OldGifford

Online Armor Firewal slows down XP startup

Recommended Posts

Thanks for the help on my other topic, I have noticed now that once I have logged in to XP from the startup it takes much longer for the desktop to appear. I happens in two stages.

First it takes longer for the desktop to appear, probably around 10 seconds, whereas it used to be just a couple of seconds

Secondly, when the desktop appears it is empty, it then takes time to populate the desktop with the ususal icons and task bar.

The Windows firewall is replaced by Online Armor.

Attached shows the startups from msconfig, the only addition seems to be Online Armor.

Is this normal?

Share this post


Link to post
Share on other sites

OldGifford,

Is other security software excluded in Online Armor?

Are there programs in the Online Armor programs list which are not trusted?

Share this post


Link to post
Share on other sites

Thanks, here is the log from bootup, at the moment all the programmes are trusted, I used regedit to remove any last traces of Zonealarm, there were a couple of bits left in the registry. My antimalware is MicrosoftSecurity essentials.

Program Guard: regedit.exe 18/10/2012 09:04 Allowed C:\WINDOWS\explorer.exe -> C:\WINDOWS\regedit.exe

Program Guard: regedit.exe 18/10/2012 09:04 Trusted C:\WINDOWS\regedit.exe was trusted automatically.

Firewall: Automatic decision 18/10/2012 09:01 Allowed C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe, Outgoing UDP access allowed to: 127.0.0.1:1066

Program Guard: kernel event 18/10/2012 09:00 None OADriver: OpenProcess, 888 -> 3192 - Deny (protected) 3192 - oahlp.exe 888 - RapportMgmtService.exe

Program Guard: kernel event 18/10/2012 09:00 None OADriver: PostMessage, Msg: 0/0 3824 -> 528, Deny (protected) 3824 - RapportService.exe 528 - oaui.exe

Program Guard: kernel event 18/10/2012 09:00 None OADriver: OpenProcess, 888 -> 1376 - Deny (protected) 1376 - OAcat.exe 888 - RapportMgmtService.exe

Program Guard: kernel event 18/10/2012 09:00 None OADriver: PostMessage, Msg: 49475/c143 2496 -> 528, Deny (protected) 2496 - ctfmon.exe 528 - oaui.exe

Service started 18/10/2012 09:00 None C:\Program Files\Online Armor\oasrv.exe

System boot 18/10/2012 09:00 None System boot at: 10/18/2012 08:58:51

Share this post


Link to post
Share on other sites

In the programs window no programmes are shown as untrusted.

Microsoft malware protection is shown in the trusted programmes list.

I noted the time taken before all my icons appeared after signing in to windows, it was a minute and a half.

Update.

Firewall: Automatic decision 19/10/2012 09:54 Allowed C:\WINDOWS\system32\svchost.exe, Outgoing UDP access allowed to: 127.0.0.1:1217

Automatic Update failed 19/10/2012 09:51 None OA: Cannot process online updates. Please check the internet connection settings or contact the support., , Socket Error # 10054, Connection reset by peer.

Firewall: Automatic decision 19/10/2012 09:50 Allowed C:\Program Files\Java\jre7\bin\javaw.exe, Outgoing TCP access allowed to: (javadl-esd-secure.oracle.com;e5486.g.akamaiedge.net) 23.52.48.60:443

Firewall: Automatic decision 19/10/2012 09:50 Allowed C:\Program Files\Common Files\Java\Java Update\jucheck.exe, Outgoing TCP access allowed to: 137.254.16.62:80

Firewall: Automatic decision 19/10/2012 09:50 Allowed C:\Program Files\Common Files\Java\Java Update\jucheck.exe, Outgoing TCP access allowed to: (javadl-esd-secure.oracle.com;e5486.g.akamaiedge.net) 23.52.48.60:443

Program Guard: jucheck.exe 19/10/2012 09:50 Trusted C:\Program Files\Common Files\Java\Java Update\jucheck.exe was trusted automatically.

Firewall: Automatic decision 19/10/2012 09:46 Allowed C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe, Outgoing UDP access allowed to: 127.0.0.1:1088

Firewall: Automatic decision 19/10/2012 09:46 Allowed C:\Program Files\Trusteer\Rapport\bin\RapportService.exe, Outgoing UDP access allowed to: 127.0.0.1:1077

Program Guard: kernel event 19/10/2012 09:45 None OADriver: OpenProcess, 896 -> 1392 - Deny (protected) 1392 - OAcat.exe 896 - RapportMgmtService.exe

Program Guard: kernel event 19/10/2012 09:45 None OADriver: PostMessage, Msg: 0/0 3328 -> 308, Deny (protected) 308 - oaui.exe 3328 - RapportService.exe

Program Guard: kernel event 19/10/2012 09:45 None OADriver: OpenProcess, 896 -> 1392 - Deny (protected) 1392 - OAcat.exe 896 - RapportMgmtService.exe

Service started 19/10/2012 09:44 None C:\Program Files\Online Armor\oasrv.exe

System boot 19/10/2012 09:44

Share this post


Link to post
Share on other sites

OldGifford,

If a program is shown as trusted program it's not excluded. Excluded programs don't show in programs list.

It is recommended to exclude other security software. Open Online Armor > Options > Exclusions.

Add the Microsoft Security program folder and Trusteer Rapport folder.

If possible, exclude Online Armor in the other security software.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.