Author Topic: Advice for ultra secure computer?  (Read 3913 times)

0 Members and 1 Guest are viewing this topic.

Tobias4051

  • Guest
Advice for ultra secure computer?
« on: January 11, 2012, 09:30:52 PM »
Hi,

In addition to Avast Free, MBAM free, Windows Defender, and HijackThis, what would you recommend for an extra secure computer?

The pc will have XP sp3 and will be used for online RPG's, logging into email and websites where you want your information to be secure (eg. Ebay etc).
Is there any extra software to help keep login info safe?
Is there a big increase in security by having paid versions of the above programs?

What is your advice?

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89228
  • No support PMs thanks
Re: Advice for ultra secure computer?
« Reply #1 on: January 11, 2012, 09:36:04 PM »
For XP I would get rid of windows defender and you could possibly upgrade to MBAM Pro, one off subscription.

HiJackThis is a bit of a waste of time and space, it hasn't been updated in over 18 months and really ill prepared to search out the hiding places of modern malware.

Personally the best thing you could do is ensure you have a robust backup and recovery strategy, in the form of drive imaging software, that can make a perfect copy of your drive/partitions.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline CraigB

  • Avast Überevangelist
  • Serious Graphoman
  • *****
  • Posts: 11241
  • No support PM's thanks
Re: Advice for ultra secure computer?
« Reply #2 on: January 12, 2012, 07:15:46 AM »
A good firewall wouldn't go astray either on XP, you dont say what browser your using ? Firefox would be the better choice for XP i think with the neccessary addons like no script and ad block.

Also aggree 100% with what DavidR has mentioned  :)

Gargamel360

  • Guest
Re: Advice for ultra secure computer?
« Reply #3 on: January 12, 2012, 07:56:49 AM »
Ultra-secure?

HIPS....something like Mad Mileh's Comodo D+.  That is, provided you how to correctly and safely answer all the deny/allow questions.  And whether you can stomach a HIPS (its not for everybody).

Offline Rednose

  • Pirate Party Member
  • Avast Überevangelist
  • Massive Poster
  • *****
  • Posts: 3739
  • Bits of Freedom : https://www.bof.nl
    • Nederlandstalig Avast! forum
Re: Advice for ultra secure computer?
« Reply #4 on: January 12, 2012, 12:58:29 PM »
Sandboxing Browsers, PDF Readers etc. can provide a good extra layer of protection. The paid versions of Avast have an on-demand Sandbox, or you can use Sandboxie ( the free version has some limitations ).

Greetz, Red.
OS: Win 10 / iOS 17 / Debian 12 / Tails 5
Real Time: Avast Premium Security
On Demand: Malwarebytes
VPN: NordVPN ( NordLynx ) with Threat Protection ( Lite )

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37586
  • Not a avast user
Re: Advice for ultra secure computer?
« Reply #5 on: January 12, 2012, 01:16:12 PM »
Quote
Advice for ultra secure computer?
ultrasecure = disconnected from internet    ;D

Tetsuo

  • Guest
Re: Advice for ultra secure computer?
« Reply #6 on: January 12, 2012, 02:46:16 PM »
Quote
Advice for ultra secure computer?
ultrasecure = disconnected from internet    ;D

:°D

(Sorry for the OT)

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76035
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Advice for ultra secure computer?
« Reply #7 on: January 12, 2012, 06:03:33 PM »
Quote
Advice for ultra secure computer?
ultrasecure = disconnected from internet    ;D

+1 ;)
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

DonZ63

  • Guest
Re: Advice for ultra secure computer?
« Reply #8 on: January 12, 2012, 10:37:38 PM »
Quote
HIPS....something like Mad Mileh's Comodo D+.  That is, provided you how to correctly and safely answer all the deny/allow questions.  And whether you can stomach a HIPS (its not for everybody).
+1

A variation of the "disconnect from the Internet" comment. See if your broadband router supports the following:

1. A "dial-up" feature setting for it's hardware firewall. Works identical to the old phone dial-up connection; when your browser, etc. requests a connection to the Internet, the router will allow the connection. The connection is closed automatically after a set inactivity time. There may be a slight lag in response for the initial connection.

2. Create a "honeypot" on the router to trap any unsolicted inbound connections. On my router you just designate an unused IP address in your DHCP range of available addresses i.e if DHCP assigned range is 192.168.1.1 - 192.168.1.253, I use 192.168.1.253.

Finally create a rule for your software firewall rule to block any outbound DNS(TCP/UDP port 53)to localhost 127.0.0.1 255.0.0.0 to block any DNS rebind attempts.

Oops! Forgot the most important one. Never ever surf with admin rights!!!!!! It akin to posting a red flag on your butt in a bull fighting ring.
« Last Edit: January 13, 2012, 01:46:47 AM by DonZ63 »

ibell63

  • Guest
Re: Advice for ultra secure computer?
« Reply #9 on: January 13, 2012, 04:07:24 PM »
A few things I suggest:

Secunia PSI.  Keeps all your software patched for you, automatically.  It will keep reader, flash, and java up-to-date before their updaters even realize they're out of date.

Google Chrome.  Supports more mitigation technologies than any other web browser.  DEP, ASLR, SEHOP are all supported.  Also chrome uses integrity levels for sandboxing, much like IE's protected mode, and this http://chrome.blogspot.com/2012/01/speed-and-security.html

Consider upgrading to Windows 7.  A lot more mitigation technologies are available and enabled by default.  You can enable more mitigation technologies by downloading Microsoft's EMET (Enhanced Mitigation Experience Toolkit) here http://www.microsoft.com/download/en/details.aspx?id=1677

^^ Some mitigation technologies are not turned on by default for compatibility reasons.  If you turn them on and all of your software works fine, then great, keep those settings.  Just pick the "Maximum Security Settings" profile in EMET and if it doesn't work out, dial it back down to the default profile.  ^^

Adblock Plus.  Whatever browser you use, you should consider Adblock Plus, since a lot of malware spreads through infected advertisements.  There's also a maintained malware domains list for Adblock Plus here, http://adblockplus.org/en/subscriptions Scroll to the bottom.

Finally consider a malware filtering DNS like Norton DNS dns.norton.com or DynDns Internet Guide setup.dynguide.com.

--Ian