Results 1 to 4 of 4

Thread: netstat invisible to zone alarm pro (undetected no option allow deny)

  1. #1
    laffern Guest

    Default netstat invisible to zone alarm pro (undetected no option allow deny)

    win xp pro, zone alarm (free), netstat.exe---
    I use netstat.exe within cmd.exe.
    Have been using zone alarm (free version) for many years. All this time, when running netstat (c:\windows\system32\netstat.exe) with any option, it would try to connect to internet (i guess to resolve ip addresses to/from host names) and be detected by zone alarm (popping up an allow/deny dialog). Pressing deny would result in netstat not working, pressing allow would result in netstat reporting all connections as expected.
    Some time ago, probably directly after a zone update, but maybe after an windows update session, netstat is never detected. Typing netstat, netstat -a, netstat -an etc will report all (known off) connections correctly. However, zone alarm never reports any traffic to/from netstat. I have reset all program policies (allow/deny/ask) to ask, still no help. TCP/IP netstat command (c:\windows\system32\netstat.exe) is reported in the programs list of zone, but there is never a dialog when it is used.
    Other commands like ping.exe etc is detected as normal.
    Anyone have a clue what is going on? Have zone on several machines with quite identical instalations, but only this one machine is troublesome. My ideas arecorrupted zone instalation (strange, since i have updated several times since this happened)infected netstat.exe file which functions as normally, except hiding some malicious connection. However, this would be strange, because it would
    still need to have some way of getting all the ip/host information without zone detecting it.
    I've almost given up
    completely, have researched this for months, no clues. All processes on my system are accounted for, spy ware scanned with ad-aware,spybot,zone pro anti-spyware, norman antivirus. No unknown ports/hosts open.
    Even uppgraded to zone alarm pro (v 6.1.744.001), set it to report all program activities (even netbios etc), no activity from netstat was detected.
    Any ideas ?

    Operating System:
    Windows XP Pro
    Product Name:
    ZoneAlarm Pro
    Software Version:
    6.1


    Message Edited by laffern on 04-30-200609:07 PM

    Operating System:Windows XP Pro
    Product Name:ZoneAlarm Pro
    Software Version:6.1

  2. #2
    Join Date
    Mar 2004
    Location
    Brisbane, Australia
    Posts
    645

    Default Re: netstat invisible to zone alarm pro (undetected no option allow deny)

    I don't use Netstat so I can't remember exactly what it does, however, it woul donly access the net if doing a DNS lookup.

    Try using one of the Netstat front ends (either TCPView from http://www.sysinternals.com or CurrPorts from http://wwww.nirsoft.com) and see if they are detected. Make sure you run them with Administrator priveges.

  3. #3
    laffern Guest

    Default Re: netstat invisible to zone alarm pro (undetected no option allow deny)

    allready tested tcpview on the problem machine. It is not detected either. I would assume using netstat -n would force netstat to do a lookup of hostnames with dns to be able to present them as ip addresses. However it doesn't connect (or isn't connected).
    Maybe netstat has been changed? Maybe it now uses cached values for the hostname->ip translation, I don't know. Still wondering why it changed from always going online (all my instalations for as long as I can remember), to never ever going online (or at least being detected doing so).

    Message Edited by laffern on 05-03-200602:06 PM

  4. #4
    Join Date
    Dec 2005
    Posts
    9,056

    Default Re: netstat invisible to zone alarm pro (undetected no option allow deny)

    Tried the netstat, and netstat-n was detected by ZA. Balloon pop-up showed the right info. Using ZA 6.1.744.001. Oldsod
    Best regards.
    oldsod

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •