folders and DLL hijacking
A new technique uses a simplified process of DLL hijacking and mock directories to bypass Windows 10's UAC security feature and run elevated commands without alerting a user.
UAC bypass via dll hijacking and mock directories
UAC UAC Bypass dll hijacking mock folders Daniel Gebert SRP Software Restiction Policies dll hijacking Windows 10
daniels-it-blog.blogspot.com
So finally is the OP decision...
- Jul 2, 2020
- 306
Hi Harlan, do you suggest that I remove emsisoft and its browser extension? What else should I be doing in my case? Thanks for your feedback btw@ZeePriest: full overkill in real-time protection
Also overkill in browser add-ons...
About the need (or not) of setting UAC to max/always notify:
Bypassing Windows 10 UAC with mock folders and DLL hijacking
A new technique uses a simplified process of DLL hijacking and mock directories to bypass Windows 10's UAC security feature and run elevated commands without alerting a user.
UAC bypass via dll hijacking and mock directories
UAC UAC Bypass dll hijacking mock folders Daniel Gebert SRP Software Restiction Policies dll hijacking Windows 10
So finally is the OP decision...
- Jul 2, 2020
- 306
I've downloaded emsisoft's trial 2 days ago for the first time just to see how it works on my machine along with mcafee internet security and I haven't had any issues or conflicts until now. Do you suggest that I uninstall emsisoft?
- Apr 28, 2015
- 8,916
You have to select one, not recommended to have 2 (or more) security solutions in real-time in the system...
- Sep 8, 2019
- 461
Running two antiviruses are never a good idea, they will just cause system slowdowns and will actually decrease the protection you get due to conflicts, I would honestly just stick to windows defender and do occasional scans with Malwarebytes, hitmanpro, emsisoft emergency kit etc, you can try out ConfigureDefender to get the most out of WD
- Apr 28, 2015
- 8,916
About browser add-on You may keep very simple: Ublock Origin + Emsisoft Browser Security...
- Jul 2, 2020
- 306
I've taken your suggestions and uninstalled emsisoft. Is it okay to keep voodooshield or does it have to go also? and can I stick with Mcafee webAdvisor instead of emsisoft browser security? which one is better? I hope i'm not asking too many questions
I don't know why you remove my comment (now second time) but I don't make anything wrong. I just do the same like other user's here: help with recommend settings/ tweaks.
Yes I could provide links about why harden that and these settings is important so sorry for that and here about UAC:
Bypassing Windows 10 UAC with mock folders and DLL hijacking
A new technique uses a simplified process of DLL hijacking and mock directories to bypass Windows 10's UAC security feature and run elevated commands without alerting a user.
UAC bypass via dll hijacking and mock directories
UAC UAC Bypass dll hijacking mock folders Daniel Gebert SRP Software Restiction Policies dll hijacking Windows 10
daniels-it-blog.blogspot.com
- Aug 17, 2014
- 11,128
As your Antivirus is now only McAfee, just keep McAfee Web-Advisor it works together with McAfee Internet Security.I've taken your suggestions and uninstalled emsisoft. Is it okay to keep voodooshield or does it have to go also? and can I stick with Mcafee webAdvisor instead of emsisoft browser security? which one is better? I hope i'm not asking too many questions
- Jul 2, 2020
- 306
I find protonVPN to be great and stable but I prefer windscribe as it has a much simpler interface
Last edited:
- Jul 2, 2020
- 306
Is Vodooshield necessary or will it cause any conflicts with Mcafee?
- Apr 28, 2015
- 8,916
In general and apriori, having a full security suite already installed would not be not necessary, but VS adds additional layers of protection, You may keep it and check if no issues/slowdowns in Your system...
- May 1, 2015
- 314
- Aug 17, 2014
- 11,128
I don't know about that to be really sure
You should better asking to the developer of VoodooShield @danb he will reply to your questions...
- Dec 23, 2014
- 8,514
@ZeePriest,
You are using VS so you probably do not mind informative alerts. The UAC on max gives you additional information as compared to lower settings, which can be crucial for Windows security (UAC bypasses). So, I would also advise you to use the UAC max setting.
I am not sure if this particular config requires the UAC highest level setting, but the config may change in the future (it is overkill).
For example, the "Allways notify" setting is required to stop the popular UAC bypasses based on abusing Microsoft trusted binaries with the ability to auto elevate on Admin account. See for example:
www.fortinet.com
You are using VS so you probably do not mind informative alerts. The UAC on max gives you additional information as compared to lower settings, which can be crucial for Windows security (UAC bypasses). So, I would also advise you to use the UAC max setting.
I am not sure if this particular config requires the UAC highest level setting, but the config may change in the future (it is overkill).
For example, the "Allways notify" setting is required to stop the popular UAC bypasses based on abusing Microsoft trusted binaries with the ability to auto elevate on Admin account. See for example:
Offense and Defense – A Tale of Two Sides: Bypass UAC | FortiGuard Labs
Read the latest installment of the blog series, "Offense and Defense - A Tale of Two Sides," for an analysis of the Bypass User Account Control (UAC) attack technique.…
Last edited:
- Apr 28, 2015
- 8,916
@ZeePriest: please edit Your config and reflect the latest changes, thanks
Similar threads
