Results 1 to 9 of 9

Thread: Weird ZA behaviour in ForceField Toolbar... ?

  1. #1
    ananda Guest

    Cool Weird ZA behaviour in ForceField Toolbar... ?

    Hi

    Something weird happened some minutes ago.
    In one of the messages on the forum there was a link to download "cpes_clean.exe" .

    This is what was said in the ForceField Protection Activity part in Window FireFox:

    H:\Temp\cpes_clean.exe
    Check Point Endpoint Security Cleanup Tool
    Check Point Software Technologies Ltd.
    download.zonealarm.com

    ---> The regular scan could not verify this file's safety. <---

    Now I was of the opinion this ZA ForceField would recognize ZA's programmes. Right or wrong?


    And then this.
    A few days ago, Guru GeorgeV gave me a link:

    Daily AV/AS Signature Updates (09/16/09) for XP/Vista
    http://www.zaforums-stg.com/showthread.php?t=70305

    So I went to have a look.

    The ForceField Site Status reported:

    This Web site is suspicious. Leave now unless you know this site is safe. Read more.
    Get immunity from malicious sites! Click here.

    I've tried several times. And each time the same result.
    I left it as it was, since I do not really know it is safe... If it is, I should not have seen that message, should I? Or is there something wrong in the scanning programme?

    Anyway, I could not believe my eyes...

    What's going on? What to believe of this ForceField and what not?

    Looking forward to seeing anybody's enlightening answer.

    Ananda
    Last edited by ananda; September 16th, 2009 at 03:47 AM.

  2. #2
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,287

    Default Re: Weird ZA behaviour in ForceField Toolbar... ?

    Quote Originally Posted by ananda View Post
    ---> The regular scan could not verify this file's safety. <--- Ananda
    Yes, it can happen for both ZA or other files.

    Quote Originally Posted by ananda View Post
    Daily AV/AS Signature Updates (09/16/09) for XP/Vista
    http://www.zaforums-stg.com/showthread.php?t=70305

    Ananda
    Yes, sites not older than three months get this warning. Usually one characteristic of malicious sites is that they are recently created. You should be able to click on the ForceField hyperlink within the box to ignore the warning

    Cheers,
    Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  3. #3
    angrydeveloper Guest

    Default Re: Weird ZA behaviour in ForceField Toolbar... ?

    I develop websites for small businesses and many of my customers are getting their first websites therefore their domain are new.

    Today a customer sent me a screengrab showing the malicious site alert. he wanted to know what was wrong with my work because my site was clearly malicious.

    This was due to the "This Web site is suspicious. Leave now unless you know this site is safe. Read more." alert he received because the domain was recently registered.

    Obviously I've advised him not to use zonealarm because of it's deliberate policy of false positives.

    I'm angry about this defamation by zonealarm. It's plain WRONG.

  4. #4
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,287

    Default Re: Weird ZA behaviour in ForceField Toolbar... ?

    Quote Originally Posted by angrydeveloper View Post
    unless you know this site is safe. Read more.
    This is the way is designed and it does its job. And should keep doing it. A yellow bar is displayed warning the user of a potential problem! Known malware sites will be displayed differently (RED bar).

    To the user is given the option to know more and/or exclude the site. They should at least take the time to read the message in front of them, it is very clear. The user is informed about the site with messages like "the site is not known to distribute malware", "is not listed in ..." is "less than three months old". No mistake, no misunderstandings...

    Most if not all phishing and malware sites are less than 3 months old and usually have a short life. It is essential that users are warned about it and been given a detailed reasoning of the potential threat.

    Cheers,
    Fax
    Last edited by fax; January 19th, 2010 at 11:57 PM.

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  5. #5
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,287

    Default Re: Weird ZA behaviour in ForceField Toolbar... ?

    One message removed. Please stick to the issue. This is a user forum on ZA PRODUCT issues, not about ZA staff, company, lawyers or product design decisions.

    Further offtopic messages will be removed without further notice.
    Thank you for your support and understanding

    Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  6. #6
    angrydeveloper Guest

    Default Re: Weird ZA behaviour in ForceField Toolbar... ?

    The wording is at the very least misleading. A better wording would be
    "This site is new but there are no known issues with it"

    Most web users don't read 'read more'. They just leave because it's an alert with 'malicious' and 'suspicious' in the wording.

  7. #7
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,287

    Default Re: Weird ZA behaviour in ForceField Toolbar... ?

    No offence but, IMO your sentence is rather opaque with the likely end result that the warning will be ignored. Not good! I perfectly understand it from the point of view of developers but not from a user point of view. And Forcefield is targets to users not to developers.

    Quote Originally Posted by angrydeveloper View Post
    Most web users don't read 'read more'. They just leave because it's an alert with 'malicious' and 'suspicious' in the wording.
    Uuuhm, this is not a good excuse for reducing forcefield protection. If they don't know the tool works they should not blaim the tool itself.

    Anyway, no use to discuss this here. This forum is not monitored by ZA staff. We are all users here. If you want changes in the design of the ZA products you will need to contact ZA staff directly. Either via the ZA technical support or by using their beta software.

    Thank you,
    Fax
    Last edited by fax; January 20th, 2010 at 07:05 AM.

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  8. #8
    garywa Guest

    Default Re: Weird ZA behaviour in ForceField Toolbar... ?

    I would agree that I see no problem with the way the FF toolbar warns me about new websites.

    I am a NASCAR fan and frequently visit their website. While reading and clicking there this morning, a link brought me to a "new" website that they started named yourtrackpass.com. The ZA toolbar gave me this warning:


    I read the information and knowing where and how I had gotten there I simply clicked on the "click here" link and was presented with this short message:


    Using a little common sense, one click and I was done.

  9. #9
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,287

    Default Re: Weird ZA behaviour in ForceField Toolbar... ?

    Thank you Garywa for the nice review and screenshot!
    You have explained it very clearly..

    Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •