It took me way too long to figure out the culprit responsible for some reason ZoneAlarm doesn't show us what files have been quarantined by the spyware remover. All I saw was an entry for "Win32.Trojan.Dropper...etc" in the log and never connected that with UltraVNC.
"It is recommended that you delete this application immediately because it constitutes security and privacy risks and has no known usefulness"
Get a clue...VNC is a real application that is installed for good reason on people's PCs. You are doing them a disservice by silently deleting files essential to this application. Not only that, why would your delete the client rather than the server? The client is only useful to the person sitting in front of the computer.
Anyway, as a result, I'm disabling the spyware scanner.