Thinkpads Forum

I am in the process of reinstalling from scratch, 64-bit Windows 7 & SP1
on my set of Lenovo T61 machines.

I would lke to hear everyone's thoughts on Antivirus and Firewall software.
Would it be wise for me to purchase a subscription VPN service?

I have been considering:
Avast
https://filehippo.com/download_avast_antivirus/

Zone Alarm
https://filehippo.com/download_zonealarm-free-firewall/

Commando
https://filehippo.com/download_comodo_free_firewall/

Windows 7 Essentials
https://filehippo.com/download_security_essentials/

Install W7 Pro/SP1, preferably from an xx20 or xx30 Lenovo Recovery set.
Separately download/install any other driver you may require.
Don't bother with any Lenovo or Windows updates, set that to Never.

Don't bother installing any of those listed AVs.
Instead make sure that the built-in Windows Defender is up and running and that you can update it right now.
Show some discipline and update/run that yourself once a week, it's all you need for 'normal' behaviour (unless you plan to visit the Dark Web and its ilk).
Also install Malwarebytes Free and run that also once a week ("to be sure, to be sure", as we Irish say).
Do NOT activate the 14-day trial.

As for VPN, I can heartily recommend Surfshark.

I also reinstalled windows7, installed a 64-bit operating system as my processor supports more than 4 GB of RAM. As for antivirus, why not consider a proxy instead? Proxy servers are capable of providing user computers access to the net and are means of information protection themselves, they have the following features: protecting the company's internal network from outside access; limiting access from the internal network to the net by banning various web resources. Proxy has also anonymization of access or hiding info about internal users or sources of requests. I use paid proxy service and it works for me, although I had antiviruses too.

Today the browser is probably the biggest attack point.

I won't recommend a browser but you need to set it up properly with strict controls.

Enable DNS over HTTPS in all windows /Block tracking and cross-site cookies, cryptominers, fingerprinters

Also block all permissions where possible eg camera, location and microphone, autoplay. Block automatic updates.
It is also probably good to have a password manager.

Also you can't just set and forget so you need to try to keep up with what is happening with exploits etc
If you install any extensions remember they get access to all of your browsing history.