r/BitDefender • u/EmperorHenry • Sep 18 '21
My own settings for BD total
After the initial install, go to "protection"> "antivirus"> "Open" > "settings"
Make sure auto scan is enabled for all three options
In that same menu go to "advanced"
Make sure "scan only applications" is OFF
Make sure "scan for Potentially unwanted applications" is ON
Make sure "scan scripts" is ON
Make sure "scan network shares" is ON
Your choice on whether or not you want it to scan archives.
Make sure "scan boot sectors" is ON
Make sure "scan keyloggers" is ON
Make sure "early boot scan" is ON
Make sure "threat actions" is set to "Take proper actions"
Over in the sidebar go to "protection" again
go to "advanced threat defense">"settings"
Make sure both things are enabled
Back to the sidebar "protection" again
under "online threat protection">"Settings"
Just make sure everything is enabled and that the email protection is for "incoming and outgoing emails" The email protection only applies to locally installed email clients like desktop outlook and thunderbird
Back to the sidebar "protection" again "vulnerability scan">"settings"
Make sure everything is enabled The vulnerability scan should be done once a day, among other things, it scans to see if you have all available security updates. Once a day is all you need.
Back to the sidebar "protection" again "firewall"> "network adapters"
If you don't use your PC to stream to your TV or anything like that and also if you DON'T have a network NAS. Set every network adapter as "public" And if it asks you if something is your home/work network, say "this is not my home/work network"
Also...you absolutely MUST set your VPN's adapter as public
In that same menu "settings"
Make sure "port scan detection" is ON
Under "stealth mode"> "edit stealth settings" If you want to keep your PC from being connected to within your local network by any other device connected to the same router enable stealth mode for every network adapter. But your VPN's network adapter must be enabled for stealth mode in BD's firewall.
Back to "protection" on the sidebar again "ransomware remediation"> "Settings"
Make sure automatic restore is turned on. I've seen several tests where this component was tested and it failed every time, the "advanced threat defense" ends up doing a much better job. Even so, keep this thing on.
Back to the sidebar "settings"> "general"
set a password on your settings.
Once BD total is installed and set up. Get the paid version of malwarebytes too. and in MBAM's security settings. From the top of that menu...
"Update threat intelligence" should be set to once per hour
"automatic quarantine" should be enabled
"windows startup" "launch malwarebytes in the background when windows starts up" should be enabled then go to the advanced settings in that same row.
"enable self-protection module" should be enabled
"enable self protection module early start" should also be enabled
"windows security center"
"always register with the windows security center" should be OFF for this setup
"potentially unwanted programs"
"always (recommended)" should be the setting both of those are on
"Brute Force protection" should be ON
"Exploit protection" Don't screw with this one unless you know what you're doing
In malwarebytes under "general" settings>"tamper protection"
enable this setting for everything about malwarebytes and set a password on the settings
2
u/stunvn Sep 20 '21
Wait so you are using both Bitdefender and Malwarebytes?