This very well can be the router or device providing NAT to your PC. If the router has a firewall then scanning result will be difficult to know what is giving access to those port. Every router on the market nowadays has a firewall built in.
Also these port look like they belong to an application on your PC in-fact the application your doing transactions with.
Port 256 does not have have any know app uses but is listed for TCP/UDP as RAP. We have no idea what RAP is.
257 (Secure Electronic Transaction), 258 (Yak Winsock Personal Chat)
Maybe that will help you.
ZoneAlarm will only open these ports if an application or something on your PC asks for the permission and was automatically configured by ZA or you allowed it.
ZoneAlarm support will not be able to troubleshoot your connection any further than what you see here.
You been given all the facts and sources and now its your responsibility to figure out the sources.