Zone Alarm help. Please!!

Sorry for the Delay in Replying. emt80 is using ZA Free VER. 6, I am using VER. 5.5.094.000 . It has worked very well for Me for the past year. I have a 3Meg Cable Conn. and I use FireFox to Download  Programs Inc. ZA  from ZA  Website . zlclient.exe is not needed and does not show on ZA Program Control unless I Click on Man. Updates. I do not find zicomdb.dll on My ZA Uninstall List.  Is this a Legit dll?  I reread this Thread and I see Abnormal Actions. If the Problems Persist I would be looking for a Bad Guy in the Bushes .  I also use a Program called  AppDefend from Ghost Security. This Program Compliments ZA Free very well. It helps to Control what Starts up ,Runs , & Internet Access.  Good Luck

if there is somethign bad on my pc i’m unable to dtect it. both with all the programs I have, both with the trend micro on-line scan. At this point I don’t know what to do anymore. :cry:

  emy80  Normally the scans You ran will find a Problem but not 100% of the time. I checked My ZA & AppDefend Logs for the last 2 days  0 entries for zlclient.exe trying to access the NET . I ran a Google Search for zicomdb.dll . I got 2 hits both on this Thread. Can You look at this File & Scan it again ?

Hi emy80,

If you highlight one of the lines in your firewall log and click on that More Info button you will get this on the Zone Alarm web site:

[b]Zone Labs Client is trying to connect to the Internet or your local network

ZoneAlarm is asking you whether to allow the connection. No breach in your security has occurred. Your computer is safe.
What should I do?

Give Zone Labs Client permission to connect. See the Details tab to learn how to do this.

Why?

Zone Labs Client is a core component of the Zone Labs Internet Security range of products, including Zone Alarm Pro, which acts as a firewall, to protect your computer from unauthorized access. Zone Labs Client is normally located in the C:\Program Files\Zone Labs\ZoneAlarm\ directory. If the program is located in a different directory, than you should probably be suspicious of the program. It is normal for this program to request access permission, and it is safe to grant permission.[/b] <<

Or you can just click this link http://pralerts.zonelabs.com/pranalyze.jsp?record=ZLN37162680836295-1026/5bfbd8010a7beb01e600697e&tab=overview

I too have zlclient.exe logging outbound connections. Since its in the proper directory I’m not terribly concerned about it.

Hi! Sorry I’m writing now. Since I uninstalled ZA version 6.0…and installed the version 6.1.737.000 I don’t have that file anymore. I guess it was a file in the previous version ov ZA. Sorry I can’t help anymore.

I am not particulary concernd anymore about the zlclient.exe. But i noticed that if another application like a chat program like Trillian or MSN try to access the net the DNS is at random. And usually it’s linked to the firefox page I was visiting. For example some days ago I launched iTunes and as expected it tried to connect to the net to access the iTunes music store. Few seconds before, I was checking the livejournal.com site and sure enought iTunes tried to access a DNS with that URL. Same problem with Trillian. If I visit a page and then launch it, as the rule I set, it asks for access to the net. Last i tried I was checking this forum and sure enought the DNS was something with avast.com in it. I guess it’s just a glitch of ZA.

If you launch a program that should access the internet, and it then does access the internet I wouldn’t take this as suspicious activity. Particularly so if the sites are known to you or at least not questionable.

I don’t have an explanation for the particular connections Trillian and iTunes are making but I do have a guess. Since Trillian functions with multiple chat services it probably looks at your connections to see if you’re connecting to one of the supported servers. Similar for iTunes and internet radio, etc. As I said, this is a guess and others may have better insight on this.

On the other hand, if you see programs seeking internet access when you haven’t run the program (other than background processes like Windows Updates), programs you don’t recognize, or access to sites in China, Russia, etc you should probably investigate further.

I have another problem. Lately I’m getting tons of UDP attemps of access blocked from the ZA. It seems all of those are directed to the port 3924.
Ando some time I get some ICMP(type:8/subtype:0). ???
I would like to download the software Polonus suggested but I have Windows XP and in that site there is just win 200 and NT listed. Which one should I download? Will it work ok with XP?

Instead of worrying about every attempt of some rogue computer trying to access your computer,
why not just shut off the notifications and let ZA do it’s job of protecting you from these attacks.
Stop worrying about things that you can’t change and don’t affect you and enjoy your computer and the net. :slight_smile:

ok. Thansk! Sorry. It’s just that I’m afraid I’ll lose my datas right now. Thanks.

Just remember, the blocked items will never hurt you because they never get to your computer.
It’s what doesn’t get blocked and/or what you allow to be processed that deserves you attention. :slight_smile:

ok. Thansk! Sorry. It's just that I'm afraid I'll lose my datas right now. Thanks.

If you fear that, ensure that you back-up your data so no matter what happens you don’t lose that data. You need a back-up/recovery strategy so you can recover from a system failure of any kind.

I take a weekly image of my Primary hard disk partitions and store them on a second hard disk, it could also be saved to DVD and stored away from your computer or saved to an external hard disk enclosure.

I take daily back-ups of my data that constantly changes, .doc files, email, address book, favourites, etc. anything you don’t want to lose a weeks worth of updates covered by the disk imaging software. So at worst I could lose 1 days worth of changes, so the lose wouldn’t be total.


emy80,

The program Polonus mentions works with either W9x (95, 98, 98SE, & ME) or WinNT. Both 2000 and XP are based on WindowsNT. So, one download version should work for you. Guess which one? :wink: :smiley: