Security Setup Advice

Hey guys, I’m new to the Avast forums. I’m not new to the computer security scene or anything like that, so I believe I know most of the obvious safe browsing rules and what not. I was just trying to put together the best, free, non-obtrusive setup I can to protect my (and other) computer(s) from viruses/malware/spam. I’d like to know what you guys think of it so far, and see if you have any good suggestions or advice.

Here’s the setup (so far)…

  • Windows 7 Pro 32bit with automatic updates on
  • Windows Firewall
  • Firefox with automatic updates, Avast plugin
  • Avast 2014 Free edition, Webshield setup to block search.conduit .com and it’s variations (bad experiences there)
  • Malwarebytes’ (free edition)
  • Windows Defender is on, doesn’t seem to interfere with Avast in any way
  • Hostsman set to auto-update my hosts file from Malware Domain List’s host file to block known malicious domains. I could also use this to block ads, however I understand that ads are how most free websites can afford to run, so I’ll leave them unblocked for now.
  • I had been using SecureDNS from Comodo, but had noticed that it interfered with doing searches from the address bar in Firefox. Not a huge deal, but it annoyed me, so I’m looking for an alternative (Does OpenDNS block malicious sites?)

Again, I want the most secure, non-obtrusive setup as possible, preferably with little maintenance. I would like to have this setup running on several of my family/friend’s computers that don’t always know how to protect themselves and avoid trouble while browsing the internet. :wink:

I am missing some things you should have started with…

  • Restricted user account for daily use.
  • Teaching your family/friends about safety
  • A hardware firewall

Hi, you can run your browser in a sandbox. I find sandboxie to be little maintenance. :slight_smile: More info here.http://www.sandboxie.com/
AFAIK it still runs in a free edition.

Alaways have backups, especially of the operating system. :slight_smile: hope that helps.

Here’s some reading material https://blog.avast.com/2013/07/08/security-tips-from-avast-forum-evangelists/ :slight_smile:

  1. All of these people use their own computer and are the only ones who use each computer. I don’t want to make it a pain in the rear for them to use their computer, hence, non-obtrusive. And yes, I realize that sacrifices some security. However, if I wanted the MOST secure system, I’d just tell them to turn off their internet. :stuck_out_tongue:

  2. I have tried teaching them, and they have picked up a lot, but they still need help, and I have a multiple jobs. I help when I can.

  3. These computers are all located in different places, and the reason I was going for free options is because some of them (myself included) have limited income.

Thanks for this suggestion. How is it on system resources?

Thanks for this. I’ve actually already read it, and most of these tips I already knew, but I will refer others to it. :wink:

Windows Defender is worthless and should be replaced with Malwarebytes Pro (works perfectly with avast!) $24.95 1 time fee

OpenDNS will block CryptoLocker’s current random IP address algorithm and prevent infection, at this point in time.

Remove JAVA, remove Flash, and use Google Chrome and it will emulate JAVA and Flash without the vulnerabilities.

Virtualize your browsers! Use avast! Hardened mode!

Sincerely,

J.R. “AutoSandbox Guy” Guthrie

“At this point in time, the Internet should be regarded as an Enemy Weapons System!”

[quote author=stevensoaj link=topic=139223.msg1016518#msg1016518 date=1383780958]

Thanks for this suggestion. How is it on system resources?

Hi, sandboxie on my pcs generally run around 10MB memory. Not much considering most computers today have GB’s of ram. :slight_smile:

HA! Had I known that about OpenDNS, I would have it setup on my company’s network. We just got hit by Cryptolocker. That wasn’t much fun… Also, are you refering only to Umbrella, or the free OpenDNS service?
I used to use chrome, but it seemed to me that conduit had infected more Chrome browsers lately than Firefox, and Java is a requirement anyway. Got a lot of Minecraft players in my circles.
Is the “Virtualize your browsers! Use Avast! Hardened mode!” all one statement? Does Hardened mode virtualize web browsers?

New in avast! 2014 is the Hardened Mode feature (several different levels), which lets users switch on a whitelisting mode to block files from executing when it is unclear whether they are infected or not.

Browser Virtualization is running your browser in a sandbox. I teach high risk users how to do this with avast! Pro (I am not familiar with avast! Free)

Also, from RNfromTN, Sandboxie is another way to virtualize the browser.

Sincerely,

J.R. “AutoSandbox Guy” Guthrie

“At this point in time, the Internet should be regarded as an Enemy Weapons System!”