ZoneAlarm Security Suite 7.0: New AV Engine

ZoneAlarm 7.0 has been released and is available for download. One of the major improvements for 7.0 is the new AV engine. I wanted to provide some extra details about why this improvement is so important.

The Extended Database:
The new AV scanner will scan not just for Viruses, but also Trojans, Keyloggers, Remote access tools (in case someone attempts to install VNC server on your system without your knowledge). This is all done in the AV scan itself and also extends to the on-access scanning. Most other AV scanners limit the on-access scanning to virus-only -- they don't provide on-access scanning for trojans, keyloggers, etc.

This means that if a keylogger (or other malware that isn't specifically a virus) gets loaded on your system and attempts to start, the on-access scanning can catch and quarantine it. After you conduct a scan, in the scan results window, you may see malware with "not-a-virus" pre-pended to the virus name. This usually means it was detected by the Extended Database.

If you have installed a remote access tool like VNC, and it's getting picked up by the scanner (remember, bad guys use these tools on compromised machines as well), you can use "Ignore Always" in the scan result window. This adds that program to the "Exception list" and the scanner will ignore it during subsequent AV scans.

To enable or disable the Extended Database entirely, go to Anti-virus | Main and select Advanced Options. In Advanced Options, go to Scan Options and deselect the check box that says "Enable extended database".

ZoneAlarm products also provide the Anti-spyware scanner which still operates as it did before -- this new function of the Extended Database expands coverage and adds on-access protection for spyware contained in the Extended Database. It's almost like having two independent spyware scanners on your system -- these two powerful, complimentary anti-spyware technologies provide the best protection possible.

Read more about other significant changes in ZoneAlarm Internet Security Suite 7.0.

 

Comments

[Bob]

Any word on getting Zone Alarm to ignore VNC after being set to "ignore always"? I'm getting pretty sick of it trying to remove VNC every night when I run AV scans.

[Connie McAdam]

Dang ZA 7.0.337.000 update killed my Win XP Pro Boot Drive !!!!! On the first boot after the update it gave me something like ZA has major problems starting ... sending error report ... blah ... blah ... blah

Some 2 weeks later we had to install my only ghosted boot drive - which then updated ZA - and I have now got the same error message - meaning Zone Labs has still not fixed the problem and continues to auto distribute buggy software that is making data inccessible!!!

Guess my husband will now be using Zone Labs as an example of "what not to do" when he teaches his college CS/Eng classes .... Likewise, he had been waiting on the Vista update for a long time, is disgusted and seeking other prodcuts - to also recommend to his students.

Zone Labs, you are becoming as unresponsive to customers as Norton/Symantec ... and will slowly suffer the same decline with this sort of service. This is exactly why competition in the market place is best for consumers. Those with a monoply (to include MS) increasingly put out a crapier product and become less responsive to consumer needs. In short you become lazy and lethargic ... and focus on short term profit margins rather than a long-term satisfied customer base.

Con

[Singo]

Why does ZoneAlarm cost 49 Euro for europeans, while it only cost 49 dollars for the rest of the world? We europeans have to pay 33 percent more for Zone Alarm than the rest of the world.

[Simon]

I've tried ver 7.0.337.000 and still get the BSOD on my win 2000 PC at start up .....Very disappointing after so many years of great Zone Alarm updates

[jono2u]

Will:

While this blog isn't a location for tech support (our forums and gurus in those forums are much better http://forums.zonealarm.com/zonelabs) and we usually delete tech support requests, I'd like to point you to the Release History page so you can review/download older versions:
http://download.zonelabs.com/bin/free/information/znalm/zaReleaseHistory.html

Also, make sure you are on ZA version 7.0.337.000 as this one has all the latest fixes and may resolve the problem. If you have this version and it's unstable, you can revert to an older version. If you can, please use the in-client automatic error report, we do look at those and use them to resolve customer conflicts.

[Dawn]

I have the EXACT SAME PROBLEM as Will V--get the same STOP error and BSOD, and I too have Windows 2000.

I've read others who reinstalled version 6.5. How can I get another copy of it?

[Will V]

Just upgraded from 6.5 to 7.0 on my Windows 2000 machine. After rebooting I got the "Blue screen of death" with error:
STOP 0x0000001E (0xC0000005, 0xBFE9ADDB, 0XEB81FEF4, 0X827F0001)
"KMODE_EXCEPTION_NOT_HANDLED" then it reported srescan.sys as a failng file. The only way I managed to get around this was to boot up into safe mode and rename srescan.sys. It then finished rebooting and completed the installation. If I renamed srescan.sys back it fails to boot again. What is going on? Is there a fix for this? Is Windows 2000 supported?

[Goyo]

I have been a zone alarm fan since 1999. I first used the firewall and to date it is beyond a doubt the best firewall in existence. I dont like to have too many different programs installed on my computer so thats why i was interested in the security suite. I used 6 and loved it although it missed a few spyware that spyware doctor always found. I got the message to update to 7 and it was a disaster. I read all the info about the new AV engine and wanted it.

I currently have a gateway laptop with winXP SP2 media center and when i first installed it the computer could not even boot. I always got these memory errors related to apps that run at startup. I had to remove it in safemode. I went abck to version 6.5 until i got some new info.

Zonealarm security suite 7 is incompatible with many programs that are built into media center.
What i did was real simple. After reinstalling 7.0.337 i unselected the option to load za on system start. Then i sent a shortcut of the security suite in my starup folder within programs.

So far success. My computer boots and zonealarm does eventually start up when i start my pc.

However there still exists a problem. although the av and as engine does work and does update, at times they seem to be updating perpetually. Even when i am not connected to the internet and even if the option for automatic update is not selected.

Hope this is a bit helpful but just wanna say that zass7 is beyond a doubt the best security suite in existence and just be a bit patient, troubleshoot and read. Lots of users out there have the same problems

however i do believe that Checkpoint should have done something about it seeing that there are so many complaints.

[Tom]

The BSOD is not isolated to MC. It also effects Windows 2003 Server

[joey af]

Upgraded from 6.5 to 7. Now Windows does not boot correctly and no icons appear on my desktop, therefore my computer is useless! I did a clean uninstall/install.. same thing happens.

Gone back to 6.5 and looking for new software for antivirus and and firewall. Not good enough CheckPoint.

[paulk2]

I have the same problem as cyberjake4d: VNC will be picked up EVERY SCAN even if you select IGNORE ALWAYS. Please fix this.

Thank you!

[Leo]

Zonealarm 7.0 makes DEP of my windows media center go maaaaad.
When I install ZA 7.0 the DEP starts to block every program that wants to start. I changed the settings but it won't help.

When I install 6.5 and remove 7.0 everyting works PERFECT.

Anyone with this problem? or tips?

[Rick]

I have been a customer of zonelabs from there first product..

and i have all ways been happy with every aspect of zonelabs software..

but i am disheartened by the fact that there is no protection for windows vista yet...

all other security software makers have released vista versions of there product but we the users of zonelab security products are out in the cold..

it would not be so bad but you have not even posted anything on your website stating we are with ya we feel you pain.

we are working as hard as we can to get you a working product for windows vista..

windows xp computers are disappearing off the shelfs most places are only selling vista based computers now and from a business stand point you are losing sales...

and i have another thing i have to say the zonealarm internet security suit box says vista compatible same on you don't you know that will drive clients away from you..

you are all ready losing them in droves because people can not wait around for zonelabs to get around to making a vista compatible product they have to go some where else..

and in closing i just have to say i am giving you guys another week if i don't here something just a note that shows zonelabs cares

about it's clients I'm going to start looking for another security solution and i will recommend what ever i test and find to work to my clients

[chas]

my za free is 6.5.737.000 & za indicates it is up to date. i don't get the bsod while using media center 2005. i have other issues with media center, but with this za i have none. i suggest trying the older za.
i am waiting on my upgrade to vista, but will wait to install until issues are more resolved.

[Bob]

The ignore always doesn't ignore VNC.. I have to always check ignore always again. BUG!!

[CyberJake4D]

Dear ZoneLabs/Check Point representative,

According to many ZoneLabs and Kaspersky forum posts, it seems possible that the newest AV engine from Kaspersky is incompatible with many other software programs. Security and non-security programs.

This could be the main root cause with ZA/Check Point version 7 firewall products. (Somehow, technically, problems even with your free firewall version 7 too which has no antivirus!)

As a ZAPro user, my wish is that ZoneLabs/Check Point, as a firewall company primarily, will be able to coordinate with its partners the compatibility issues with other security software companies whose products are not integrated to yours.

Using Windows XP OS, Webroot SpySweeper 5.3 antispyware (no antivirus) and ZAPro 7 may not work well together anymore and cause problems in MS IE 6 and Adobe Reader 8.

My antivirus is Eset NOD32 v2.7 and I will keep it. My appreciation to ZoneLabs/Check Point for their ingeneering of both modular and integrated products that allow compatibility.

(In the near future, when the current version 7 issue is solved, I may switch to ZASS (with the antivirus turned off) for the benefit of components not included in ZAPro.)

(A few years ago, when TrendMicro PCCillin Antivirus became a Security Suite, their firewall could be shut down in order to use my ZAPro firewall. Fine. But their SS with an integrated antispyware didn't allow PestPatrol to run simultaneously.)

Many users want to use/learn/play with other security programs. Okay, just one firewall and one antivirus at the time. In the future, one integrated security suite running alone? No more DiamondCS ProcessGuard, or Webroot Spy Sweeper, or others running simultaneously?

[John Doue]

I am one more victim of version 7.0 of the Suite on a Media center machine. It causes lots of troubles and I spent a lot of time troubleshooting, until I came to the conclusion ZASS does not work my Media Center. I would gladly dump Media Center but it was on my machine when I bought it, and this would mean roughly 2 weeks (not full time, I am a working stiff!)of customizing before my machine is the way I want.

I would be mad if I had paid for this software. Fortunately, the software version spared me this offense.

And any one who knows to go to a "normal XP" without having to start from scratch, let me know ... XP refuses to install over Media Center, which MS considers an "upgrade" from XP. Well, I have no interest in this version, and I get exactly the same services from XP Pro, less the trouble with various software (ZA is not a unique case of overlooking Media Center).

[Jerry from Scotland - also unhappy]

I agree with Claudio. I am currently paying for a service which I am not receiving. Where is the vista upgrade I was promised a few months ago when I bought ZoneAlarm Anti-Spyware? FYI, free anti-virus software, such as AVG, have already released their upgrade...

[Josh]

It is now almost 2 months after the release of Windows Vista, and Zone Labs has still not released a version compatible with this new OS. I can't go on any longer with out a firewall i have to find a new one.

[Claudio from Rome - unhappy user !]

ZA Security Suite 7 worked fine at the beginning, and then for some time too, but recently I found out that virus scanner does not work properly: for instance it is unable to scan the "WINDOWS" directory. I uninstalled ZA Suite 7 and then installed back again, but this action has not solved the problem. The problem came up after updating a couple of weeks ago (more or less) the viruses data bank. My OS is Windows XP SP2.

[A55w1p3r]

Likewise, have ZA Security suite installed,tried to install ZA 7-BSOD badly.Would repeat over and over again even before I had a chance to press F8 for safe mode.WTF people?If you haven't finished testing it-take it off download area.......If you want new comers to get same and be turned off forever-it's your call....

[Tom]

(Sorry about the stuttered post. Here's the better one.)

===================================

Zone Alarm Free 7 causes the BSOD, for Windows XP Media Center.

The O/S requirements are nowhere to be found on the install page. The User Guide (which is *not* prominently linked to) does show:
- Microsoft® Windows® XP, Home or Professional Edition

When I installed 6.5 on Windows 2000 Server, a message did alert me that this O/S was not supported (I still installed, and it worked). When I installed 7.0 on XP Media Center, no such message appeared. An alert like: Blue Screen of Death likely, would have been nice.

Or can't something more prominent be placed, like maybe on the download page?

The user forums are filled with people complaining about the BSOD on XP Media Center. Imagine the tons not posting about it. Heck, it's hard to even know that you have XP Media Center, because all it shows is "Windows XP Professional". I mean, if you say it's certified under XP Pro, I think I qualify.

If ZoneLabs cares, they'd be much more upfront here. The Free product should be a gateway into the ZoneLabs products, not a turnoff to never come back.

You have thousands of people who installed the product on XP Media Center who got the BSOD.

Does anyone out there care?

[Happy User]

WinXP (Pro SP2) Security Center complains that ZoneAlarm Antivirus is out of date. I installed v7 on top of v6.

[hbpencil]

When will the Japanese version of Zone Alarm 7 be released?

[jono2u]

The ZoneAlarm/Vista specific information is available here:
http://www.zonelabs.com/store/content/catalog/products/vista.jsp

Hope that answers your questions...