Does the firewall protection continue or does it drop out when the some relevant .exe is killed?
In TaskMan, generally I would see:
- app: GlassWire.exe
- background: GWIdlMon.exe = glasswire computer idle monitor
- background: GWCtlSrv.exe = glasswire control service
Which of these (if any) is the actual firewall?
web systemexplorer does not help me
- Is glasswire.exe simply the UI? It does not recover if killed.
- GWIdlMon.exe does restart if it is killed or fails.
- GWCtlSrv.exe does not recover if killed. The service can be re-started.
Whichever is killed, the monitor icon in the notification area continues to be shown. It seems possible this is not indicating the true status, which would be giving a false impression. (Windows 10)
Sometimes I also see the all the .exe runnning, but the icon has vanished.
I was curious because I have sometimes noticed glasswire drop out & stop working in the early hours. Iām not sure why, but I notice itās gone, and I have not been notified of any failure as I would hope.
(The failure may be due to some other program such as a cleaner, rather than malware, but still I would like to be notified whe glasswire is stopped.)
Small note: incognito state does not persist when the service is restarted - but that is a separate question.
What I would like:
- the firewall to continue to function always, to restart components if killed unless stopped in an orderly manner.
- to be notified if the firewall does fail, with advice to restart if not
automatic. - for incognito status to persist (over restarts, indeed)