What is your security setup these days?

I think UAC on any level (except disabled) makes everything run at medium integrity level (IL).
OA's Run Safer has more reduced rights than medium IL.

I'm not sure.

 

Right now I've got...

Sandboxie
No Autorun
Bit Defender USB immunizer
Foxit Reader and uninstalled Adobe
Hitman Pro, MBAM
Keriver 1-Click Restore Free
Norton DNS
FF Nightly Plugins: Adblock, NoScript, Ghostery, Https-Everywhere, Request Policy (CSRF protection, might have a small bug w/ Nightly)
Ixquick -Https Search Engine
Xp-Antispy on Recommended Settings


Looking at how to configure Keepass for password protection.

I just set EMET 2.1 to Maximum...Startup slowed down by a minute or two but nothing too drastic.

Proactive Threat Protection was disabled in Symantec Endpoint Protection. It's supposed to protect from 0days but that's what EMET is for right?

Also should USB Immunizer and No Autorun run automatically?

Finally would I be able to play Online MP games with this setup? AmIdoinItRight?

 

As always excellent setup!

icacls deny execute will also follow when you move files from C:\Downloads to D:\Install?

what icacls command did you apply on "D:\Install"?

I haven't tried CHML and REGIL yet.

 

EMET slowed your boot? o_o

Haven't had any slowdowns with EMET...

 

It didn't while it was on recommended settings but when I changed it to maximum settings there definitely a slow down. That was the only change I made. Next time I restart I'll see if it's as long.

Outside of mandatory Symantec I'm trying to keep this as light as possible. Would adding Threatfire or Mamutu be overkill at this point?

 

Strange.

Just updated Comodo.

Mamutu is insanely lightweight... I had it monitored for a while because I don't think it adds too much protection but I didn't know how much resources it used. It uses so little... it's insane.

 

Definitely, slow and not very useful anymore IMO.

 

If you can get your hands on a free Mamutu or if you're willing to pay it's definitely a nice program.

 

RollzRoyce, is there a requirement on the product version? If not, I suggest updating to Symantec Endpoint Protection 12.

 

Thinking of adding mamutu to my setup. I think it might be overkill. I already have sandboxie and CIS and norton DNS. I really don't think mamutu will add anything else.

 

i feel good now

 

I'm glad that I could help. .

Thanks.

 

added mamutu to my existing setup very light I must say

 

thanks

 

Yeah I have CIS as well. I don't use Mamutu much but it's so damn light... and I got it for free.

I like that I can monitor applications, I have certain behaviors on certain internet-facing programs blocked and I have them monitored and protected via Mamutu as well as sandboxed by CIS.

I use it more as a system hardening tool than a behavioral blocker.

 

good idea

 

Added mamutu.
We'll see how it goes.

 

Just set all programs up with Mamutu so that anything that hasn't already been explicitly allowed is now explicitly denied.

Setting it to Paranoid mode so I can make sure everything in my system apps is allowed before I block all of their suspicious behaviors as well.

This means that if any program is hijacked or compromised it's limited to only the actions that the legitimate program was allowed, it's denied any other suspicious activities.

 

http://westcoastlabs.com/checkmark/...stResult/?productID=444&techGroupID=27&from=v
is it an antivirus?

 

i got meself a gift and bought Password Depot.

it's not cheap but it's got all the features i want and it's pretty good security-wise:
it's got a virtual keyboard, key-logger and clipboard protection.

 

good choice man

 

trying out Webroot AntiVirus Beta in my xp system

 

tnx m8!

Password Depot passed the tests from the Spyshelter testing app (Anti Test) regarding keylogging and clipboard protection for all auto-type, drag & drop and copy and paste operations.

 

good anti-hack tool

 

SanDBoxie is fun