EggXpert

* = Paid
+ = advanced users only
^ = no 64bit support
# = XP Only
% = Vista Only

Recommended Active Protection
Antivirus (choose 1):
nod32*
Norton Antivirus 2009*
Avira AntiVir
Firewall:
Comodo Internet Security (set on "Firewall Security" configuration)
- set firewall secuity level to safe mode
- set Defender+ level to disabled (set to clean PC mode if you want HIPS protection)
HIPS/BB/Community/UAC - for "zero day" attacks (use 1):
Defense Wall*+
GeSWall+^
Prevx edge*
Threatfire
Norton UAC Tool%
Virtualization / Pseudovirtualization:
Sandboxie^
- browser "pseudo" virtualization
returnil^
- full on demand environmental virtualization (all changes to computer will be reversed upon restart when active)

Recommended On Demand
malware scanners / hardening / cleaning (use all):
Spyware Blaster
a-squared Free
SUPERAntiSpyware
- make sure to disable active protection
Malwarebytes Anti Malware
Kaspersky Online Scanner
misc, scanners and utilities (use all):
SecuniaPSI - checks for old software vulnerabilities and links to appropriate fixes
CCleaner - only use the registry cleaner
AutoRuns - play around with startup programs (only un click what you know)
JkDefrag - better system defragmenting

Browser Essentials
Latest Firefox
Noscript - controls plugins
- to permanently allow a site left click the S on the bottom of the browser and click to allow the website. For most websites that you don't frequent it is good to set the permissions temporary. Also, try to only allow the plugin requests of the direct website
- right click "S" -> options -> notifications -> unclick "show messages about blocked scripts"
CS Lite - controls cookies
- to permanently allow cookies for a website do same as no script except left click the cookie on the bottom. For all websites you don't frequent allow cookies only for session.
- right click "cookie" -> Update Blocklist -> get same menu back up -> CS Lite Options -> BLocklists -> automatically check for updates -> weekly
Web of Trust - Community Site Rating (displayed next to google searches as well)
FEBE - addon packups
- Tools -> FEBE -> FEBE options -> Directory (set directory for backup) -> Schedule (schedule weekly time)
Foxmarks Bookmark Synchronizer - bookmark and password backup

 

 

That is me on that website btw, I left a shoutout in the thread to eggxpert as proof :)

I also changed a few things on this post as well from the original so use this one instead of the one posted up. I also took out the Bob stuff because everyone over in that gaming forum knows me as Bob, so it was a little joke that I was talking in the 3rd person. I didn't think anyone would appreciate it here though :P

Welcome to EggXpert!

Nice write up there.

I see you have other software listed as well. Maybe you could get together with Kunzy and compare notes?

He has a stickied thread in the software area its a downloadable program to.

Great list.

 If I could make a recommendation, I'd add Hijackthis to the list of "on demand" utilities for ADVANCED users.

Hijackthis is really only helpful to trained readers. I don't recommend anyone (even advanced users without training) to be looking through these logs using any of the automatic online log readers, etc. If anyone does happen o stumble on a forum with trained readers, they will tell them step by step instructions of how to get them the hijackthis log as well as instructions to fix the problems that do arise.

It's like programs such as combofix that should only be used in the supervision of trained experts.

I don't see any mention of Spybot Search & Destroy, this is a wonderful classic FREE antispyware application. If not for anything more than its immunize function which inserts a redirect list in the hosts file so that known malware urls redirect and do not infect the user.

 

Also,I second the warning on HiJack This (HJT). There are a lot of infections that hook into the Winsock LSP and if removed using HJT alone will leave the user with a non-functional TCP/IP stack meaning no network abilities at all. On top of that, the creator of HJT, Merijn, says that HJT can possibly render a system useless depending on the malware.

 On the other hand MalwareBytes is an AWESOME AWESOME program.

PedroDaGr8:

 don't see any mention of Spybot Search & Destroy, this is a wonderful classic FREE antispyware application.

"Free"...Yes, "wonderful"...No.  It is an "OK" program, but others surpass it, and not by just a "bit" either.  Couple that with their decision to include TeaTimer by default in the install, instead of leaving it un-checked....and that's a problem for Zero users who no nothing about the system Registry and the entries that TeaTimer pops-up and asks for "permission" to change something; AND it can cause other spyware products problems as well.

No.  MalwareBytes.org and SuperAntispyware.com which are also "free" are superior.

PedroDaGr8:

Also,I second the warning on HiJack This (HJT). There are a lot of infections that hook into the Winsock LSP and if removed using HJT alone ...

Though I agree that there are better tools for that....unless you have a different version, my HJT does not fix LSP.

PedroDaGr8:

 On the other hand MalwareBytes is an AWESOME AWESOME program.

Very much agree....FAR superior to Spybot S&D.

Tallon41

Nice compilation

I used to do all this stuff.  Now I use Windows firewall, because if my computer is clean I won't be getting things going out, and Window's firewall works pretty good. 

I use a antivirus program.  It is stripped down to only realtime email and incoming Internet monitoring, though I suppose it would work if I tried to open a program with a virus within. I do not do routine scans, nor allow it to do non-antiviral functions (malware, spyware) which means I have to have good practices.  Auto updating is on.

I have a bootable standby virus scanner (ClamAV) for emergencies...but I have not found a virus in years.

Only I have access to my computers with the exception of a computer I let my brother use when he is here on weekends. That one is set up with constant monitoring of viruses (AVG), firewall (Comodo) and spyware (Spybot).  And I run a full sweep monthly. Automatic Windows update is turned on this computer, otherwise I download and decide what is updated on my other computers. 

I use Secunia PSI to make sure things are updated on all my computers.

I do not monitor for Spyware realtime on any of my other computers, but sweep every two weeks or so with Spybot, Ad-Aware 2008 (guess its time to update) and  and AVG's anti-spyware features.

I keep track of what gets put on my computer using autoruns, process explorer, and hijackthis.

This keeps my resources and processes down in the 35 range where it belongs (actually many people better than I can keep their's at 22-25 processes). 

Adaware is another good (potentially), free anti-spyware program

I have to disagee about anything Norton, especially their AV (Symantec especially). It takes up waaaaaaaaaaaayyyy too many resources. I don't know about 2009, but in the past I've found it's bad at finding malware. Had to use Symantec for 4 years while at college, and it was horrible

Adaware and spybot s&d areboth outdated and underperformers compared to the three programs I listed.

  As or Norton, they really stepped their game up and made a spectacualar program this year getting rave reviews and great detection results form all the major security testing outlets.

 

-Bob

Added 2 new programs!

The below software has only been tested with Firefox v3.0.6

WOT does not use any system resources, and Linkscanner Lite uses a measly 5mbs of RAM

--------------------

Web of Trust
Firefox Addon

"WOT, short for "Web of Trust," is a community whose members exchange knowledge of websites: Can they be trusted? Are they safe to use? Do they deliver what they promise? If a site has a bad reputation, WOT will warn you - and save you a lot of trouble."

Helps warn users of:

• malware
• browser exploits
• internet fraud
• phishing
• spam
• spyware

video example of how it protects you
Not only does it provide regular community feedback, but it also is connected with a ton of internet databases that are designed to compile potentially dangerous websites. If a website has a dangerous rating for any of the above reasons, a warning will pop up asking if you want to continue ot the page to help keep you safe.

notable persons/company associations:
creator of MySQL, Michael "Monty" Widenius, is an investor and part of the WOT team

----------------------

Linkscanner Lite
Firefox Addon and Stand Alone Client (To Keep database up to Date)

"LinkScanner Lite integrates with major search engines to check search results for a variety of online threats before you click.

LinkScanner Lite also allows you to inspect any hyperlink on the Web, at any time, simply by right-clicking on it. LinkScanner Lite will perform its analysis and return a verdict."

Helps warn users of:

• Exploits
• Hacked pages
• Phishing and fraud scams
• Malicious lure sites

notable persons/companies:
Backed by the makers of AVG Antivirus

 

I only have AVG Free (and Windows Firewall I guess!) Is that a problem?

What is exactly a hijack log? How do you pull that up?

Cut out AVG free and pick up the much better Avira Antivir (free version). Pick up threatfire and leave it at default settings.

 Additionaly, don't forget to use all the on demand scanners as well.

Good list you have there. The only problem is, sometimes Comodo can be a bit irritating to deal with, so you may want to lower the protection setting a bit.