TairikuOkami I was looking at your "system specs" and noticed you are running Yandex with DNS for your browser and you say you don't need a AV or Firewall ?.
So this DNS stuff protects your entire PC including email from all attacks ?....I don't have a clue as to what you are talking about so could you please explain this to me.......Thanks!
You do not really need a firewall, if you do not have open ports on your computer. And even ports are open by a trusted app, all you do, you allow it in a firewall, so the firewall makes no sense. If you have a router, it blocks unsolicited traffic, so even that is taken care of. Firewall is useful, when you need it, like in your case.
Safe DNS helps to block malware and phishing webpages, even prevents malware downloading from them.
You can check my signature, there are many to choose from, people usually prefer Google or OpenDNS.
I use other settings, but disabling Windows Scripting Host disables about half of the malware, if not all.
Majority of malware gets into PC via a browser or email. I use webmail, so my main focus is on a browser.
Yandex is Chromium based with all its features, including sandbox, so I think, I am well protected.
Not to mention, that Yandex checks downloaded files via Kaspersky, just like my email provider.
So that's how you slovaks roll....Cool....I love to learn just as much as the next person.
Yeah I don't do to much email so I think I'm ok there but I definitely sandbox my firefox browser that comes with the Comodo firewall and I do use a router also.
Thanks for breaking it down for me about the DNS stuff......And I have just one question for you about the "disabling windows scripting host" is this somehting I should do also for someone like me using AV & Firewall or is this just for someone using the DNS thing ?.......Let me know.....Thanks!
Yes, Comodo Firewall and particularly its sandbox, are the best defense, better than "the best" AV.
This person tests various AVs against ransomware, there are various results, but sandbox gets 100%.
Comodo Firewall against Ransomware - YouTubeI have never had single issue disabling it, store apps and everything works without it. But if you ever need it, you will get a message, that WSH is disabled contact your administrator, then you can just enable it back. A single entry and it makes a huge difference, there is also powershell and netframework malware spreading lately, but it also gets started via WSH, like Locky ransomware.
A closer look at the Locky ransomware
The rise of .NET and powershell malware - Securelist
PC can be fine without AV, but I would not go around advising people not to use it. People, who do not rely on them usually have other means to protect their PC. Like this poll shows, that 25% people do not need it. There are many factors, like what software you use, what webpages you visit, if you use services, which needs to be specially protected like paypal and so on. In the end, it is all about risk assessment. The only one, who can really answer that question is you. I have nothing to loose, even if I would be infected by ransomware, I would just reinstall, restore my backups and within 3 hours my PC would be like before. If you decide not use AV, you should perform on-demand scans time to time. Imaging and sandboxing is the best way to go.
Here is a handy batch file for easily adding files to the firewall.
GitHub - charlesdh/addfwrs: addfwrs - created by Charles de Havilland
Quote