Welcome, Guest. Please login or register.
October 12, 2008, 12:52:58 AM

Login with username, password and session length

199502 Posts
22906 Topics
54978 Members

Latest Member: ravendruid1

Search:     Advanced search | Tag Cloud
+  Welcome to the Comodo Forum
|-+  Learn about Computer Security and Interact with Security Experts
| |-+  Anti Virus/Malware Products/Other Security products
| | |-+  My new security setup
« previous next »
Pages: [1] 2 Go Down Print
Author Topic: My new security setup  (Read 2340 times)
secureme
Comodo Family Member
***
Offline Offline

Posts: 59


COMODO secured


« on: April 04, 2008, 10:26:02 AM »

Installed CFP3 w/ Defense+, BOclean and Avira PE Premium into my XP Pro (SP2) system today.  I am running them along with CounterSpy v2 in realtime and everything is running great!  All the installs went without incident and have had no conflicts!  All I can say is so far Comodo rocks! Learning the ropes now on all the settings to try.  Heck the Comodo Malware scan before the install even found 1 Malware on it (and that was with KIS 7 previously running on system).

As a newbie with this setup, I'm open to any "settings" suggestions the experts here might have.

BTW, I've also run the above setup "Sandboxied" with no issues either.  Bounce

« Last Edit: April 04, 2008, 10:27:43 AM by secureme » Logged
axl
Comodo's Hero
*****
Offline Offline

Posts: 300


Thread Assassin


« Reply #1 on: April 04, 2008, 02:42:22 PM »

Installed CFP3 w/ Defense+, BOclean and Avira PE Premium into my XP Pro (SP2) system today.  I am running them along with CounterSpy v2 in realtime and everything is running great!  All the installs went without incident and have had no conflicts!  All I can say is so far Comodo rocks! Learning the ropes now on all the settings to try.  Heck the Comodo Malware scan before the install even found 1 Malware on it (and that was with KIS 7 previously running on system).

As a newbie with this setup, I'm open to any "settings" suggestions the experts here might have.

BTW, I've also run the above setup "Sandboxied" with no issues either.  Bounce
There is some debate on whether BOClean is even necessary with today's AVs trying to cover all the bases...
With a superior AV soft such as Avira Premium IMO it may be overkill to also have BOClean...
CounterSpy I used for half a year... very unlikely than Avira Premium would miss something dangerous that CounterSpy would be able to catch.

IAC, With D+, why do you feel the need to have all these extra apps bogging down your cpu?
Logged
Ragwing
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 3115


Sailor Warrior of Love and Justice


« Reply #2 on: April 04, 2008, 04:11:17 PM »

Greetings!

Installed CFP3 w/ Defense+, BOclean and Avira PE Premium into my XP Pro (SP2) system today.  I am running them along with CounterSpy v2 in realtime and everything is running great!

With CFP 3 and Defense+ enabled, you don't really need anything more, but keep Avira. You should be fine without BOClean and CounterSpy. Maybe add CMF (Comodo Memory Firewall) until it's integrated in CFP 3.
I also suppose that your using either Firefox with NoScript (and Adblock Plus) or Opera instead of Internet Explorer?

BTW, I've also run the above setup "Sandboxied" with no issues either.  Bounce

Are you running your security softwares sandboxed? Wouldn't the database files get wiped when you clear it?

Cheers,
Ragwing
Logged



XP SP3 2 GHz 768 MB RAM
5 services / 12 processes
grayhair
Comodo Loves me
****
Offline Offline

Posts: 177


« Reply #3 on: April 04, 2008, 07:39:23 PM »

   I am no "expert" by any stretch of the imagination.  I run CFP3, Avira free, and run various other scans at least once a week (Spybot, the CFP scan that resides on the Defense + page, Adaware [which doesn't find much any more], clean out cookies, temp files, disc cleanup, etc.).  I keep the Microsoft Updates current.  Almost everytime the dipstick comes up dry for any malware.  I run CFP Custom Policy mode for firewall, and Paranoid mode for D+, and I actually take the time to read the CFP popups.
   Good luck, and you made the right choice with CFP

 Comodo Rocks
Logged
00hmh
Comodo Member
**
Offline Offline

Posts: 45


« Reply #4 on: April 04, 2008, 11:22:02 PM »

On the contrary to opinion above, I think BOClean is an excellent addition.  It's lite on resources, it's a program that will stop the bad guys who you may have carelessly allowed to operate.  It helps greatly with zero day exploits, or oldies that may have been disguised. 

If you look at cost benefit, it seems very cheap for a last line of defense before execution of a malware.

Precisely because it has a different mechanism of protection I like it.  I don't see how you can have too many layers of protection unless they conflict or in total use too many resources. 

D+/CPF cover a lot of bases but do allow human error and do NOT guard against threats that may have been on your machine before you added that powerful layer of protection.  Avira or any good scanner for malware might spot the bad guys that are missed, but there is a delay until the scan or the update of the database.  BOC often catches oldies packaged in new form and has value if for no other reason.     
Logged
Eric Cryptid
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 1090


Security Saskquatch


« Reply #5 on: April 05, 2008, 02:32:27 AM »

IMO - BoClean is absolutely necessary even with a decent AV.

I use to use Antivir PE Premium until last month when my subscription ran out so I'm using free avast these days.

At any rate, BOClean caught and removed a Trojan from my system even before Antivir was able to catch it. I was installing a free accounts software called EasyCash and it put a Trojan in my temp directory. At any rate, BoClean stopped Easy Cash from installing while Antivir detected nothing. (See my BOCLEAN saved the day Post in the BoClean Topic)
Logged

Cryptid - Any animal or creature that has been reported to have existed, but has not been proven to.

Security Fanatic

Please Read Forum Policy Before Posting - https://forums.comodo.com/new_member_information/forum_policy-t1516.0.html
secureme
Comodo Family Member
***
Offline Offline

Posts: 59


COMODO secured


« Reply #6 on: April 05, 2008, 02:47:17 AM »

Greetings!

With CFP 3 and Defense+ enabled, you don't really need anything more, but keep Avira. You should be fine without BOClean and CounterSpy. Maybe add CMF (Comodo Memory Firewall) until it's integrated in CFP 3.
I also suppose that your using either Firefox with NoScript (and Adblock Plus) or Opera instead of Internet Explorer?

Are you running your security softwares sandboxed? Wouldn't the database files get wiped when you clear it?

Cheers,
Ragwing

With the suggestions I have gathered here, I have made the following adjustments to my "real time" set-up...

CFP3 w/Defense+
Avira PE Premium
BOclean
Comodo Memory Firewall
Comodo Verification Engine

On demand as needed...

Sandboxie
Returnil
ShadowDefender

Well?  Opinions?
Logged
Ragwing
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 3115


Sailor Warrior of Love and Justice


« Reply #7 on: April 05, 2008, 07:18:43 AM »

CFP3 w/Defense+
Avira PE Premium
BOclean
Comodo Memory Firewall
Comodo Verification Engine

It looks good.

Sandboxie
Returnil
ShadowDefender

I just done some quick reading about Returnil and Shadow Defender. Both seems to be virtualization softwares. It's a waste to have two virtualization softwares. Also, Sandboxie is not necessary if you're running your PC in a virtualization mode.

Cheers,
Ragwing
Logged



XP SP3 2 GHz 768 MB RAM
5 services / 12 processes
secureme
Comodo Family Member
***
Offline Offline

Posts: 59


COMODO secured


« Reply #8 on: April 05, 2008, 11:24:59 AM »

It looks good.

I just done some quick reading about Returnil and Shadow Defender. Both seems to be virtualization softwares. It's a waste to have two virtualization softwares. Also, Sandboxie is not necessary if you're running your PC in a virtualization mode.

Cheers,
Ragwing

Yeah, you're right.  Returnil shadows your C drive and ShadowDefender shadows all drives and yes I agree with you about Sandboxie.  I'm just one of those guys that likes lots of "toys" to play with.   Nerd Laugh

Comodo and their many offerings here have actually made security fun!   Bounce
Logged
andyman35
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 629


« Reply #9 on: April 05, 2008, 01:36:09 PM »

You certainly have a secure set up there,it's extremely unlikely your system would be compromised with that little lot running. Cheers

Also I agree that security can be fun,CFP offers loads of tweaking potential.  Bounce
« Last Edit: April 05, 2008, 01:38:11 PM by andyman35 » Logged
Luketan
Computer Security Testing Group
Comodo Loves me
*****
Offline Offline

Posts: 194


« Reply #10 on: April 06, 2008, 02:51:33 AM »

With the suggestions I have gathered here, I have made the following adjustments to my "real time" set-up...

CFP3 w/Defense+
Avira PE Premium
BOclean
Comodo Memory Firewall
Comodo Verification Engine

On demand as needed...

Sandboxie
Returnil
ShadowDefender

Well?  Opinions?


Not bad but your setup needs at least one from the following category


"Behavior blocker"

CPF3 Defense+ covers a bit of this (though it is by and large still pretty dumb), while memory firewall covers attempts at bufferoverflows but you are wide open to other attacks.

Particularly for a self-confessed "far from expert", you need to have software with "smarts" built in , so it is highly recommend you add one of these...

Threatfire/Mamutu/Primary Response SafeConnect

Don't get me wrong CPF3 defense+ is not bad, and tries to be "smart" but it is not on the level of TF ...
Logged
secureme
Comodo Family Member
***
Offline Offline

Posts: 59


COMODO secured


« Reply #11 on: April 06, 2008, 03:15:26 AM »

Any conflicts with TF?
Logged
andyman35
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 629


« Reply #12 on: April 06, 2008, 07:50:03 PM »

Any conflicts with TF?

There shouldn't be any issues with running Threatfire and CFP together,to its credit I've run CFP alongside numerous other security apps,in various configurations  with very few conflicts.
Logged
Luketan
Computer Security Testing Group
Comodo Loves me
*****
Offline Offline

Posts: 194


« Reply #13 on: April 07, 2008, 11:31:40 AM »

It looks good.

  Also, Sandboxie is not necessary if you're running your PC in a virtualization mode.

Cheers,
Ragwing

Not necessarily. While in shadow/virtualization mode, you are almost sure of a 100% recovery to a clean state, it does not give you assurance that malware running during the shadow/virtualization mode can't hurt you.

For instance, imagine some exploit (that would have being blocked by sandboxie), installing a keylogger. Sure, once you reset out of virtual mode, the keylogger is gone, but while the keylogger is running it can log your passwords and send it off....

Retunril and company are good, but you still cannot neglect the threat that malware brings between the clean states...
« Last Edit: April 07, 2008, 11:33:21 AM by Luketan » Logged
secureme
Comodo Family Member
***
Offline Offline

Posts: 59


COMODO secured


« Reply #14 on: April 07, 2008, 01:39:09 PM »

<update>
With the suggestions I have gathered here, I have made the following adjustments to my "real time" set-up...

CFP3 w/Defense+
Avira PE Premium
BOclean
Comodo Memory Firewall
Comodo Verification Engine
ThreatFire

On demand as needed...

Sandboxie
Returnil
ShadowDefender

Well?  Opinions?



TF added w/no conflicts so far.

« Last Edit: April 07, 2008, 01:40:58 PM by secureme » Logged
Tags:
Pages: [1] 2 Go Up Print 
« previous next »
Jump to:  

SSL Firewall
Page created in 0.167 seconds with 19 queries.
Powered by SMF 1.1.5 | SMF © 2006, Simple Machines LLC
Seo4Smf v0.2 © Webmaster's Talks
Design by 7dana.com