Windows Firewall Control (WFC) by BiniSoft.org

Discussion in 'other firewalls' started by alexandrud, May 20, 2013.

  1. AmigaBoy

    AmigaBoy Registered Member

    Joined:
    Sep 12, 2015
    Posts:
    205
    I'm lately getting high CPU usage (20-25) from wfcs.exe after every PC restart and it doesn't settle down. I've added it to the scanning & monitoring exclusions of EAM (Emsisoft) but problem remains. Perhaps I'll try uninstalling EAM as a test.

    Problem only goes away if I restart the WFC service. Notifications are enabled and I only log the blocked connections (these have always been my settings - this issue appeared only recently). W10 x64 Pro 1803 / 17134.345

    update: looks like EAM is the cause - I'll let them know and let you know if required.
     
    Last edited: Nov 2, 2018
  2. alexandrud

    alexandrud Developer

    Joined:
    Apr 14, 2011
    Posts:
    2,411
    Location:
    Romania
    Just a curiosity. It happens with WFC version 5.3.1.0 which is unsigned or with the digitally signed version 5.4.0.0 ?
     
  3. AmigaBoy

    AmigaBoy Registered Member

    Joined:
    Sep 12, 2015
    Posts:
    205
    This is on 5.4.0.0, although I don't yet know what's causing this. Uninstalling (not disabling) EAM I think solves the issue although I haven't tested much.
     
  4. DavidXanatos

    DavidXanatos Developer

    Joined:
    Sep 6, 2006
    Posts:
    2,319
    Location:
    Viena

    Is there any progress on this issue?
    it seams that NetFwTypeLib is not up to date: https://social.msdn.microsoft.com/F...ndows-8-predefined-set-of-computers?forum=wfp
    event though the reg values are documents: https://msdn.microsoft.com/en-us/library/ff719844.aspx
     
  5. alexandrud

    alexandrud Developer

    Joined:
    Apr 14, 2011
    Posts:
    2,411
    Location:
    Romania
    There is no progress. Microsoft did not bother to answer or to fix the issue in their code. WFC can't add a workaround either. I tried to parse these rules separately and not to rely on NetFwTypeLib, but the firewall rules store is refreshed only when using NetFwTypeLib to add/remove/update rules or when the Windows Firewall service is restarted. I could not find a way to apply these changes directly in Windows Registry by parsing the rules and modify them directly and have the rules updated.
     
  6. DavidXanatos

    DavidXanatos Developer

    Joined:
    Sep 6, 2006
    Posts:
    2,319
    Location:
    Viena
  7. alexandrud

    alexandrud Developer

    Joined:
    Apr 14, 2011
    Posts:
    2,411
    Location:
    Romania
    The problem is that WFC development is currently very slow. I will take a look at these but I can't promise anything.
     
  8. Peter4667

    Peter4667 Registered Member

    Joined:
    May 31, 2013
    Posts:
    47
    How to view all allowed and blocked connections? The connection logs shows only recently allowed and blocked connections.
     
  9. alexandrud

    alexandrud Developer

    Joined:
    Apr 14, 2011
    Posts:
    2,411
    Location:
    Romania
  10. bORN2BWILD

    bORN2BWILD Registered Member

    Joined:
    Oct 3, 2016
    Posts:
    26
    Location:
    Greece
    Thanks for the full free product now.

    I wish when WFC asks for the 3 options (allow/block/block for now), it could also have a 4rth option Allow once.
     
  11. alexandrud

    alexandrud Developer

    Joined:
    Apr 14, 2011
    Posts:
    2,411
    Location:
    Romania
    Not really possible because the connection was already blocked, not paused. But, you can create a temporary allow rule which will get removed automatically when it will expire. Check the user manual to see how to do this. This comes closer to what you wish.
     
  12. aldist

    aldist Registered Member

    Joined:
    Nov 8, 2017
    Posts:
    1,102
    Location:
    Lunar module
    @alexandrud
    Secure Boot is enabled, but very often it doesn't work. v5.3.1.0, v5.4.0.0 clear install. Win10 v1809 x64 (October Release and October Re-Release), FastBoot is off.
    ScreenShot_177.png
     
  13. alexandrud

    alexandrud Developer

    Joined:
    Apr 14, 2011
    Posts:
    2,411
    Location:
    Romania
    If you are running any software that takes a while to close, then the operating system will just kill the other processes in order to shut down. Secure Boot works if the system is closing the applications normally so that WFC can react to a system shut down event. If the shut down occurs abruptly WFC will get killed and will not catch the shut down event. I can't improve this behavior.
     
  14. AmigaBoy

    AmigaBoy Registered Member

    Joined:
    Sep 12, 2015
    Posts:
    205
    It's been a while since I've visited the thread. I'll just say that WFC has been working beautifully, so thanks again alexandrud. :thumb:

    (5.4.0.0 - W10 1803)
     
  15. AmigaBoy

    AmigaBoy Registered Member

    Joined:
    Sep 12, 2015
    Posts:
    205
    Small request, perhaps already asked before: when closing and re-opening the Main Panel window, it always focuses on "Profile". It would be nice if it remembered its previous state/focus (Notifications, Options etc.). Perhaps you could even add an option to "Always open to..." for those that might not like this for some reason.
     
  16. Circuit

    Circuit Registered Member

    Joined:
    Oct 7, 2014
    Posts:
    939
    Location:
    Land o fruits and nuts, and more crime.
    This is a reason not to use Windows firewall, at least for me.
    WFC is a nice addition to Windows firewall if you feel safe using.
    WFC is a nice front end.

    Would never feel secure using WF.
     
  17. Special

    Special Registered Member

    Joined:
    Mar 23, 2016
    Posts:
    454
    Location:
    .
    Yeah because opening the main window and landing on any of the other panels are all so super useful, I personally would want to always open on the "About" tab so I can be reminded of the the version number.
     
  18. alexandrud

    alexandrud Developer

    Joined:
    Apr 14, 2011
    Posts:
    2,411
    Location:
    Romania
    Even if it is easy to do this, it probably won't happen since the decision to make a new release must be now approved by a lot of people.
     
  19. kenw

    kenw Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    145
    Location:
    Brighton, Colorado
    I installed Java to test a program. It is being blocked and will not update.
    Anyone know how to create a rule for it. Tried some without success.

    Thanks

    Ken
     
  20. alexandrud

    alexandrud Developer

    Joined:
    Apr 14, 2011
    Posts:
    2,411
    Location:
    Romania
    Have you tried an outbound rule that allows all connections for for java.exe ? Open the Connections Log and check the latest blocked connections when the update fails. You should make an idea.
     
  21. DinuX

    DinuX Registered Member

    Joined:
    Nov 13, 2018
    Posts:
    4
    Location:
    Malaysia
    Been using WFC for few weeks and thanks to @alexandrud for this excellent program.

    I was browsed through WFC's event log and notice that there are a number of warning events showing "Resolving the path of the program has failed."
    These program/path was deleted few days ago and the firewall rules was removed as well. I am trying to figure out why is WFC still reported these warning events and how should I get rid of it?

    Below one of the example of the event details reported:
    - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    - <System>
    <Provider Name="WFC" />
    <EventID Qualifiers="0">201</EventID>
    <Level>3</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-12-01T02:19:00.080727100Z" />
    <EventRecordID>1181</EventRecordID>
    <Channel>WFC</Channel>
    <Computer>n-a</Computer>
    <Security />
    </System>
    - <EventData>
    <Data>Resolving the path of the program has failed.</Data>
    <Data>Input: \device\harddiskvolume6\users\johnny\appdata\roaming\youtube-dlg\youtube-dl.exe</Data>
    <Data>System.ArgumentException: Process with an Id of 10688 is not running. at System.Diagnostics.Process.GetProcessById(Int32 processId, String machineName) at WindowsFirewallControl.Services.RulesService.ResolvePath(String input, Int32 processId)</Data>
    </EventData>
    </Event>

    Thanks in advance.
     
    Last edited: Dec 1, 2018
  22. Brummelchen

    Brummelchen Registered Member

    Joined:
    Jan 3, 2009
    Posts:
    5,868
    the message is clear
    check if program is present in this path
    the path is not common, did you deny UAC question when installing?
     
  23. DinuX

    DinuX Registered Member

    Joined:
    Nov 13, 2018
    Posts:
    4
    Location:
    Malaysia
    The program removed earlier and this rules was removed as well in WFC, past few days ago.
    However WFC still report as warning today. Note that there are no rules exist for this program now.

    WFC is working fine, I was just wondering why WFC still reporting this error? Could be a glitch somewhere else?
     
  24. alexandrud

    alexandrud Developer

    Joined:
    Apr 14, 2011
    Posts:
    2,411
    Location:
    Romania
    Everything is working as expected. You had recent connections for that program which now was removed. When you opened Connections Log, WFC was trying to resolve the path for that missing file, but it couldn't find it anymore, nor the path, nor the process id, therefore it logged a warning. Nothing wrong. If you clear the log then you won't get that warning again, or you could wait until the log gets new entries which will overwrite this entry anyway.
     
  25. DinuX

    DinuX Registered Member

    Joined:
    Nov 13, 2018
    Posts:
    4
    Location:
    Malaysia
    Thank you for your replied.
    It made sense now, the program's connection do exist in connection log. :thumb:
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.