Is Zone Alarm itself a spyware product?

[no13]

Google Groups : Searched for <<zone alarm spyware iamdb.rdb true vector>>

http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&threadm=OVCn6.19%244F5.2953%40typhoon.hawaii.rr.com&rnum=2&prev=/groups%3Fhl%3Den%26lr%3D%26ie%3DUTF-8%26q%3Dzone%2Balarm%2Bspyware%2Biamdb.rdb%2Btrue%2Bvector%26btnG%3DSearch
(circa 2001)

There's more :
EZTrust Firewall (http://www.my-etrust.com/) uses Zone Alarm's code FULLY - it even conacts zone labs (and to think Computer Associates is owner of EZTrust) <i know this because i've tested it>

More bad news : ZA's new version conflicts COMPLETELY with kerio, while older versions had NO problems.
True Vector Client (vsmon.exe) CANNOT be ended/closed once the service starts, and you (as administrator of your own PC) cannot disable the service.

And now this (even tho' unrelated, but still interesting)
Check Point Software Completes Zone Labs Acquisition

REDWOOD CITY, Calif. - March 29, 2004—Check Point Software Technologies Ltd. (NASDAQ: CHKP), the worldwide leader in securing the Internet, announced today that it has completed its acquisition of Zone Labs®, Inc., the market leader in endpoint security.http://download.zonelabs.com/bin/free/rapidDeploy/press/2004/pr_8.html

Comments?

[CrazyM]

-{ Quote: "Google Groups : Searched for <<zone alarm spyware iamdb.rdb true vector>>

http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&threadm=OVCn6.19%244F5.2953%40typhoon.hawaii.rr.com&rnum=2&prev=/groups%3Fhl%3Den%26lr%3D%26ie%3DUTF-8%26q%3Dzone%2Balarm%2Bspyware%2Biamdb.rdb%2Btrue%2Bvector%26btnG%3DSearch
(circa 2001)

There's more :
EZTrust Firewall (http://www.my-etrust.com/) uses Zone Alarm's code FULLY - it even conacts zone labs (and to think Computer Associates is owner of EZTrust) <i know this because i've tested it>" }-
Old news that does not need to be rehashed. Zone Alarm is not spyware.

-{ Quote: "More bad news : ZA's new version conflicts COMPLETELY with kerio, while older versions had NO problems.
True Vector Client (vsmon.exe) CANNOT be ended/closed once the service starts, and you (as administrator of your own PC) cannot disable the service." }-
Running more than one software firewall on a system is not needed nor recommended.

Regards,

CrazyM

[no13]

Then how come ZA's logs store the name of my video card? And how come there's no indication of what the nature of ZA's communications to ZoneLabs is?

[Infinity]

someone is having a senior moment here:D

[no13]

-{ Quote: "someone is having a senior moment here:D" }-

I don't get it

[Infinity]

if you have application control on then it is normal that zonelarm logs everything (applications like drivers that are checking for updates, av's checking for updates, even m$ checking for updates or applications that changes by dll's,...) everything gets logged if you choose to log.

quote:what the nature of ZA's communications to ZoneLabs is

zonalarm is of zonelabs if I understand your question?? maybe I didn't get it...:D

[no13]

what's it talking to the bleeding zone labs servers about? I don't want ANY unsolicited data transfer takin' place. That's why i got ZA. And this turns out to be a Phone-home-r...
Has anyone ever done a sniffer on ZA ?

I've now shifted to Kerio for that reason

[Infinity]

changed to Outpost and I came from zonealarm. Now with Kerio and to be honest quite impressive but I miss the import facilities of the blocklist manager

[Infinity]

then I would not use norton too and say norton is spyware too cause how many times do they phone home and microsoft??? I find simply put a little over reacting. they could been checking for a update so that is legitimate if you ask me...

[no13]

i think blue tack has dealt with kerio import issue on its forums... do check it out

[Infinity]

i know but still figuring out. kerio is bout one week on my machine...like it though.

Thanx for the tip No13

[no13]

Anytime.
But anyone figure out what ZA is phoning home about.... with those "contact zone labs" options ALL disabled... no auto updates or anything.?

[Infinity]

maybe checking if your serial was OK????

[Infinity]

quote:" .... serial was OK????"


I don't want to say anything with my previous statement


it is common given by a lot of software if you ask me...

[no13]

I don't think it wants to check the blasted serial every time I connect, and even if it does, I don't think it should do that for 4-5 hours (or whatever duration of internet connection is)
Agree?

[Bubba]

Are you using ZA Free or Pro ?

[no13]

Used free for 6 months, tried pro (trial), tried Pro full on friend's PC. Same thing - all the time.
Junked it 2 years ago... tried it intermittently... never liked it.

[CrazyM]

-{ Quote: "what's it talking to the bleeding zone labs servers about? I don't want ANY unsolicited data transfer takin' place. That's why i got ZA. And this turns out to be a Phone-home-r...
Has anyone ever done a sniffer on ZA ?

I've now shifted to Kerio for that reason" }-

-{ Quote: "But anyone figure out what ZA is phoning home about.... with those "contact zone labs" options ALL disabled... no auto updates or anything.?" }-

Your assumptions and suggestions that ZA is doing something behind your back are just that without anything to corroborate them. Unsubstantiated statements like this are not very constructive. If you are truly that concerned and/or curious to see what is leaving your system, run a packet sniffer (Ethereal (http://www.ethereal.com/)) and put your mind at ease.

Regards,

CrazyM

[Devinco]

Also ZAP has the alert advisor which gives advice on whether to allow a program access or not. That may be what is connecting to ZA servers to find out.
Personally, I have found the alert advisor to be much too vague and not provide enough good info to make an informed decision. Definately not spyware.

[Mr.Blaze]

8) actualy it does have spyware kinda basicly an alarm when its being pirated

it reports back to zap then zap sends a bullet and zap becomes trial ware algain

but thats all it does

does it report on you nope

its just an auto response

no info about you is shared to the company

but if they wanted to they could add that anytime but because they value your privacy and dont want to be knowen as a firewall with spyware they dont collect info even from piraters strange

if it were me i say f it and collect info just because

[TheQuest]

Hi, no13

I agree with Mr. Blaze

I have DiamondCS Port Explorer's (http://www.diamondcs.com.au/portexplorer) and it shows ZAP neither sending or receiving anything, unless the user request some Information, apart from the first time you use it.

Take Care,
TheQuest 8)

[no13]

Good to know!!!
Thx a bunch!!!
But i would feel safe if some one could share results of a packet sniffing session, and can I block this communication? (I'm paranoid)

[TheQuest]

Hi, no13

-{ Quote: "Good to know!!!
Thx a bunch!!!
But i would feel safe if some one could share results of a packet sniffing session, and can I block this communication? (I'm paranoid)" }-
Try it useing DCS's PE your self:- DiamondCS Port Explorer (http://www.diamondcs.com.au/portexplorer)

Take care,
TheQuest 8)

[no13]

Ah heck... I want some one else to do it ... ZA's new version conflicts with Kerio, and I don't wanna lose kerio AT ALL (too much effort in rulesets)

[CrazyM]

-{ Quote: "Ah heck... I want some one else to do it ... " }-
There's no fun or learning letting someone else do it ;)

Regards,

CrazyM

[TheQuest]

Hi, no13

The only real tests to trust if you are really paranoid are your own. :)

I am not useing the Latest Version of ZAP, I still use v4.5.594.000, tried the newest but prefer this Version untill they get the newest build [Beta] sorted.

Take Care,
TheQuest 8)

[Mr.Blaze]

;D that not true you guys do alot for me and i have a great time lol

[TheQuest]

Hi, Mr.Blaze

-{ Quote: ";D that not true you guys do alot for me and i have a great time lol" }-
But your not paranoid. :D

Take Care,
TheQuest 8)

[Mr.Blaze]

8) lol blaze do tweety voice "he no know me very well" i did i did see a hacker

[Detox]

*shoves a rotten taco between Blaze's CPU and mobo*


:lurking:

[Mr.Blaze]

8) GRABS TACO LICKS IT I'S CLAIME IT MUNCHHHHHHHHHHHHHH ;D

[no13]

I dn get any of yo' convo after 1st post on the page.
C'mon Guys... whahappenedtomyproblem? Nobody's gonna install ZA and do a sniffer? I just got off a makor overhaul of my PC and still I have 80% crap that I'm finding hard to justify or remove... Don't wanna add ZA to the list. Anyway...
I'll do the sniffer in 2 days or so, and if it's interesting, I'll post here.
Note: what applies to ZA applies to EZ Firewall. They're the same, right down to the phoning home - ETrust tries to contact zone labs. :d
l8r g8rs

[Detox]

wellll as for me - I won't mess around with ZA b/c it's the firewall I used for the first many years of my online experience.. and while I cannot complain about the security it offered; I certainly will complain about the compatability issues I encountered - and these are many as I am a pretty avid online gamer.

So - I'll just grab another rotten (sheep) taco and throw it at Blazie.

[no13]

no13
\catches the taco in mid air.
\throws it out the window.
\gives both mods Kerio configs.
So if you guys would PM me, I will give you my kerio configs so that you can try it out. It hasn't any known issues but ZA reportedly leaves 2 ports open (13x and 6x I believe - you'll have to fill the x, I'm afraid...been a long time since I used ZA)

[Mr.Blaze]

Blaze catch it in mouth claps hand and munchs yummmmmm dead animal lol

real man meal

zap still great firewall

it only has two knowen issues i know of

aim cam problems

the other is pogo.com games you have to shut the firewall dowen lame

[Detox]

oop - well; don't give me your Kerio configs - I'm a pretty loyal Sygate user for some years now - but I guarantee that you can find more than one Kerio fan here at Wilders!

[no13]

Sure. Will do. So we close this thread now? Or you guys have 'nother taco to throw around?

[Detox]

no need to close - if you get no responses here then the best idea would be to start a thread asking about Kerio configs. In fact, I would recommend this because it really is a different topic - just ask your question/s in a new thread and I'm pretty sure you will get some very helpful responses.

*throws dog-meat taco at Blaze* oops... :lurking:

[Mr.Blaze]

that is very true hundreds of members use same firewall you do

but i think the best one is LooknStop Firewall i havnt tryed it but paul is extreamly selective in what forums he lets live on this bord

if you take a look around the bord you will notice only the best of the best is allowed to have a forum

lot of the software is top notch

has to be to be on wilders it isnt a coeincidence


Kerio is still high up in the chain id leave this post up

i bet you later lots of Kerio fans show up but lots of them are lurkers

[no13]

Sure.
no13
\gets hit by stray taco.
\falls on the floor.

[Mr.Blaze]

even i wont eat dog food taco lol id try dog taco lol big diffrence lol

[Detox]

That's a very good point (seriously now) that Blaze makes. I would venture that Look 'n' stop is on helluva firewall - but I will also say that (from what I have previousl read/understood in these parts) that it is a little more oriented toward the "puter savvy" - that is to say - it is a rule-based firewall. Should I be mistaken, I request correction. Anyway, a rule-based firewall is certainly not "worse" than an application-based firewall..

Err, anyway - are you familiar with the differences? If so - it's just silly for me to type this stuff :lurking:



And BTW Blazer I said dog-MEAT taco not Dog-food taco HMPH ::)

[no13]

Most firealls are as good as the configuration performed.
wasted too much time on kerio. It's free. Light. not fast... but what the hell... it isn't an appreciable drop.
Most users ill change firewalls if only thet see a HUGE improvement, or they see a li'l improvement PLUS a config converter.
Right?

[Detox]

err.. well... a rule-based versus an application-based really is apretty big difference. Otherwise - my preference - Sygate- is both application and rule based. I won't sit here and tell you it's the best - but I do love it for my protection needs - I run it on all three of my personal PCs - 2 of which hide behind my NAT router and this one which resides in "DMZ" since it hosts an awful lotta online gaming.

If you do not plan on doing any such hosting, I would venture to say that ZA will work just fine. This is exactly where I ran into trouble with ZA - the online gaming - and found that Sygate was very good at holding an application while awaiting access permission without crashing the app, etc.

[no13]

HEYYY... I know the difference b.w. app and rules based f.w.s...New kerio does both...old one was rules based. As far as gaming goes... sorry...new to broadband...no gaming here :(

[Mr.Blaze]

actualy if i wasnt so lazy id go full rule based firewall it is the best

the problem is you need to be puter saby detox is blaze isnt lol

im more of a the best newbie friendly software

but if i was smart like you two id go rule based

i dont think it be that hard just go threw google find all rule base rules for your firewall conpile a huge list

alot of those hardcore guys make big list

put them together and you got a hard fire wall built for war

kinda like what you offered by giveing us your list

if enough kerio fans got together and shared info you have bad ass ruleset firewall i think

am i off here or not

[Detox]

achtung well this is a little new to me - so as mentioned before it's best dealt with in new threads concerning each particular - which I believe you have already "instigated" so we will see how those go!

[jzkruzzn]

Any more of them tacos??

[no13]

Sorry ... they hit me with the last taco and I still don't remember where I am

[still_longhorn]

Is Zone Alarm a spyware product? Would a spy dress up in orange, brown, red and apple green? Great app! Awful colors! Jeez!

[no13]

Well... you remember Gator?
Anyway, the consensus here is that ZoneAlarm is safe for most people, and proof of otherise can come only thru a long term sniffer analysis.
<do use the link in the first post if you can't resist>