[Deja Vu ZXY]

Intro

A lot of people here asking what is the best way to secure ones windows PC, what is the best antivirus out there etc. There is no best for a single person, since we are all different and so are our needs. There have been many threads just showing you different security products, but i haven't seen any of them explaining why or which one should you pick and use.
Software provided here is all freeware

User Levels

There are different kind of users out there, so the security solution varies to each and every one of them. I'll categorise and make 3 groups of users and then explain the security solutions under every one of them. Here i am describing application layer security. This means how to secure your windows PC with applications. There are of course numerous other ways to secure your windows by configuring it with Group Policy options for example, but this here is an application layer security.

Nr 1: Regular User - Users who use their windows PC for activities such as using web browser, mail applications, listening to music, watching movies, etc.
Nr 2: Advanced User - Users who use their windows PC for activities like Regular User, but also using P2P software, installing various other software, tweaking windows etc.
Nr 3: Power User - Users who use their windows PC for activites like Regular User and Advanced User, but also using the PC for software development, deploying servers and all other things you can do with your windows PC.

Security Solutions

Regular User
Spoiler (Click to View)

Security Software:
Antivirus - Microsoft Security Essentials or Avast
Anti-Malware - Malwarebytes

Explanation:
Regular Users are using minimal amount of applications in their everyday life, thus making the attack vector minimal as well (meaning, if you only turn your PC on and off, it is hard to infiltrate it, so if a person uses his/her PC only to listen music or watch movies then it's also hard to get anything malicious in the PC). So using a good antivirus software with default settings is good enough for them. (Very small changes to configuration might be needed)
Anti-Malware is needed to regularly scan system for potential threats antivirus might have missed.



Advanced User
Spoiler (Click to View)

Security Software:
Antivirus - Avast or Avira
Firewall - COMODO firewall
Anti-Malware - Malwarebytes
Software Startup Monitors - WinPatrol

Explanation:
Advanced Users know more about their PC's and thus using more applications, so the potential attack vector is bigger, especially using P2P software.
A good antivirus software is a must, Avast or Avira have good heuristics and work very well. The antivirus solution should be configured to more advanced levels as well.
A good firewall is needed to prevent intrusions or monitor incoming or outgoing internet activity for malicious software.
Anti-Malware is needed to regularly scan system for potential threats antivirus might have missed.
Software startup monitor is needed to see what applications are starting with windows and disabling some which are suspicious or troublesome.



Power Users
Spoiler (Click to View)

Security Software:
COMODO Internet Security Suit (Antivirus, Firewall, Defence+)
Software Startup Monitor - WinPatrol
Anti-Malware - Malwarebytes (is not that important to have)

Explanation:
Power Users are doing a lot of things with their windows PC's so the attack vector is at it's highest. A normal antivirus wont help Power Users anymore since detections can be bypassed, something more advanced is needed. COMODO Internet Security Suit has it all.
COMODO Antivirus with heuristics - Antivirus alone does not really matter anymore, it is just here to make life a little easier. This antivirus comes with cloud based heuristics as well, offering 0-day exploits protection.
COMODO Firewall - An advanced firewall which can be configured to monitor all connections coming in or going out from your PC, see ports which are listening connections etc.
COMODO Defence+ - This is the key feature. It includes HIPS, Registry Protection, Memory Firewall, COMODO's Self-Defence, Sandboxing, Prevents Buffer Overflows and so much more.

Simplifying:
A true Power User knows how applications behave whether it's known or unknown, now with Defence+ you can monitor these activities and to allow or disallow some or all of them. That leaves malware very little chance to start in your system. It is nearly impossible to bypass Defence+ as it works in deep kernel level.

Another great thing is COMODO Sandbox. All unknown software outside the Trusted Software list will get executed in sandbox (you can choose settings for your sandbox and how hardcore you want it to be). This means if you start or through some magical exploit a malicious software gets executed, like a RAT for example, then nothing happens. The RAT might reach a connection to the Client if you allow it (i don't know why you should) then nothing can be done in your system since the RAT is running in the sandbox, where everything is limited. After reboot, the file wont get started or will be deleted. No keylogging, screen viewing or anything else can be started. So simplifying even more, COMODO Sandbox breaks malware.

The Defence+ and all other COMODO parts are highly configurable, for example you can even add your own files under Defence+ which you want to protect, add your own protection to some registry or COM elements etc. There is a lot you can do with COMODO.

Some of you might think why not use Avira or any other AV with COMODO, but having COMODO's AV disabled or removed. Simple answer, as i said before, firstly AV's can be bypassed and secondly, this would eat up a lot of computer resources.



More Information

About My Experience:
I have been using COMODO since it was just a child really. When it was around ver 2.X which was so many years ago, i had to use another security software as well. I started using only COMODO when it reached 3.X and have been using it ever since. This does not mean i have no experience with other security software. I have been using about all other major ones throughly as well and i know what program lacks what.

I am not saying anything bad about any other security product, but what i am saying, is that my PC has never got inflitrated while using COMODO. Other security products can be good as well, but in my eyes and in my experience, not as good as COMODO.

Contact For Help:
If you have any questions about COMODO then feel free to PM me. Tho it might take a while for me to answer.

My Related Threads:
Advanced Windows Security + COMODO
EMET (Enhanced Mitigation Experience Toolkit)

Deja Vu

[Eminent]

You should change the title so that people know it's a guide. Maybe: [TUT] Security Under Windows [TUT] or Guide to Security Under Windows

[Deja Vu ZXY]

You should change the title so that people know it's a guide. Maybe: [TUT] Security Under Windows [TUT] or Guide to Security Under Windows

Good idea, made the change. Thanks.

[Mirabis]

To me it seems that the guide under Advanced User seems to be more secure than the Power Use combination u recommend.
Could you correct me if I'm wrong, or light it out ?

[Deja Vu ZXY]

To me it seems that the guide under Advanced User seems to be more secure than the Power Use combination u recommend.
Could you correct me if I'm wrong, or light it out ?

Yes i can explain. It is already pointed out under why COMODO is better than any other antivirus software for power users. If you could explain why you think Advanced User setup is better than Power User setup then i could explain even more.

I am assuming you think Avira or Avast (etc) has better detection rates than COMODO. You are correct, these detections are somewhat better. But with COMODO, it doesen't matter if the virus is detected or not, it simply wont work under the OS thanks to COMODOs architecture. I have explained in the thread why that is so. Also you can't just rely on the first line of defence which in normal antivirus software is having the malicious item detected. If it's not detected then the damage is done. It is quite easy to bypass detections, easiest method would be to encrypt the file. More advanced method would be to have a special tool which is not distributed in public and which is not detected at all.

[Mirabis]

Yes i can explain. It is already pointed out under why COMODO is better than any other antivirus software for power users. If you could explain why you think Advanced User setup is better than Power User setup then i could explain even more.

I am assuming you think Avira or Avast (etc) has better detection rates than COMODO. You are correct, these detections are somewhat better. But with COMODO, it doesen't matter if the virus is detected or not, it simply wont work under the OS thanks to COMODOs architecture. I have explained in the thread why that is so. Also you can't just rely on the first line of defence which in normal antivirus software is having the malicious item detected. If it's not detected then the damage is done. It is quite easy to bypass detections, easiest method would be to encrypt the file. More advanced method would be to have a special tool which is not distributed in public and which is not detected at all.

Thankyou for explaining ,I finally understand what you mean/meant and see where I was mistaken.
Also I've heard that The Comodo Internet Security Suite ( Free ) is exactly the same as The Comodo Internet Security Suite Pro ; am I right? ( Just with remote support )
But are you reffering at The Comodo Internet Security Suite Complete or just the Comodo Internet Security

[Deja Vu ZXY]

Thankyou for explaining ,I finally understand what you mean/meant and see where I was mistaken.
Also I've heard that The Comodo Internet Security Suite ( Free ) is exactly the same as The Comodo Internet Security Suite Pro ; am I right? ( Just with remote support )
But are you reffering at The Comodo Internet Security Suite Complete or just the Comodo Internet Security

I'm glad my explanation helped you, of course under windows itself there are also few things that can be done to improve security, but a pretty aggressive application layer security would be COMODO. Takes a bit time to get use to it, but it's well worth it.

You are correct, the paid version is pretty much the same as free one, it has all the features and no limitations. The Pro version has the WiFi protection, Live Help Support and some free space at their online backup storage.
WiFi protection works as it encrypts the connection whether you are in public or private WiFi network and it sends all your requests through COMODO servers, so your traffic really can't be viewed by anyone. Well actually COMODO possibly could view your traffic since all your traffic goes through their servers, but i hardly doubt they would do it.

I would recommend the free one as it has everything you need.

[Eminent]

I'm glad my explanation helped you, of course under windows itself there are also few things that can be done to improve security, but a pretty aggressive application layer security would be COMODO. Takes a bit time to get use to it, but it's well worth it.

You are correct, the paid version is pretty much the same as free one, it has all the features and no limitations. The Pro version has the WiFi protection, Live Help Support and some free space at their online backup storage.
WiFi protection works as it encrypts the connection whether you are in public or private WiFi network and it sends all your requests through COMODO servers, so your traffic really can't be viewed by anyone. Well actually COMODO possibly could view your traffic since all your traffic goes through their servers, but i hardly doubt they would do it.

I would recommend the free one as it has everything you need.

I have used both the paid and free version of it, and it is a truly great AV.

[think_alien]

Great guide in my opinion it more than earns every star 👍 im sure this will help a lot of people if they take the time to read it great job

[Crypto.]

Very nice Guide, Helped me a lot.

[MouseDesign]

Where did you actually explain on how to set the several users up? This is what I personally applied in the company I am currently working in, with customized sets ofcourse.

[Deja Vu ZXY]

Where did you actually explain on how to set the several users up? This is what I personally applied in the company I am currently working in, with customized sets ofcourse.

I'm sorry, i didn't understand: "Where did you actually explain on how to set the several users up?". Could you be more specific and ask again or do it via PM.

If you meant on what settings to pick for antivirus software i offered for regular users and advanced users, then regular users would be ok by default settings, advanced users are advanced enough to configure some settings on their own.

If you need more detailed information about the current sets or application layer security for specific needs in specific conditions, then PM me.

Thank you for your comment.

[The Archenemy]

Are you saying Commodo is a better AV in terms of keeping your computer safe, not just detection? I'm using Avira now and want to learn more on what you think since you seem as though you know what you're talking about.

[Deja Vu ZXY]

Are you saying Commodo is a better AV in terms of keeping your computer safe, not just detection? I'm using Avira now and want to learn more on what you think since you seem as though you know what you're talking about.

Well, i would say You are the true security system on your PC. COMODO is just a tool that gives you more control over whats happening in your PC and lets you decide what actions to take. It uses a simple, yet effective way to secure your PC, to deny everything by default and allow only the actions it has asked from you.

So in other words i believe it's safe to say that COMODO is a better security tool than just any other AV which only relies on heuristics, virus signatures etc. To save the long text in this post here, i haven't seen any RAT, keylogger, worm, virus or other piece of malware to penetrate COMODO and work on your windows machine as intended.

If you are interested and need any help, you can PM me and i can try to help you out. I can also talk in skype, although my english is not 100% fluent in terms of speed and sometimes i do make some mistakes. If that does not bother you then voice chat is an option as well.

[The Archenemy]

Well, i would say You are the true security system on your PC. COMODO is just a tool that gives you more control over whats happening in your PC and lets you decide what actions to take. It uses a simple, yet effective way to secure your PC, to deny everything by default and allow only the actions it has asked from you.

So in other words i believe it's safe to say that COMODO is a better security tool than just any other AV which only relies on heuristics, virus signatures etc. To save the long text in this post here, i haven't seen any RAT, keylogger, worm, virus or other piece of malware to penetrate COMODO and work on your windows machine as intended.

If you are interested and need any help, you can PM me and i can try to help you out. I can also talk in skype, although my english is not 100% fluent in terms of speed and sometimes i do make some mistakes. If that does not bother you then voice chat is an option as well.

Thanks for the reply! Yes, I use Commodo firewall and was just very interested in your opinion. I am safe using Avira, MBAM, and Commodo. Though I'm sure I would be fine with just a firewall, i like to be safe ;)