Page 2 of 3 FirstFirst 123 LastLast
Results 11 to 20 of 23

Thread: hoax or threat ?

  1. #11
    Join Date
    Jun 2006
    Location
    The 3rd Coast - South Central Texas
    Posts
    10,465

    Post Re: hoax or threat ?

    Quote Originally Posted by webwanderer View Post
    Hijack the thread? ... It's the same issue, same file, and same probable false positive. I don't see that as hijacking. If someone else has this problem with MSVCR80 it would be nice to see more input, no?

    As a matter of Curtsey and to provide the Best solution to each Users problem,
    the Guideline Rules,ask each User to Please start their own thread. And start only 1 thread for each problem.

    This insures that each User receives a solution specific to their on Problem, When other user like yourself interject your own problem into the discussion of somebody else's problem, any advice or solution to your problem would confuse and may conflict with the solution to the Originating Users problem..

    That is why you were asked Not to Hi-Jack somebody else's Request for Help, and to Please start your own thread. And start only 1 thread for each problem.

    Thank you in advance for you Cooperation in this matter..
    GeorgeV
    ZoneAlarm® Extreme Security


    Click here for ZA Support
    Monday-Saturday__ 6am to 10pm Central time
    Closed Sundays and Holidays

  2. #12
    hartridge Guest

    Default Re: hoax or threat ?

    @fax + webwanderer : thanks for response

    Release:

    • Zone Alarm Pro: 8.0.298.004
    • TrueVector-Engine: 8.0.298.004

    @Log-Files:

    • my first posting above shows all information provided by ZA. It is the scan-result; I have copied all detail-infos in this text-file
    • btw. Where can I find the log-file in this version of ZA

  3. #13
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,286

    Default Re: hoax or threat ?

    Thank you for the information!
    Antispyware engine in ZAPRO has been removed and not supported anymore.

    Note: To serve our customers who have a need for a streamlined high-end firewall product, especially to complement an existing anti-virus program, ZoneAlarm Pro firewall no longer includes the anti-spyware feature. To further streamline in an age where web privacy controls are built into the most popular browsers and email attachment scanning is included in the major email applications, privacy controls and inbound MailSafe have also been removed with this release.
    ZoneAlarm Pro version 8.0.400.020
    Please see release history here.

    If you do not find it in the ZA log section then you find all txt files of the logs in: C:\Windows\Internet Logs (check by date)

    Cheers,
    Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  4. #14
    hartridge Guest

    Default Re: hoax or threat ?

    @Log-Files

    Code:
    ZoneAlarm Protokoll-Client v8.0.298.004
    Windows Vista-6.0.6002-Service Pack 2-SMP
    Typ,Datum,Uhrzeit,Quelle,Ziel,Transport (Sicherheit)
    Typ,Datum,Uhrzeit,Virusname,Dateiname,Modus,E-Mail-ID (Anti-Virus)
    Typ,Datum,Uhrzeit,Quelle,Ziel,Aktion,Dienst (IM-Sicherheit)
    Typ,Datum,Uhrzeit,Quelle,Ziel,Programm,Aktion (Schutz gegen gefährlichen Code)
    Typ,Datum,Uhrzeit,Aktion,Produkt,Datei,Ereignis,Unterereignis,Klasse,Daten,Daten,… (OSFirewall)
    Typ,Datum,Uhrzeit,Name,Typ,Modus (Anti-Spyware)
    ACCESS,2009/12/01,16:55:06 +1:00 GMT,Java(TM) Platform SE binary wurde blockiert von eine Verbindung hergestellt hat, um, das Internet (195.34.133.21:DNS).,N/A,N/A
    ACCESS,2009/12/01,23:55:32 +1:00 GMT,Java(TM) Platform SE binary wurde blockiert von eine Verbindung hergestellt hat, um, das Internet (195.34.133.21:DNS).,N/A,N/A
    ASW,2009/12/02,06:13:52 +1:00 GMT,Win32.Viking.AE,Trojaner,Manuell
     File Name-C:\xampp\xampp-control.exe
    ASW,2009/12/02,06:13:56 +1:00 GMT,Win32.Worm.IrcBot.60416.6,Trojaner,Manuell
     File Name-C:\Program Files\EASEUS\Data Recovery Wizard Professional 4.3.6\msvcr80.dll
     File Name-C:\Program Files\Edraw Max\msvcr80.dll
     File Name-C:\Program Files\Google\Google Earth\msvcr80.dll
     File Name-C:\Program Files\Google\Google Earth\plugin\msvcr80.dll
     File Name-C:\Users\XXXX\Desktop\Downloads\Portable_UpdateStar\Portable UpdateStar\App\msvcr80.dll
     File Name-C:\Users\XXXX\Documents\Portable Apps\mysql-workbench-oss-5.0.30-win32-noinstall\MySQL Workbench 5.0.30 OSS\msvcr80.dll
     File Name-C:\Users\XXXX\Documents\Portable Apps\revouninstaller\revouninstaller-portable-1-7\msvcr80.dll
     File Name-C:\Users\XXXX\Documents\Setup-Box\GIS-Tools\GoogleEarthPortable\App\GoogleEarth\msvcr80.dll
     File Name-C:\Windows\Installer\$PatchCache$\Managed\7E577B2224C65CF4E801A9E52375DB49\14.0.1468\ul_msvcr80.dll.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E
     File Name-C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_none_10b2f55f9bffb8f8\msvcr80.dll
    ACCESS,2009/12/02,07:00:48 +1:00 GMT,Java(TM) Platform SE binary wurde blockiert von eine Verbindung hergestellt hat, um, das Internet (195.34.133.21:DNS).,N/A,N/A
    FWROUTE,2009/12/02,07:49:48 +1:00 GMT,91.141.89.86:49210,209.87.211.136:80,TCP (flags:S)
    FWROUTE,2009/12/02,07:49:48 +1:00 GMT,91.141.89.86:61303,81.3.216.100:53,UDP
    FWROUTE,2009/12/02,07:49:58 +1:00 GMT,91.141.89.86:58046,81.3.216.100:53,UDP
    ZLUpdate,2009/12/02,07:50:06 +1:00 GMT,,,Manual
    FWROUTE,2009/12/02,07:50:08 +1:00 GMT,91.141.89.86:64563,81.3.216.100:53,UDP
    ZLUpdate,2009/12/02,07:50:08 +1:00 GMT,,,Manual
    FWROUTE,2009/12/02,08:09:52 +1:00 GMT,94.245.207.169:49355,209.87.211.136:80,TCP (flags:S)
    FWROUTE,2009/12/02,08:09:52 +1:00 GMT,94.245.207.169:57153,194.24.128.100:53,UDP
    ZLUpdate,2009/12/02,08:09:58 +1:00 GMT,,,Manual
    ZLUpdate,2009/12/02,08:10:02 +1:00 GMT,,,Manual
    FWROUTE,2009/12/02,08:10:02 +1:00 GMT,94.245.207.169:53967,194.24.128.100:53,UDP
    • One log-file (name:ZL_CM_Log.txt; date: 02.12.2009) doesn´t contain any info (size: 0 KB)
    • found: inside Windows - InternetLogs

    @Release:

    • current release number as displayed in ZA: 8.0.298.004
    • this would be an outdated release ? or ?
    • consequently I should update ZA to newest product version

    Update product:

    • I have paid for update-service
    • Update-service ends in 101 days (from today)
    • questions:
      • Is a product-update from 8.x to 9.x free ? (I assume it is free)
      • ZA says that no updates are available (think this refers to signature updates and not to product-updates)
      • how can I update to newest product-version ?

  5. #15
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,286

    Default Re: hoax or threat ?

    Quote Originally Posted by hartridge View Post
    Is a product-update from 8.x to 9.x free ? (I assume it is free)
    Yes, with a valid license

    Quote Originally Posted by hartridge View Post
    ZA says that no updates are available (think this refers to signature updates and not to product-updates)
    Yes, it is normal. The central ZA update server have not be turned ON. You can decide to wait to update or manually updating.

    Quote Originally Posted by hartridge View Post
    how can I update to newest product-version ?
    1. Backup your ZA settings, just in case something goes wrong (ZA overview --> Preferences --> Backup)
    2. Download the installer. Here. Push on "Download Now"
    3. Install. When asked you can choose "upgrade" to keep your settings.
    4. Mind the option to install the ZA toolbar. Check before installing if you want it. It provides for:

    New Browser Security:
    • Advanced Download Protection:
      • Detects the latest zero-day threats in downloads that you initiate-before they reach your computer
      • Includes heuristic analysis and program check
      • Can run and analyze download behavior in a virtual environment if necessary
    • Spy site detection
    • Signature and heuristic phishing detection
    • Website safety check and rating

    Hope this helps.

    Cheers,
    Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  6. #16
    pdraganov Guest

    Default Re: hoax or threat ?

    I have the same problem with:
    ZoneAlarm Pro version:7.0.483.000
    TrueVector version:7.0.483.000
    Driver version:7.0.483.000
    Anti-spyware engine version:5.0.189.0
    Anti-spyware signature DAT file version:01.200912.6975

    MSVCR80.DLL was quarantined by anti-spyware as Trojan Win32.Worm.IrcBot.60416.6 2 days ago and now my Nikon monitor NkMonitor.exe cannot load.

    I cannot upgrade Zone Alarm because I have Windows 2000 Pro and it is not supported by newer versions of Zona Alarm.

  7. #17
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,286

    Default Re: hoax or threat ?

    Yes, Windows 2000 is not supported by ZA since quite sometime.
    Remove the files from the quarantine and turn off the ZA antispyware.

    You should have not been able to renew your license. Please check with ZA support if you can get a refund.

    Cheers,
    Fax
    Last edited by fax; December 2nd, 2009 at 10:41 AM.

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  8. #18
    pdraganov Guest

    Default Re: hoax or threat ?

    I don't need a refund. I am happy with version 7. Definitions are updated, I have a firewall (Win2K has no built-in). The only problem is with this wrong detection, which is not only in version 7, but in definitions which are common for all versions

  9. #19
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,286

    Default Re: hoax or threat ?

    Quote Originally Posted by pdraganov View Post
    The only problem is with this wrong detection, which is not only in version 7, but in definitions which are common for all versions
    Nope, the antispyware has been removed from ZAPRO and antispyware engine + definition are different in all ZA product line.
    Sorry, I don't think there is any solution, in windows 2000, other than installing another firewall supporting your OS or restoring the files from ZA quarantine and turning off the antispyware.

    Cheers,
    Fax
    Last edited by fax; December 2nd, 2009 at 11:18 AM.

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  10. #20
    pigeonman Guest

    Default Re: hoax or threat ?

    I started having the same problem with ZA ES ver. 8.0.400.020 about 2 days ago. Ad aware and Malwarebytes' Anti-Malware do not find anything at all, ZA spyware does on a deep scan but not on quick scan. Multiple trys of deleting with ZA have done nothing, keeps coming back. I do suspect a false positive, I will update to newest verson and let you know if it works. One question for you fax, I had updated to new verson some time ago, and did not like it for some reason (do not remember why now), and went back to an older version but I do remember the anti virus/spyware were combined onto one??. Will I have spyware and antivirus protection , or was spyware protection eliminated?

Page 2 of 3 FirstFirst 123 LastLast

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •