well, as I mentioned earlier in the thread:
diskeeper 12 for some reason hated existence of zonealarm.
diskeeper 11 worked fine.
after doing some testing in the long run by allowing ports and whatnot else, i got the idea of disabling IPv6 traffic on zonealarm. (yes, somewhat counterproductive there and it is enabled by default)
and behold, diskeeper12 works!
What I think happened between DK11 and 12 was that 12 also added ipv6 as default "if it exists, go with this" means of communication for which zonealarm seemingly doesn't have any visible means of controlling access to or from computer and so it might block most of the data by default.
so.. existence of IPv6 is a bad thing as long as you want to have diskeeper12 and zonealarm v.13.x running.