B9 Zonealarm conflict

Corsa11us · Guest

The latest information I have is that..... ZA have assigned all my E-mails as "Closed" without the decency nor courtesy of a reply!!

Firetrust, to the contrary, have been excellent but I need to get back to them re one or two problems. They appear to suggest that I'm running too much of the same type, i.e., "ZA4" ..."VAG Pro6"...and that running "Benign" is/was just too much to add to the memory drain of the PC. So how is it that everything worked perfectly, and in harmony, until I upgraded to "ZA 4" and "Benign 1.36" from "ZA 3xx" and "Benign 1.35" respectively.

Full marks to the Mailwasher/Firetrust teams but I'm disgusted at the ignorant attitude of Zonelabs.

Colin.

Ivan Fraser · Guest

Hi

Thanks for your input.

I followed to the letter the advice given by ZA on a thorough uninstall of ZAP, including all related reg keys.

Started B9 - same problem.

I was surprised when I eventually reinstalled ZAP to find my license number automatically reinserted.

Something was left somewhere.

If you look at the previous thread, you'll see lots of evidence to support the likelihood that ZA is the culprit - somehow - at least initiated the problem.

My B9 loaded fine until the update - as did others.

My B9 loaded fine on the reboot after install. It was only after I had set up ZAP from the welcome screen after a full install (rather than upgrade) and rebooted, that B9 started eating up the virtual memory on startup, and the same on uninstall.

True Vector was definitely not running on several occasions when loading B9.

I know it sounds silly that ZA caused this, even when uninstalled - that's what's making this so frustrating.

Fact is, it's the only thing to have changed before the problem started.

Everything else on my PC is running perfectly, as long as I don't load B9.

Ivan

Corsa11us · Guest

[quote="Corsa11us"]The latest information I have is that..... ZA have assigned all my E-mails as "Closed" without the decency nor courtesy of a reply!!

Firetrust, to the contrary, have been excellent but I need to get back to them re one or two problems. They appear to suggest that I'm running too much of the same type, i.e., "ZA4" ..."VAG Pro6"...and that running "Benign" is/was just too much to add to the memory drain of the PC. So how is it that everything worked perfectly, and in harmony, until I upgraded to "ZA 4" and "Benign 1.36" from "ZA 3xx" and "Benign 1.35" respectively.

Full marks to the Mailwasher/Firetrust teams but I'm disgusted at the ignorant attitude of Zonelabs.

Colin.

It would also appear to be the case that, as I'm now further informed, ZA 4 also eats up more memory than previous versions and this is what is pushing "Benign" over the top.

I was further advised that ZA advise all other A/Virus programmes be switched-off when using ZA 4.

Ivan Fraser · Guest

I second your attitude to ZA, unless they can come up with some evidence that they are on the case.

I just did all the uninstall thing again, plus reinstalled OE, took out Mailwasher.

Nothing at all relating to ZA in the system - still same probs without anything running in the background.

This time, when I reinstall ZAP, I had to manually re-enter my reg code.

I'm 100% sure I had ZAP entirely off my system. And B9, before reinstall.

ZAP has interfered with something in XP it seems.

Time to hassle ZAP I think - their advice is entirely erroneous for this issue.

Ivan

TimeGhost · Captain Joined: Apr 11, 2003 Posts: 648 Location: USA

Ivan Fraser · Guest

The following is what I did, and if it left stuff behind, it would narrow it down to that as the cause eh? But that's beyond my ken to wrestle with :0)

Ivan

In order to completely remove ZA/ZAP from your system, please do the
following. If any of the steps below do not apply to you, or you are
unable to perform the function listed, please continue to the next
step.

If you plan to reinstall, then before starting, please be sure to
download the latest version:

http://www.zonelabs.com/store/content/c...a_grid.jsp

If the link above does not appear to work, be sure to REFRESH the
download page, as it may be cached locally.

Note for ZoneAlarm Pro users: In order to download the latest
version of ZoneAlarm Pro, you must have a valid key. To find out if
your key is valid, click the OVERVIEW >> PREFERENCES tab. Then click
the CHANGE LIC. button. Your expiration date and time will appear
directly underneath the license number.

If your key is not valid, use the following link to renew:
http://www.zonelabs.com/store/application?
namespace=zls_main&origin=global.jsp&event=link.skuList&&zl_catalog_vi
ew_id=201#renew

Be sure to install from an account with Administrative privileges, if
your OS supports them.

Please do the following. If any of the steps below do not apply to
you, or you are unable to perform the function listed, please
continue to the next step.

First, check in the upper right-hand corner of the ZoneAlarm Pro
Window. You should see an "All Systems Active" message in green
letters (to the right of the lock).

If the panel is displaying "All systems Active" and ZoneAlarm Pro is
still not functioning properly, it is possible that some files have
become corrupt. To repair this problem, please follow these steps.
Please note that this will remove your program permission settings
(so you may want to make note of them), but re-establishing them is a
simple process.

1. Open the ZoneAlarm Pro program, go to the OVERVIEW >> PREFERENCES
tab, and make sure the Load At Startup box is UNchecked.

2. REBOOT.

3. You should now have no ZoneAlarm/ZoneAlarm Pro processes running
on your system.

4. Now run Start, Programs, Zone Labs, Uninstall. Be sure to say YES
to delete all files, and you MUST allow TrueVector service to shut
down in order to remove files, if asked.

WARNING - Do NOT run the ZoneAlarm Uninstall program while in Safe
Mode. The program may not be able to make the proper registry changes
in Safe Mode, thus generating errors after a reboot.

5. REBOOT.

6. To make sure that you can see the ZoneAlarm/ZoneAlarm Pro system
files, if they are still on your computer:

a. Right-click on Start, then left-click on Explore. When the
Windows Explorer panel appears:
- In Windows 95,98,and NT: Click View>Options (in Windows 98,
this will be called "Folder Options"). Click the "View" tab, then
click the "Show all files" radio button.
- In Windows ME, 2000: Click Tools>Folder Options. Click
the "View" tab, then click the "Show hidden files and folders" radio
button.
b. Click OK.

IMPORTANT NOTE: Making modifications to system files may disable
crucial functions of your Windows operating system. We strongly
suggest re-enabling the "Hide files and folders" feature once all
ZoneAlarm/ZoneAlarm Pro files have been removed. See the following
web page, and verify that the files and folders are removed:

7. Click on Start, then Search or Find, and select Files. Make sure
that the location box is set to search your local hard drive (usually
C Smile

or All Local Drives.

Type the following exactly - delete any folders found:

zonelabs
zone labs

Type the following exactly - delete any files found in \Windows or
any subfolder below it, or in your \Temp folder):

vsdata.dll
vsdata95.vxd
vsdatant.vxd
vsmonapi.dll
vsnetutils.dll
vspubapi.dll
vsutil.dll
zlparser.dll
zllictbl.dat

Type the following exactly - delete any files found in any folder
with "Programs" in the pathname (delete the file ONLY):

zapro
zonealarm
zonealarm pro

Open the Internet Logs directory (in 95/98/ME this will
be "c:\windows\internet logs", in NT and 2000 it will be
c:\winnt\internet logs, in Windows XP it could be either of these
folders). If you need to keep a copy of old alerts, copy the
ZAlog.txt file to another location first - then delete ALL files in
this folder.

8. Make sure your Recycle Bin is empty (right-click and select Empty).

9. REBOOT

Now you should be able to get a clean install of the new version. Be
sure to NOT use the old settings as this can cause further
difficulties if the database is corrupt.

NOTE: If you received an error message upon deleting the files, or if
the original programs remain in the Programs list, or if the problem
persists after this, removing the files in Safe Mode will allow you
to delete the files properly. If you need further help with this,
please reply to this email keeping all text intact as we do not
archive previous emails.

10. Remove registry entries

****************************************
It is not generally necessary to remove registry entries if
reinstalling ZoneAlarm or ZoneAlarm Pro. However, should you choose
to do so, the following registry entries are associated with
ZoneAlarm or ZoneAlarm Pro:

Important Advisory: Deleting registry entries incorrectly may cause
serious problems to your operating system (OS) which may necessitate
the need to reinstall the OS. Please make sure you are able to
perform these deletions correctly before you decide to edit the
entries.

For information about how to edit the registry in Windows,
type "regedit" (or "regedit32" depending on your OS) from a command
prompt. Click "Help," then "Help Topic." Click "Changing Keys and
Values."

Note that you should back up the registry before you edit it.

To enter the registry, go to Start/Run and type: "regedit." Use
Control-F to find and F3 to Find Next.
****************************************

To remove the registry entries, go to Start/Run and type: regedit.
Use Control-F to find and F3 to Find Next.

Registry Entries:

Key: HKEY_LOCAL_MACHINE\SOFTWARE\Zone Labs and all its subkeys and
values.
Key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall
\ZoneAlarm

If your system is running Windows 95, Windows 98, or Windows ME these
registry items starts the services required for ZoneAlarm.

Key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServic
es

Value: MiniLog and Value: TrueVector

Key:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VxD\VSDATA95

Under Windows NT/2000, these two registry keys, and all their
subkeys, denote the TrueVector service and the TrueVector device
driver:

Key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vsmon

Key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vsdatant

Under Windows NT/2000, this registry key and its subkeys denote
ZoneAlarm's alert logging service:

Key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\minilog

Under all operating systems, this is a database that contains a long
list of values, but only these values are related to ZoneAlarm and
TrueVector:

Key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SharedDLL
s Values:

C:\Program Files\Zone Labs\ZoneAlarm\tutorwiz.dll
C:\Windows\System\vsdata.dll
C:\Windows\System\vsdata95.vxd (if you are running WindowsNT or
2000, look for vsdatant.sys)
C:\Windows\System\vsmonapi.dll
C:\Windows\System\vsnetutils.dll
C:\Windows\System\vsnetu.dll
C:\Windows\System\vspubapi.dll
C:\Windows\System\vsutil.dll
C:\Windows\System\Zone Labs\html.tdr
C:\Windows\System\Zone Labs\vsdb.dll
C:\Windows\System\Zone Labs\minilog.exe
C:\Windows\System\Zone Labs\vsmon.exe
C:\Windows\System\Zone Labs\vsruledb.dll
C:\Windows\System\Zone Labs\zlparser.dll

For each user who has run ZoneAlarm Pro, there are registry keys in
Key: HKEY_CURRENT_USER\Software\Zone Labs

The following keys allow the user to modify the sound that is played
when there is an alert through use of the Control Panel Sounds
applet:
Key: HKEY_CURRENT_USER\AppEvents\EventLabels\InternetAlert
Key:
HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default\InternetAlert\.curre
nt

On Windows95/98/ME systems, the following keys tell Windows the
ZoneAlarm Desk Band is a part of ZoneAlarm:
Key: HKEY_CLASSES_ROOT\CLSID\{long string of characters}
\InprocServer32
Value: C:\Program Files\Zone Labs\ZoneAlarm\zoneband.dll

The string of characters will vary from system to system.

The following keys are related to ZoneAlarm's MailSafe Feature, and
can be removed:
Key HKEY_CLASSES_ROOT\zl0
Key: HKEY_CLASSES_ROOT\ZAMailSafe

REBOOT.

TimeGhost · Captain Joined: Apr 11, 2003 Posts: 648 Location: USA

And after all that, your license number was automatically inserted upon reinstalling? Confused

Ivan Fraser · Guest

Yes, the first time I did it.

So I must have missed something then. There was one component - zllictbl.dat - that I am sure I didn't get in search and delete the first time.

But today I did it again and double checked everything, from the search panel and in regedit.

If there had been any of the above still on the machine, I would have found it.

Looks like I wasted another couple of hours stabbing at the dark :0(

Ivan

TimeGhost · Captain Joined: Apr 11, 2003 Posts: 648 Location: USA

You must be so frustrated. I've been there. I hope this gets resolved for you soon.

Whirlwind · Posted: Mon Jun 23, 2003 10:50 pm Post subject:

A Solution At Last !!!! For You ????

Before I start, I want to ask you all to do yourself (and all of the rest of us) a favor and read ALL of this post!
I am NOT part of ZoneLabs OR FireTrust Technical Support, but I AM a technician. In troubleshooting, I try (as most of you seem to do) to look at any & ALL possibilities ... EVEN the most obvious ones! The best place to hide a tree is in a forest; and very often the answer (to a problem) is jumping up & down right in front of us !
I will tell you what the problem WAS for ME, and suggest that it MAY ALSO be YOUR PROBLEM !

My test machine is running Windows ME, but my problem turned out NOT to be "OS specific" !! I was beta testing ZoneAlarm (4.0) and am now running ZoneAlarm 4.0 along with MailWasher & Benign.

I thought that I had the latest version of B9 ... then I saw the topic, "Benign 1.34 available from http://www.firetrust.com/" (with a new posting on it!)! It turned out to just be some "Joker" (viraj joshi) who just wanted to say, "hi" that caused the "string" to be flagged !!
Anyway, the string was talking about version 1.34. Since I could NOT check for myself what version I had from the help menu (it would NOT even START!), I decided to go to the downbload page and see what the latest (current) version number & DATE is. It turned out that I had never downloaded the current version! I downloaded the trial on March 28, and the current version is 1.3.6.1 released on April 22, 2003. The "Install file" size is 1,325,623 bytes.

After seeing the release date, I downloading the new file, compared them and saw that I had indeed been using an older version.

I installed the new version and it now starts up! I AM getting a "Stack Overflow" message, but after I click on the "OK" button the program screen (GUI) opens and everything works FINE! monitoring my resources used, it NEVER used more than 3% of avaiable resources

I would like to suggest to each of you that you check to see that you (in fact) have the latest version! If the program will start, check under the "Help" > "About B9". In the latest version the "version number" is near the top of the box that will open up. If you still have your "Installer File", the details are (again): version 1.3.6.1 released on April 22, 2003. The "Install file" size is 1,325,623 bytes. If you can't start it and DO NOT still have the installer, you can re-download it from http://home.xtra.co.nz/hosts/nickbolton/benign/benign.exe. This is the DIRECT download location for those who have downloaded Benign previously.

By the way ... Ivan, with all of the pages of posts that you have posted on this topic ... why don't you go ahead and open an account on ComputerCops ??? It will only take a few minutes, and its FREE !!!! Very Happy

rusticdog · Posted: Mon Jun 23, 2003 11:09 pm Post subject:

Thanks Whirlwind, I hope this helps some others as well. As a note have you disabled ZA4 from scanning your incoming mail ? B9 performs the same function anyway so this is not required.

Try as we can though we cannot get these issues to duplicate. We are still trying to wreck a few machine,s but as I suppose could be expected from Windows, it doesn't crash when you want it to Smile

On a 128MB machine, I've tried a fresh install of Win XP home, ZA Pro 4 and Benign, tried a variety of anti-virus software, and other applications scanning mail.
Found even after having up to 4 programs scanning all incoming mail at once the errors still do not occur.

How many of you experiencing this error were trialling a beta version of ZA4 ?
How many of you run AVG anti-virus ? I notice two users above from previous posts, also is it AVG free or AVG Pro ?

Also in anyone experiencing these errors on a PC that is not Windows ME or Windows XP ? We have not yet heard from anyone on another operating system, though we wish to be certain this is the case.
Also if you are an XP user can you specify whether this is XP Pro or Home.

Wayward · Lieutenant Joined: Mar 16, 2003 Posts: 282 Location: USA

Ok, rusticdog, I'll bite. Here's my story.

I downloaded the Zone Alarm Pro 4 upgrade several days ago, but was waiting for this thread to unwind before doing the install file double click. I just took an incredible leap of faith (for conservative me) and did the deed.

Gasp!! The upgrade install was normal and everything seems to be working fine. I've sent myself several test messages with attachments, etc. No problem at all. Here's my configuration.

Pentium III 1GB with 512MB RAM
Windows 98se
Pegasus Mail 4.02a
MailWasher Pro 3.1 with CFS
Benign 1.3.6
AVG AntiVirus Pro 6.0.491
AVG Personal E-Mail Scanner Beta 6.0.483 Pre-Release 21
Zone Alarm Pro 4.0.123.012

I'm doing the AVG Personal E-Mail Scanner Beta simply to test compatibility with Pegasus Mail, which is not directly supported by AVG AntiVirus Pro. The beta is kind of a universal e-mail client scanner.

I typically disable the Zone Alarm e-mail scanning feature, since there seems to be plenty of scanning going on. However, for purposes of this test I have tested with the feature enabled and disabled. No change in results.

I'd say it's a go for my setup. No apparent conflicts. My thanks to those who have suffered on my behalf and paved the way, as I built personal confidence. Wayward never wants to be first in line. Wink

And now, a question for rusticdog. Please take a look at my line-up of running programs and tell me what is redundant, when considering features of the Firetrust programs. I wouldn't mind a little simplification.

rusticdog · Posted: Tue Jun 24, 2003 12:43 am Post subject:

OK, at least it's not doom and gloom for all users then.

While you are running AVG Personal E-Mail Scanner I would disable AVG Pros standard incoming/outgoing mail scan (assuming the Beta scans outgoing as well)

I would also disable ZA incoming mail scan, B9 takes care of the incoming scan feature of ZA, which operates in a similar fashion renaming possible suspicious atttachments.
Disabling ZA outgoing mail scan is up to you, all it does is alerts you if your e-mail program tries to send a large number of messages, or tries to send a message to a large number of recipients. I have no idea of what features the AVG personal scanner has, but I imagine it would be more effectively in preventing virus's from spreading from your PC than ZA's scan.

Whirlwind · Posted: Tue Jun 24, 2003 5:53 am Post subject:


	Home ˇ Topics ˇ Submit News ˇ Top 10 This entire site, Cops Themes, and Computer Cops are Š 2002 - 2004 Computer Cops, LLC. All rights reserved. You can syndicate our news using the file RSS 0.91, ultramode.txt, or RSS 1.0. Acceptable Use Policy. Use signifies your agreement. Engine Copyright Š 2002 by PHP-Nuke, GNU/GPL Licensed. ICRA Member. Paul Laudanski, Member of Computer Cops, LLC Server Load: 1014 pages served in previous 5 minutes. Page Generation: 0.835 seconds.