Another incident of Zone Alarm shutting down

I posted my first incident where this happened to me and the first thing that came up was a possible trojan attack, I scanned my PC and it was clean. Now it's happened again (this time while setting up a connection with Outlook Express, as it was connecting to the mail server (and then as I removed said account from the list as I didn't need it). I scanned again for any trojans to make sure and it was clean, at first I thought it might be my anti trojan software so I switched from Trojan Hunter, since as you can see the first incident occured while using it, to Anti-Trojan Shield just to be sure about it. However it continues to happens, overall it's happened four times now and I can't figure out why, the PC seems to be clean... Any ideas what software, if it is that, could be causing this? It does prompt me to restart it as soon as it happens, but I wonder if it's something trying to get out of my PC and shutting it down in the process instead of trying to get in.

By the way, now two processes from outlook express were running but I could only shut down one... Kind of worries me someone could get access by it if that is possible.

Link to my first post about it: http://www.majorgeeks.com/vb/showthread.php?t=31440 for reference.

 

It doesn't send me to that page. As far as I can see I just get the 'Vector has shut down would you like to restart it' prompt. I have the latest version I downloaded form this site as well. don't know for sure if it's an attack or just something else.

 

Thanks for clearing it up, I will also give Outpost a run in another PC since you recommended, just to see how I like it.

Edit: As far as i could tell there was only once. I wil just go ahead and try Outpost.

 

ZA causing my crash

MY OS: Windows XP Home, Zone Alarm (home, free edition, not Pro)

For some background info: I have been posting under "mem usage for explorer.exe and ieplore.exe" and then I had a CRASH which talked about truevector...(Zone Alarm) being the culprit. So I did a search on MG and found this post about "another incident with zone alarm..."

I went ahead and did a search for wsock32.dll like you mentioned below. I only found 2. One in the C:\windows\system32 folder where it belongs and another one in C:\I386 folder. They both have 21KB, both made 8/29/02 (which was before I got my computer) both from Microsoft, etc. So it looks legit and I didn't rename it. BUT SHOULD I?

I recall having problems with Zone Alarm on my other computer therefore I stopped using it. I had McAfee and used that and my computer firewall and that was all. Now I have Avast but it's not enough to use Avast and my computer firewall is it? I'm not gonna put up with Zone Alarm causing a crash like it did yesterday.

 

Had the same problem with Zone Alarm a while back,twice in fact. All i did was delete it and reinstall,no problem since then.

 

I just had problems with ZA. I had deleted/reinstalled the program. I found out that before deletion you have to go to preferences and uncheck the box that enables startup at boot. I did not do this the first time and it squirrelled up the reinstall. Had to do it over correctly and it zings right along now.

 

Thanks -- I've already done this once and someone else here at MG informed me to uncheck that box before reinstalling.

I could do it all over again, but...

 

Anyone have an answer for this?

RE: xflat's message:

 

No please do not remove or rename the one in the C:\I386 folder, thats where Windows stores copys of system files in case of emergencys etc

 

OK - last question that needs an answer

Thanks - General -- that's what I thought since it looked "legit"

I know there's a lot of posts about firewalls and AV -- I'm just wondering about my ONE Question: Now I have Avast but it's not enough to use Avast and my computer firewall is it?

 

Re: OK - last question that needs an answer

Pegg,
I just scoured Zonelabs forum and It appears that this problem is literally ALL OVER THE PLACE on their forums. I did a search TRUE VECTOR SHUTDOWN and was bombarded with results (saw DSBNH had a few posts there about this problem). Apparently (quite) it is a big issue with users of ZA. My only suggestion would be to set your TrueVector service to restart on a crash. Look at the properties of the service and then make your adjust to "FIRST FAILURE" to restart the service.

Report back.

 

guess it wasn't my last question

Wow -- you're so nice to do what I should have done. I have been there to check other things but I didn't search for that.

Um, can I do this with the free version of ZA? I looked and looked on the "Control Center" re: how to do this and I couldn't figure it out....so....where can I make these adjustments. THEN, I'll be done with my questions (maybe, ya never know, possibly, there could be more...)

 

Re: guess it wasn't my last question

I think this has gotten lost in the shuffle...can anyone answer my question below please?

 

Re: guess it wasn't my last question

right click on MY COMPUTER..choose MANAGEMENT from the list..

CLick on the bottom of the tree where is says SERVICES and APPLICATIONS

now click on SERVICES in the right pane.

Now find TRUE VECTOR INTERNET MONITOR .. right click, properties.. select recovery tab and re-read my post above.

 

Re: guess it wasn't my last question

Thanks, Kodo, you did say "true vector service" and I do know where to go to work on my computer services -- I just wasn't putting the 2 ideas together (sorry) -- I've been into the services before to "disable" things but never to go into "recovery tabs" or "properties" I guess so that threw me. Thanks for helping.

 

Re: guess it wasn't my last question

let me know if it works..

 

Re: guess it wasn't my last question

Kodo, I have ZA free version (not Pro) and have had a few True Vector incidents). I am using W98. Any suggestions on how to turn on the automatic restart in W98. I assume your recommendation to Pegg was for XP as MANAGEMENT doesn't get a mention in 98. Baz

=============

 

Re: guess it wasn't my last question

Not an option in Win98.

 

Re: guess it wasn't my last question

Thanks kodo, that's what I figgered. Hope all MG'ers in tornado alley are safe and well. Baz

==========

 

Kind of ruins the idea of a firewall if it dies every now and then. One could guess that ZL is dying in their own succes, and not having enough resources so solve bugs/support/new features for ZA.

 

ZL have released a new version (24 May) of their ZA with these release notes:

http://www.zonelabs.com/

 

Guess it is not everyone who has sucess with the new version

http://forum.zonelabs.org/zonelabs/board?board.id=inst

 

Too true.. Hopefully it's just a bump in the road.

 

kodo, hope I solved my True Vector problem by installing ZA v5.

Thread http://www.majorgeeks.com/vb/showthread.php?t=33422 follows on about ZA v5 so we will see what eventuates. Dodge them bumps eventually, I hope. Bazza

==========