What security setup do you have?

MSE, Windows Firewall and UAC slider moved higher to "Always Notify". I use IE8 in protected mode with WOT add-on. Plus occasional scan with Malwarebytes'. Haven't had a malware on Vista/7 in the last 3 years.

local machine / user policies

no AV needed

ryan7 said:

• Avria AntiVir (free)
• PC Tools Firewall
• Windows Defender (comes w/7) (Real time)
• Malwarebytes' Anti-Malware (just for scanning periodically)
• a-squared Free 4.5 (just for scanning periodically)
• HiJack this (NOT Trend Micro's, but the original)
• Winpatrol
• UAC Off
• Acronis True Image 11 WD (Not security persay, but piece of mind security to know I have an image of my system should something go wrong)

Although I've been with AntiVir since Windows ME days, I am seriously thinking of jumping ship to MSE. Tried the x64 version last night and must say it is great.

Nice setup ryan; I am using good old Avast and also FF with NoScript and AdBlock Plus add-ons too

Mercurial said:

= ugly restrictions for ur self

not bad at all to be honest. I've been in the information security field for a while now so maybe I'm used to limited accounts... using an alternate account for elevation privileges.

I used to use AVG 9.0 FREE, but recently converted to MSE

i leave UAC and Windows firewall the way it came

of top of my head

IE
spywareblaster activex block list (but not restricted zones)
only allow flash on approved sites
only allow java on apprived sites
disabled a few things in the security zone
block all persistent cookies by default, allowing for specific sites by double clicking icon in system bar
use admuncher to block ads which will also as a side affect block various malicous actions

FF
block cookies by default, allow per site same as IE
adblock+ like admuncher on IE will block various malicous actions as a side affect

opera
block cookies same as other 2 browsers
urlfilter block list to block trackers and ads

system wide
nod32 with email scanning, and default file extension scanning, I added png gif jpg jpeg and bmp to files that are scanned. Would usually also scan http but nod32 web scanner module is buggy, they have a released a new beta version with fixes which I plan to test. email scanning is set to agressive, web is also when I have it turned on, the file scanning is not agressive and I disabled file open scans.
NAT router to block inbound traffic and scans
common sense to avoid running silly things
occasional scans with malwarebytes

What I plan to do.

I plan to change to using a limited user account
Plan to enable Software Restriction Policy
As a result of these I may turn of nod32 file scanning and only use http/email, but if http remains buggy will keep file scanning on.
Plan to install a hosts file.
Considering using a restricted zone list from spybot and spywareblaster but only if no performance impact.

There is no point for extra browser addons or antimalware tools. More apps to update - just choose one app and the built in Firewall + UAC. As for the browser use Opera.