Emsisoft Online Armor 6.0 is out!

[stapp]

Did you make sure reg key in post #2 here was removed?

http://support.emsisoft.com/topic/10...ed-connection/

[bonedriven]

Originally Posted by stapp

Did you make sure reg key in post #2 here was removed?

http://support.emsisoft.com/topic/10...ed-connection/

Thank you stapp. I guess that will do the trick. But I will try later when I get time. I still like OA the most among several FWs I've tried.

[Brandonn2010]

Just tried the COMODO Leak Test against this with AppGuard disabled and it got 100%. That leak test tried to do some crazy stuff judging my some of the pop-ups, but OA stopped them all!

[chris1341]

Originally Posted by Brandonn2010

Just tried the COMODO Leak Test against this with AppGuard disabled and it got 100%. That leak test tried to do some crazy stuff judging my some of the pop-ups, but OA stopped them all!

It passes them all just on it's own without AppGuard if you 'run safer'. Try some screen capture POCs though (SpyShelter ones for example). Screen capture on x 64 is OA's Achilles Heel IMO, although I realise it would likely have blocked execution earlier in the chain. Comodo, PFW and OP do much better on screen capture POCs though so room for improvement I think.

[Netherlands]

Originally Posted by chris1341

It passes them all just on it's own without AppGuard if you 'run safer'. Try some screen capture POCs though (SpyShelter ones for example). Screen capture on x 64 is OA's Achilles Heel IMO, although I realise it would likely have blocked execution earlier in the chain. Comodo, PFW and OP do much better on screen capture POCs though so room for improvement I think.

Indeed the 64-bit protection is weak but they show the limitations on there website:

• Self protection does not work
• Keylogger protection is not yet implemented
• Many advanced-mode capabilities are disabled
• Webshield and Mail Shield only filter 32-bit processes

http://www.online-armor.com/Window64.php

[siketa]

This link is from OA's former developer.
Maybe Emsisoft has solved those issues?
http://www.emsisoft.com/en/software/oa/

[m0unds]

Originally Posted by siketa

This link is from OA's former developer.
Maybe Emsisoft has solved those issues?
http://www.emsisoft.com/en/software/oa/

Unless you have a rather outdated PC from the late 90s, the answer is most likely yes, assuming that you’re using Windows XP, Vista, 7 or 8 - with the latest service pack installed. From Win 7 onwards all features are fully functional on x64 systems too. While running, Emsisoft Online Armor uses about 20 MB of your RAM. If your PC has at least 1 GB of RAM, this will be perfect.

there you go.

[chris1341]

m0unds, not sure where the quote came from but it's not accurate IME. Screen capture protection plus other finer settings are just not available in OA x 64.

I'm sure, though can't find it, when 4.5 was released Emsisoft rep stated you cannot stop applications controlling the windows of other apps on x 64 so screen capture protection was impossible. Maybe others are using user level hooks Emsisoft (quite rightly) believe are not strong enough to achieve this but they still perform better than OA in these POCs at least.

For example of Emsisoft confirmation of x 64 limitations see here http://www.emsisoft.com/en/info/oa/Programs.shtml. Also most screen capture POC on x 64 fail.

Protection (available on 32bit systems only)

These settings protect the selected application against potentially high-risk behavior that sophisticated malware may take against target programs. These settings are best used to protect programs that contribute to your system's security and do not contain self-protection.

Note: Using these features on certain programs may result in the protected application not behaving as expected, which could lead to unpredictable problems. You should avoid using protection settings on programs that already contain similar protection.

Restart if terminated – Automatically restarts the program if it suddenly exits, such as if it crashes or is forcibly closed.
Protect from termination – Prevents other programs from forcibly closing the selected program.
Protect from suspend – Prevents other programs from suspending the protected program, which would leave the program non-functional without actually terminating it.
Protect from remote code control – Prevents other programs from manipulating the functions of the protected application.
Protect from remote data modification – Prevents other programs from modifying data in memory belonging to the protected program.

Performance (available on 32bit systems only)

These settings change the way that the selected application utilizes your computer’s processor. These settings are intended for advanced users that require this type of control of selected programs.

CPU Limit – Malfunctioning programs can sometimes use 100% of your computer's processing power, causing the system to freeze until it finishes (if it ever does).This feature changes the maximum amount of processor power that Online Armor will allow the selected application to use. At 100%, the selected application may use as much of the processor as it needs, but programs can be restricted to as little as 10% of the processor. Move the arrow shaped slider left to lower the setting, and move it right to increase. This feature is set to 100% by default (the right-most end of the slider).
Affinity mask – When your computer has more than one processor, a multiple core processor, or a processor with "Hyperthreading", a program may not be able to use the processor(s) correctly or you may wish to choose which processor/core the program uses. This feature changes which processor/core the selected application should use the most, or "favor".

I think Emsisoft are a great company with brilliant customer support and OA a top application but some things I really like in the product aren't as strong on x 64 as they are on x 32.

Cheers

[m0unds]

Originally Posted by chris1341

m0unds, not sure where the quote came from but it's not accurate IME. Screen capture protection plus other finer settings are just not available in OA x 64.

I'm sure, though can't find it, when 4.5 was released Emsisoft rep stated you cannot stop applications controlling the windows of other apps on x 64 so screen capture protection was impossible. Maybe others are using user level hooks Emsisoft (quite rightly) believe are not strong enough to achieve this but they still perform better than OA in these POCs at least.

For example of Emsisoft confirmation of x 64 limitations see here http://www.emsisoft.com/en/info/oa/Programs.shtml. Also most screen capture POC on x 64 fail.




I think Emsisoft are a great company with brilliant customer support and OA a top application but some things I really like in the product aren't as strong on x 64 as they are on x 32.

Cheers

it came from the link in the post i quoted. emsisoft claiming full functionality on x64. there's a wacky disparity of claims in their documentation depending on where you look; the online armor website (non-emsisoft site) says lots of things are hobbled on x64, but that help doc (the one you linked) says only a handful of things are. couple that with the aforementioned statement of full functionality on emsisoft's product page, and it's hard to know what works and what doesn't.

http://i.imgur.com/QKbkX.png - here's a screenshot if you don't feel like clicking on the link i quoted and searching for x64

[Blues7]

The online manual probably is a good starting place for info on the current builds...otherwise I'd submit a request to their tech support folks They're very responsive in my experience.

https://www.emsisoft.com/en/info/oa/index.shtml

[Noob]

Or you guys could ask Emsisoft in the EAM thread.

[m0unds]

Originally Posted by Blues7

The online manual probably is a good starting place for info on the current builds...otherwise I'd submit a request to their tech support folks They're very responsive in my experience.

https://www.emsisoft.com/en/info/oa/index.shtml

like i said though, their current marketing says one thing, help docs say something else. if i cared enough to find out, i'd probably just ask via a support request or on their forums. i was purely mentioning that they're claiming OA 6 is fully functional on x64 platforms.

*EDIT* curiosity got the better of me, and I asked emsisoft. I was told that the product page (http://www.emsisoft.com/en/software/oa/) is the most accurate representation of the protection status of OA, and that it's fully functional on x64 versions of windows.

[Victek123]

I recently installed Online Armor Free on Windows 7 x86 and I'm seeing consistent high CPU usage around 50%. Is this a known problem and is there a solution?

[Bigabe]

No this isn't normal. OA has such a high CPU usage? After installing it is in learning mode, so maybe it is just checking out your processes?

[Victek123]

Originally Posted by Bigabe

No this isn't normal. OA has such a high CPU usage? After installing it is in learning mode, so maybe it is just checking out your processes?

My understanding is OA is only briefly in learning mode when it starts for the first time and that's clearly indicated on the screen. After that it switches to normal filtering and that's when I saw the high CPU usage. I understand it's not "normal", but it's not unheard of either. A Google search shows a number of threads where people have talked about it.

[Bigabe]

Maybe there is a conflict with another security tool of yours? Do you use any other HIPS or firewall? You are right about learning mode.
OA is causing some boot delay, about 2 secs from cold boot, but I didn't notice any other high activity.

Check if you are stuck in some kind of update routine? I had something like that with Outpost one time.
Maybe you clicked on the wrong button during installation and you are now hindering some OS processes to work properly?

[Victek123]

Originally Posted by Bigabe

Maybe there is a conflict with another security tool of yours? Do you use any other HIPS or firewall?

The only resident security app I use is Webroot SecureAnywhere. Right now I have the Windows Firewall turned on, but it was off when OA was installed.

[stapp]

OA is designed to turn off Windows Firewall at install.

If you uninstall OA it turns Windows Firewall back on.