As of 6/10/2009, Zonealarm started catching a global windows hook from MS Word (Office 2003) in the OSFirewall log. Prior to 6/10, I hadn't seen any similar messages. Windows is showing a restore point at 6/10/2009, 3am, which correlates with a mrt.exe process spawn (I don't recall having the computer on at that time, however). Did MS push a change recently that caused this?
Operating System:Windows Vista Business
Product Name:ZoneAlarm Internet Security Suite