system
41
Hi (again!) Tech,
Yeah, originally it was thought that the ‘Klif’ had been installed by Kaspersky itself, that is, left behind from a previous install of the full AV, but I’d never done that. I’d uninstalled the online scanner, and removed the file you mention. It took a while before ZoneAlarm was found to be a possible suspect!
Well, by the path of the files I will say that ZA IS guilty here, not only suspect 
system
43
;D Yes, it’s obvious now they’ve all been found! The analysis of the memory dump revealed that the problem was with C:\WINDOWS..Klif, and so ZA wasn’t immediately apparent. Because it was a Kaspersky driver, there was a more obvious suspect! Having deleted this entry, and run a search for “Klif”, the others came to light, and ZA was in the frame!
