How to make Windows 10 safer without antivirus?

Question

Windows

A new computer, I don’t want to cut performance, especially from experience and antivirus is not ideal protection.
In principle, a competent user, but I would like to minimize the threats as much as possible.
I would like to hear in general terms what can be done without greatly cutting back on opportunities.

Answer 1

How to make Windows 10 safer without antivirus?

Well, firstly, there is a built-in antivirus from Microsoft, which has existed since the days of Windows 7, and works great, with virtually no effect on performance.
Secondly, even the best antivirus does not provide complete and guaranteed protection. For example, the same ransomware whose epidemic was three years ago for the most part did not contain virus code, and was not detected by antivirus.
A great security system is UAC - it works like sudo in Linux. It cuts off a lot of problems protecting those who like to work with administrator rights.
At the moment, the best protection is competent work with rights.
Do not work as an admin - you don’t install software every day, if you need to install it, it’s not difficult to type the password from the admin account.
Limit the rights to launch programs from anywhere using policies - ideally, launch is allowed only from special folders - Windows and ProgrammFiles, and from other places is prohibited. As a result, even if the malware gets on the computer, it will not get into the system folder, because there are no rights, and it simply will not start from the other one because of the ban.
Ideal for office computers. And do not think that this is only in the domain - everything works fine without a domain.
Well, one of the most effective, simple and affordable protection is a banal system backup.
It should be noted here - it protects against data loss and damage, but does not protect against leakage.
If you do not store top-secret information on your PC, the leakage of which can cause millions of damage, then you can limit yourself to this protection.
Set up a backup and work quietly - if you suddenly catch something bad, just roll back.
Pressing one button and in 5-10 minutes the system will roll back to the backup point and you will get a working system with all the files.
Moreover, the built-in backup system that comes out of the box is quite competitive and works well, so you can use it.
A lot of trouble comes from the browser, and alternative DNS, for example, from Yandex, does a good job here, which simply do not resolve malicious sites.
ADblock is just as effective, although it was created for a slightly different purpose.
Plus a little prudence - carefully watch where you download the software, watch the file extensions.
Do not run various files like nice_movie.torrent.exe or scan_invoice.exe
If you are not careful - see UAC and Software Restriction Policies above.

Answer 2

Do not install software from it is not clear where it came from, from free warez sites, etc. Pay attention when a program through UAC requires admin rights.
I live without antivirus since Windows 7. The flight is normal.

Answer 3

+ previous post: do not insert other people's flash drives, and throw out your own after visiting the copy center

Answer 4

in the top ten built-in antivirus

Answer 5

to confirm the answers: the built-in axis antiviral has practically no effect on performance.
in addition to them: the unchecky program automatically unchecks when installing software from all the good that installers offer "into the load".

Answer 6

Add to the above:
Universal ad blocker in all applications [StopAd]
Download the official version, for free here:
https://stopad.io/
PS Much better "guard", "adbar", etc. loads the system much less.

Answer 7

- apply proactive protection (eg Outpost Firewall Pro)
- use a firewall with default policy to block everything (eg Outpost Firewall Pro).
- download programs only from official sites
- make friends with virustotal (and analogues), sometimes it gives much more information than just checking with an antivirus program.
- in a browser, for example firefox, use the uBlock origin and uMatrix extensions
Just in case: javascript in browsers allows you to climb anywhere and do anything with your computer / smartphone.
And so these tips are quite working, but they can be very annoying with constant permissions / bans