Gizmo's Freeware is Recruiting

Gizmos Needs YouWe are looking for people with skills or interest in the following:
- Mobile Platform Reviews
- Rootkit Scanner and Remover
- Streaming Media Recorder
- Email Client
- Archive Manager        Interested? Click here

 

Probably the Best Free Security List in the World

Probably the Best Free Security List in the World - Page Index
9. System hardening

9.1. Guides for securing your PC:
Gizmo's Security Wizard
Ako's current choices for protection
Gizmo's Guide to Securing Your PC
Best Free Security Diet Plan
BlueZanetti
Cyber Security Tips
Select Real Security
CKnow Virus Tutorial
Invincible Windows
10 services to turn off in MS Windows XP
Microsoft: How to disable the Autorun functionality in Windows (more: XP  V )
Creating a secure domain policy in Windows 
Security Beacon – Security Check List

9.2. Limited user account (LUA):
Why you should not run your computer as an administrator
Vista, 7  another
XP

9.3. More secure browser:
Google Chrome
SRWare Iron
Comodo Dragon
CoolNovo
Yandex.Browser
Firefox
Waterfox
Opera
SeaMonkey
Epic Browser
Pale Moon 
MultiMi
Comodo IceDragon
Google Chrome Frame
Dooble     
SlimBoat

9.4. More secure PDF reader:
PDF-XChange Viewer
Foxit
Sumatra

9.5. More secure media player:
PotPlayer
VLC media player
KMPlayer
Media Player Classic - Home Cinema
UMPlayer

9.6. More secure image viewer:
FastStone Image Viewer
Irfanview
Picasa

9.7. More secure office suite:
LibreOffice
Kingsoft Office Suite Free
Zoho Docs
Google Docs

9.8. Hardening tools:
Vispa (V)
xpy
Harden-It
SafeXP
XPantispy
Security & Privacy Complete
Seconfig XP
Samurai (XP)
Accounts Tuner
Windows Worms Doors Cleaner (XP)

9.9. Anti-exploit tools:
Crystal Anti-Exploit Protection (beta)
ExploitShield Browser Edition (beta)

9.10. Protection against specific vulnerabilities:
.LNK Shortcut Antivirus
.LNK G Data
.LNK Sophos

9.11. USB-autorun disabling:
Panda USB and AutoRun Vaccine
Flash disinfector
Thumbscrew
USB Immunizer
Protect My Disk
USB Protector
AutoRun Antivirus Pro
See Also

9.12. Script-file protection:
Script Defender
ScripTrap

9.13. SRP (Software Restriction Policy):
instructions 1
instructions 2
PGS - Pretty Good Security more
Safe Admin 2
AppAdmin

9.14. Adding user rights:
Sudo for windows
suDown

9.15. Elevating user rights:
SuRun
PowerBroker Desktops

9.16. Running program with dropped rights:
PsExec
StripMyRights
1-defender
RunInsideLimitedJob  

9.17. Running program with specific integrity level:
Runasil
Chml and Regil

9.18. Improved Group Policy Editor:
Doug's Windows XP Security Console
Polsedit  

9.19. File & folder properties:
FaJo XP FSE
Attribute Changer
NTFS Permissions Tools
PathLock

9.20. Check fo privilege escalation:
AccessEnum 
AccessChk 
Dark Elevator 

9.21. Protect/restrict programs and apps:
AskAdmin (formerly AppAdmin)
Application Blocker

9.22. Hardware-based security:
Determine Processor Security Feature

9.23. Other:
Protect Windows with pfSense and VirtualBox

Back to Index

Share this
4.675
Average: 4.7 (440 votes)
Your rating: None

Comments

by vodomar on 25. July 2012 - 12:22  (96645)

Russia’s Top Cyber Sleuth Foils US Spies, Helps Kremlin Pals
http://www.wired.com/dangerroom/2012/07/ff_kaspersky/

What Wired Is Not Telling You – a response to Noah Shachtman’s article in Wired Magazine
http://eugene.kaspersky.com/2012/07/25/what-wired-is-not-telling-you-a-r...

Kaspersky Denies Kremlin Ties, Compares Himself to Indiana Jones
http://www.wired.com/dangerroom/2012/07/kaspersky-indy/

by Mike C on 25. July 2012 - 22:33  (96659)

Thanks for posting this. I, too, get a little tired of the paranoia employed to gain readership. I believe there are a lot of good people around the globe trying to do a lot of good for all of us. It's disheartening how a well-placed half-truth (lie) can put asunder so much of this hard work. This site is my first read of the day (especially recent comments) to find not only worthwhile applications, but also up-to-date changes affecting the appropriateness of these apps. Thanks again.

by vodomar on 26. July 2012 - 10:53  (96682)

Thank you for your support! :)

by Bebbspoke (not verified) on 24. July 2012 - 20:07  (96614)

I am quite surprised I see no mention of "Outpost Security Suite Free"

I have found this to be an excellent AV system - reasonably easy to program as may be desired, fairly user friendly and quite unobtrusive...

The only problem (?) it that the (x86) download needs to install some 16 months worth of updates before one can sensibly use it...

by ako on 24. July 2012 - 20:15  (96615)

See 2.3 :-)

by AnonymousD26 (not verified) on 16. July 2012 - 12:03  (96266)

just noticed that they changed the name of MailShell DNS to Gozoom_dns so I am bringing that to your attention.

by vodomar on 16. July 2012 - 15:13  (96277)

thx :)

by vodomar on 16. July 2012 - 6:20  (96252)

Disable Windows Sidebar and Gadgets NOW on Vista and Windows 7. Microsoft warns of security risk

http://nakedsecurity.sophos.com/2012/07/12/disable-windows-sidebar-gadgets/

Microsoft Security Advisory: Vulnerabilities in Gadgets could allow remote code execution
http://support.microsoft.com/kb/2719662

Kill Your Gadgets!
http://securitywatch.pcmag.com/none/300819-kill-your-gadgets

by AnonymousD26 (not verified) on 6. July 2012 - 19:39  (95822)

I recently got a new laptop and avast installed just fine this time they fixed the issue it was having before very happy. I have the new 3rd generation Intel core i7 8Gb sdram and 2Gb HD Nvidia Geforce GT Hd video card. I just wanted to know if I was to add a firewall is privatefirewall have any know conflicts? or should I stay with windows 7 built in firewall?

by AnonymousD26 (not verified) on 6. July 2012 - 19:46  (95823)

what I forgot to ask is if I should just leave the Hips feature off and let avast deal with what ever comes up? I'm not sure seems like that setup would be a good combo better then the windows default firewall...

by Ako (the) (not verified) on 6. July 2012 - 21:51  (95830)

I would stay with the build-in firewall. Use LUA if you need extra safety.

by Ako (the) (not verified) on 6. July 2012 - 21:52  (95831)

I see no reason to switch Windows defender off.

by AnonymousD26 (not verified) on 6. July 2012 - 22:24  (95832)

So its ok to leave windows defender on and use Avast free antivirus with windows default firewall. Ok thanks for the fast reply AKO I appreciate your suggestions, thanks again.

by AnonymousD26 (not verified) on 6. July 2012 - 22:30  (95833)

I tend to switch security software often I'm happy with just using avast free antivirus my last computer had a conflict but this new one didn't so I'm happy about that. Sticking with Avast free (imo) its the best free one out there no more switching it up only causes conflicts in my experience.

by mediaman13 (not verified) on 8. July 2012 - 20:34  (95910)

The problem with both firewall and detection software - like Defender - is the better it detects, the more the user has to get involved. (In a way, a firewall is also a detection software, it just detects unwanted net activity instead of malware, so the below comments apply to both.) In a really agressive detection software, you might get a lot of alerts that require your attention - sometimes including false positives - sometimes so many alerts it might overwhelm you. So you have to decide your comfort zone when picking a product. You can up your risk, but keep your sanity. A tradeoff, and there's no easy answer.
Some people go for a compromise. A software that detects pretty well - but not top notch - will probably have less false positives and nag you less. The other advantage is it will tend to play better with other securtiy programs.

I said all that so these comments will make more sense:
Defender - not a very good detector, but plays well with everything. Good for one thing I've seen - good at protecting against software writing unwanted things to your registry. I'd leave it on.
Avast - a very good overall choice. Good detector that won't drive you crazy. I wouldn't turn off the HIPS unless it's bugging you so much you just want to say yes to everything. That's really the litmus test that says you either need to suck it up, or change your settings or security software and - maybe (new software is sometimes better) - you won't be taking too much risk.
Windows Firewall - not the best rated in tests, but better than nothing. The problem is, it doesn't give you any outgoing alerts to protect against a baddie that's gotten into your system and trying to phone home. If you think you can stand monitoring that stuff you can download a small, simple software that will piggyback on the Windows Firewall and give you some outgoing alerts:
Windows7 Firewall Control
http://sphinx-soft.com/Vista/order.html
It's recommended by more than one Gizmo editor. I wouldn't run the Windows Firewall without it, but alerts don't bug me that much.
PrivateFirewall - It's reputation is as user friendly, but it's gotten more complicated recently and some think it's for slightly more advanced users. Of course I don't know where you are on that spectrum. Also hasn't done as well in this years tests as it has in the past.

Hope this helps.

by Jim Ellis (not verified) on 8. July 2012 - 23:42  (95916)

I installed the Windows firewall control you mentioned but as a newbie I am unsure what to check when the alerts come up re enable all, disable all, etc. when it asks about Firefox, my AV service framework,Host Process, Win Patrol and others... Help!

by mediaman13 (not verified) on 21. July 2012 - 0:57  (96455)

Sorry, Jim, I haven't been back in awhile. I thought I'd get an email about your post, but maybe I didn't have the notify box checked. What you're asking is really what I was saying. The problem is knowing what to respond to. There's not many easy answers, and that's what I was saying about how aggressive any software is. Software that doesn't give you much feedback sometimes does so because it's not very good at detecting the problems. Anyway, with a firewall, the short answer is: if you didn't click anything before an alert came up, and you don't recognize the program the alert warns you about, there may be a problem. You can deny and see if anything happens. You won't hurt anything that way, just something that you want to connect to the internet tok do may not connect. Then you can go into the programs page and edit to allow it. A lot of these things are from software you installed that wants to check it's homepage for updates when you first login to windows are open the program - java for example. A lot of times these softwares have "options", "settings", or control panels (java puts a control panel in your windows control panels) that will let you turn off automatic updates if you rather only check for updates manually. Then you'll know why your firewall's buging you. And, of course, you can look up some of the program's you're warned about on the internet. Just like virus warnings. It's the price you pay for better protection.

I've heard good things about tiny firewall mentioned below. You might find it more use friendly. I might try it myself.

by MidnightCowboy on 9. July 2012 - 4:14  (95924)

IMO this is a much better and much more comprehensive tool. I use this myself on Windows 7.

http://tinywall.pados.hu/

It blocks by default and there are several options to "allow" including selecting the process, file, or even just clicking on an open window. You can also choose the level of access given. Just watch this with each selection as it defaults to "unrestricted".

by ako (the) (not verified) on 9. July 2012 - 10:34  (95937)

Simple firewalls are very simple to pass, but malware is often quite lazy so these win7 tools give some extra protection. And you can of course control also legitimate programs with them.

P.S. mediaman13 had a very good post above :-)

by mediaman13 (not verified) on 21. July 2012 - 0:59  (96456)

Thank you, and I appreciate all your hard work.

by MidnightCowboy on 9. July 2012 - 10:42  (95938)

If I understand your post correctly, you think TinyWall is a simple third party firewall. In fact it is not, and like the other program mentioned, installs no drivers or kernel components (the biggest cause of system instabilities), but acts as a controller for the Windows built-in firewall, hardening it in the process. TinyWall also has it's own set of built-in rules, a password lock and tamper protection.

There is a review of TinyWall here:

http://www.davescomputertips.com/2012/06/tinywall-the-best-thing-since-s...

Our own Best Free Firewall editor will be adding his own review shortly.

http://www.techsupportalert.com/best-free-firewall.htm

by ako (the) (not verified) on 9. July 2012 - 11:37  (95940)

Yes, I understand this :-) I have tried "Windows firewall control" myself.

by cinnamon toast crunch (not verified) on 29. June 2012 - 3:47  (95502)

p.s to continue my reply below. i introduced emsisoft anti-malware to this website awhile back and i noticed it was tested and placed at the top of the rankings. i still to this very day suggest this software to anybody in search of a rock solid detection engine. another reason i respect them is they have stayed true to useing a non-cloud based program.. there freeware mode still remains invisible and unknown to many users on the net. dig and you shall find!! i visit dangerous places on a daily basis, and nothing. let me repeat this.. NOTHING CATCHES MORE THAN EMSISOFT!! whats that? have i used every security software on the planet? YES I HAVE!! ADVANCED USERS PLEASE GIVE IT A TRY.. THANKS

by MidnightCowboy on 29. June 2012 - 4:46  (95506)

We should point out that the freeware version is only a scanner/cleaner. It has no real-time protection.

by cinnamon toast crunch (not verified) on 29. June 2012 - 3:30  (95496)

personaly i would concentrate on your services first and foremost. you can install all the privacy software in the world and if you dont know how to tweak your services then all those are rendered useless.. each service is a open door set wide open.. start there first then branch out.i believe there are links here on gizmos to learn and research about what each service does and is used for. learn it, live it, and also watch for services re-opening after software changes. thanks for a great article as usual on gizmos!! can anybody includeing raymonds beat gizmos? i doubt it... thanks again

by mediaman13 (not verified) on 8. July 2012 - 21:20  (95913)

The most well established site on this issue is Black Viper's:

http://www.blackviper.com/

and even he doesn't recommend disabling a number of services on 8,7,Vista for safety like he did for XP. They're are only 2 that seem to be musts. Turn off Remote Desktop Assistance inside Windows (search in help) and disable the Remote Registry Service. If you want to someone to work on your computer remotely later, turn one or both back on. The Remote Registry service isn't for home users, anyway. It allows someone from the outside to modify YOUR registry.

by mediaman13 (not verified) on 8. July 2012 - 21:23  (95914)

Whoops! Put my reply in the wrong place. You can see by the dates Ako not saying thanks to me, but to
CinnamonToast.

by ako (the) (not verified) on 30. June 2012 - 19:41  (95595)

Thanks!

by A_Nonny_Mush (not verified) on 26. June 2012 - 23:34  (95417)

PrivaZer

http://www.privazer.com/

by AJNorth on 27. June 2012 - 21:45  (95445)

Coincidentally, ghacks.net published an excellent (and very enthusiastic) article on PrivaZer earlier today -- http://www.ghacks.net/2012/06/27/privazer-deep-system-cleaner-that-remov... .