So whats the defacto software for a secure Windows setup nowadays?

[blackangst1]

(in before "Use Linux" )

First let me say Ive not really had a problem with rootkits, viruses, or anything. I do a pretty good job of safe surfing. With that said, Ive always used an AV suite from one of the big boys (McAfee, Norton, etc) plus malwarebytes pro. Thats it. Still a good setup? Or is there another piece I should be adding?

 

[Fokks]

Those work, and I would add Microsofts EMET (currently 5.2)

https://technet.microsoft.com/en-us/security/jj653751

Once installed, click "Import" and select the "Popular Software" xml file to add its recommended protections to apps like Chrome, 7zip, etc., and then you're done.

 

[Ketchup]

Your safe browsing habits are #1.

I don't think there has ever been a version of McAfee that I liked.

Norton used to be just as bad, but there versions since '07 have been pretty good (light and less vulnerable).

The key with the big versions (N&M) is that you want to upgrade them every year. Why? The biggest names in AV are the biggest targets for hackers looking for vulnerabilities.

AVG is still good, but not as light as it used to be.

No doubt berry will be here soon with his list, so I will leave it at that.

 

[Chiefcrowe]

I'd also throw in Malwarebytes.

 

[John Connor]

If you use Firefox or a Mozilla variant use the extension NoScript. To lessen the cumbersomeness either disable the addon for basic protection (it will ask you) or allow base 2nd level domains by default. I use Sandboxie which runs my browser in a virtual enviroment, but allow access to the profile folder at reduced security. And I use Bitdefender Free. It's cloud based, light weight and no bloat. You won't even know it's there.

Check all downloaded files at Totalvirus.com

Every now and then I scan the computer with SuperAntiSpyware, Malwarbytes, ADwcleaner, TDSSkiller, Junkware remover, Herdprotect and a software that scans for government crap. If I have something I need to get rid of which is most likely a PUP from a downloaded program I will use Autoruns, Freefixer and Hijackthis.

Emsisoft Emergency Kit is another scanner I have.

 

[sourceninja]

Honestly, I mostly just avoid downloading untrusted software, read security blogs, keep my self patched, use an industry standard anti-malware, and that's it.

I've not gotten a virus in years with that strategy.

 

[blackangst1]

I'd also throw in Malwarebytes.

As my post says, Im using the Pro version.

Thanks for the feedback guys. Looks like Im OK.

 

[Chiefcrowe]

Sorry, missed that. Also I heard that Malwarebytes Antiexploit is a good browser defender but I haven't tested it yet. There are also programs that you can get to protect against those cryptolocker+variant viruses that could be worth looking into.

As my post says, Im using the Pro version.

Thanks for the feedback guys. Looks like Im OK.

 

[John Connor]

Sorry, missed that. Also I heard that Malwarebytes Antiexploit is a good browser defender

Had nothing but problems with it. Might be my configuration.

 

[Chiefcrowe]

What did you experience? I haven't tested it out yet.

Had nothing but problems with it. Might be my configuration.

 

[Elixer]

Honestly, I mostly just avoid downloading untrusted software, read security blogs, keep my self patched, use an industry standard anti-malware, and that's it.

I've not gotten a virus in years with that strategy.

And also disable flash, the #1 attack vector.

 

[Eelectricity]

And also disable flash, the #1 attack vector.

Very true and shocking how ubiquitous flash is. Definitely shut it off and remove it and don't let it back. Sites and authors need to change too.

 

[sourceninja]

Very true and shocking how ubiquitous flash is. Definitely shut it off and remove it and don't let it back. Sites and authors need to change too.

I would if I could, instead I have to whitelist sites that I need flash for. Luckily it's a dying toolkit.

 

[TheRyuu]

If you use Firefox or a Mozilla variant use the extension NoScript.

You can probably get a better user experience by using NoScript set to allow scripts globally (also delete the internal whitelist) and use uMatrix for the actual blocking stuff. The matrix view is much more intuitive than the NoScript menu. Using both this way still gets you some of the other protections that NoScript provides.

 

[John Connor]

What did you experience? I haven't tested it out yet.

Been awhile, but I think what would happen is it just wouldn't run right and the icon would disappear in the task bar. Like I said, I think it's my configuration or perhaps Bitdefender doesn't like it. I do know Bitdefender blocks debugging mode for apps so that is a problem.

I might try Anti-exploit on another computer and see what happens.