Results 1 to 9 of 9

Thread: Recommended Win7 security settings/apps ?

  1. #1
    Member
    Join Date
    Aug 2009
    Posts
    165
    Thanks
    1
    Thanked
    11 times in 11 posts
    • rushholme's system
      • Motherboard:
      • Asus Sabertooth 55i
      • CPU:
      • i5 760 @ 4ghz
      • Memory:
      • 4GB 1600mhz DDR3
      • Storage:
      • OCZ Vertex 2
      • Graphics card(s):
      • GTX 460 1gb
      • PSU:
      • 650W Coolermaster
      • Operating System:
      • Win7 64
      • Internet:
      • 20MB

    Recommended Win7 security settings/apps ?

    I have Avira Antivir Classic and Malwarebytes (on demand) plus Comodo firewall with HIPS.

    UAC is at default settings and I have disabled all services I don't use, including UPNP and almost all networking bar TCP/IP.

    Anything else I should be doing? Is it worth bothering with sandboxes or something else?

    Is there any further hardening I could do?

    The PC is an all usage, multi-user multimedia/gaming rig with Windows 7 64-bit.

    Cheers all!

  2. #2
    Senior Member
    Join Date
    Aug 2005
    Posts
    1,527
    Thanks
    18
    Thanked
    75 times in 62 posts
    • lodore's system
      • Motherboard:
      • X570 AORUS MASTER
      • CPU:
      • Amd Ryzen 5900x
      • Memory:
      • 32GB DDR4 2666 Mhz
      • Storage:
      • 1TB Gigabyte AORUS 7000s SSD and sandisk 1tb sata 3
      • Graphics card(s):
      • EVGA 1080TI 11gb
      • PSU:
      • Ion+ 860W
      • Case:
      • Corsair 4000D AIRFLOW
      • Operating System:
      • Windows 10 pro 64bit
      • Monitor(s):
      • Iiyama 34inch ultra wide quad HD 144hz and 24inch asus HD
      • Internet:
      • 80Mbps Zen

    Re: Recommended Win7 security settings/apps ?

    Hello,
    first off you shouldnt need to disable services in 7 since the services will start when needed and stop when they arent. so called "trigger services" i never disable services because it can ccause problems later and then you forget which ones you changed etc.

    most sandboxes wont work with 64bit due to patchguard.

    btw antivirus classic doesnt have spyware protection. im not sure how good defender is with spyware.

    what user accounts are you using?

    ideally one admin account and the rest as standard user. if a program needs admin rights you should get a uac prompt to temporary give admin rights.

    what browser/browsers are you using?
    Last edited by lodore; 01-10-2009 at 11:14 PM.

  3. #3
    Senior Member
    Join Date
    Feb 2008
    Posts
    914
    Thanks
    4
    Thanked
    155 times in 143 posts
    • smargh's system
      • Motherboard:
      • Gigabyte GA-EP45-UD3P
      • CPU:
      • Xeon E5450 with 775-to-771 Mod
      • Memory:
      • 16GB Crucial
      • Storage:
      • Intel X25-M G2 80GB/Adaptec 3405 4x 2TB Ultrastar RAID1 / 1x 6TB Hitachi He6 / Dying 2TB Samsung
      • Graphics card(s):
      • GTX 750 Ti
      • PSU:
      • Seasonic X-560
      • Case:
      • Lian-Li PC-A71
      • Operating System:
      • Windows 7 Ultimate 64bit
      • Monitor(s):
      • BenQ G2400WD
      • Internet:
      • Really Crap ADSL2 <3Mbit

    Re: Recommended Win7 security settings/apps ?

    Mandatory Firefox+NoScript+Adblock

    The new MS Security Essentials is quite nice and quite effective. I use Malwarebytes with the Active Protection which is not obtrusive at all and doesn't slow anything down. Only the "IP Protection" is crap - it gives a lot of false positives, but it can be disabled.

    Windows Defender is a turd. Forget about it.

    On a multi-user system it'll only be as secure as the most computer-illiterate person though - one wrong click or running a dodgy .exe will bugger everything up.

    My mother uses UAC on full on her Win7 HTPC and they never get a UAC prompt except when I go on it to change some settings or update an app.

    What do you actually use the Comodo for, exactly? Does it alert you when unknown apps try connecting to the net? What about if malware starts a background IE process to do C&C - does it prevent that? What's wrong with the built-in Win7 firewall?

    I've been trying Sandboxie, but it'll still allow malware to run and grab any saved passwords to send off to their Chinese or Russian masters unless it's specifically configured otherwise.

  4. #4
    Member
    Join Date
    Aug 2009
    Posts
    165
    Thanks
    1
    Thanked
    11 times in 11 posts
    • rushholme's system
      • Motherboard:
      • Asus Sabertooth 55i
      • CPU:
      • i5 760 @ 4ghz
      • Memory:
      • 4GB 1600mhz DDR3
      • Storage:
      • OCZ Vertex 2
      • Graphics card(s):
      • GTX 460 1gb
      • PSU:
      • 650W Coolermaster
      • Operating System:
      • Win7 64
      • Internet:
      • 20MB

    Re: Recommended Win7 security settings/apps ?

    Antivir Classic has ALL the protection of Premium, bar "webguard", backups, rescuesystem and spam controls. Nothing I need there.

    I use an admin account but get UAC popups.

    I have a hosts file, noscript, but not addblock. Do I need it?

  5. #5
    Member
    Join Date
    Aug 2009
    Posts
    165
    Thanks
    1
    Thanked
    11 times in 11 posts
    • rushholme's system
      • Motherboard:
      • Asus Sabertooth 55i
      • CPU:
      • i5 760 @ 4ghz
      • Memory:
      • 4GB 1600mhz DDR3
      • Storage:
      • OCZ Vertex 2
      • Graphics card(s):
      • GTX 460 1gb
      • PSU:
      • 650W Coolermaster
      • Operating System:
      • Win7 64
      • Internet:
      • 20MB

    Re: Recommended Win7 security settings/apps ?

    Quote Originally Posted by smargh View Post

    What do you actually use the Comodo for, exactly? Does it alert you when unknown apps try connecting to the net? What about if malware starts a background IE process to do C&C - does it prevent that? What's wrong with the built-in Win7 firewall?
    .
    Comodo is designed to counter just the scenario you mention.

    Unknown processes can't modify memory in other apps etc, etc.

    All programs have to ask for net access if they are "unknown" to Comodo

    This is where I found out about it:http://www.matousec.com/projects/pro...ge/results.php

    Zone Alarm Free scores 11% in these tests. Comodo Free 97%.

  6. #6
    The late but legendary peterb - Onward and Upward peterb's Avatar
    Join Date
    Aug 2005
    Location
    Looking down & checking on swearing
    Posts
    19,378
    Thanks
    2,892
    Thanked
    3,403 times in 2,693 posts

    Re: Recommended Win7 security settings/apps ?

    Use an account with non-admin privileges for your daily computing - only use admin for administration tasks.

    Set up ypur machine behind a NAT router.

    Be circumspect about the web sites you visit and the e mail you receive.
    (\__/)
    (='.'=)
    (")_(")

    Been helped or just 'Like' a post? Use the Thanks button!
    My broadband speed - 750 Meganibbles/minute

  7. #7
    Senior[ish] Member Singh400's Avatar
    Join Date
    Jun 2008
    Posts
    2,933
    Thanks
    136
    Thanked
    310 times in 247 posts

    Re: Recommended Win7 security settings/apps ?

    Just built-in stuff with Windows 7 really. Only thing I've really added is custom HOSTS file, Spybot, Spywareblaster and Microsoft Security Essentials.

    The built-in firewall is more than enough and UAC is awesome at stop random ****.

  8. #8
    Member
    Join Date
    Aug 2009
    Posts
    165
    Thanks
    1
    Thanked
    11 times in 11 posts
    • rushholme's system
      • Motherboard:
      • Asus Sabertooth 55i
      • CPU:
      • i5 760 @ 4ghz
      • Memory:
      • 4GB 1600mhz DDR3
      • Storage:
      • OCZ Vertex 2
      • Graphics card(s):
      • GTX 460 1gb
      • PSU:
      • 650W Coolermaster
      • Operating System:
      • Win7 64
      • Internet:
      • 20MB

    Re: Recommended Win7 security settings/apps ?

    Quote Originally Posted by peterb View Post
    Use an account with non-admin privileges for your daily computing - only use admin for administration tasks.

    Set up ypur machine behind a NAT router.

    Be circumspect about the web sites you visit and the e mail you receive.
    So I should set up a limited account.

    I use a NAT router.

    Unfortunately we are not circumspect about visiting web sites, but noscript should sanitize them?

  9. #9
    Senior Member
    Join Date
    Mar 2005
    Posts
    4,825
    Thanks
    161
    Thanked
    358 times in 288 posts
    • badass's system
      • Motherboard:
      • ASUS P8Z77-m pro
      • CPU:
      • Core i5 3570K
      • Memory:
      • 32GB
      • Storage:
      • 1TB Samsung 850 EVO, 2TB WD Green
      • Graphics card(s):
      • Radeon RX 580
      • PSU:
      • Corsair HX520W
      • Case:
      • Silverstone SG02-F
      • Operating System:
      • Windows 10 X64
      • Monitor(s):
      • Del U2311, LG226WTQ
      • Internet:
      • 80/20 FTTC

    Re: Recommended Win7 security settings/apps ?

    Keep the bird off your PC.
    In fact keep everyone else off your PC.
    "In a perfect world... spammers would get caught, go to jail, and share a cell with many men who have enlarged their penises, taken Viagra and are looking for a new relationship."

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Replies: 6
    Last Post: 08-11-2007, 05:22 PM
  2. Instance Walkthrough Guide
    By ERU in forum PC
    Replies: 1
    Last Post: 28-04-2005, 10:35 PM
  3. Have you done all of your windows updates ?
    By Moby-Dick in forum General Discussion
    Replies: 33
    Last Post: 05-05-2004, 01:23 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •