ZoneAlarm Issue

**Vampmon** · May 8th, 2006, 09:24 AM

Trying to install ZoneAlarm Security Suite.

I had no problems installing and using the Beta, i uninstalled it because i was having a few issues with it.

I downloaded v6.1 (Stable) and trying to install it, i'm getting these errors:

This application has failed to start because zpy.dll was not found. Re-installing the application may fix this problem.

I click OK

Another error message pops up:

Setup is unable to log into the TrueVector service. Install cannot continue without logging into the TrueVector service.
Please use the service manager to shut down the TrueVector service and then restart the installer again.

I click OK

Then the usual Windows error report box comes up, i have no programs running and no other version of ZoneAlarm Security Suite installing, i've done reg cleaners, nothing is working.

Any ideas?

I've created a thread over @ the ZoneLabs Forums too

http://forum.zonelabs.org/zonelabs/b...ssage.id=48697

**lifehacker** · May 8th, 2006, 09:56 AM

More info on the TrueVector service:
A vulnerability has been reported in Zonealarm, which can be exploited by malicious, local users to escalate their privileges on a vulnerable system or cause it to crash.

The vulnerability is caused due to an error in the TrueVector Device Driver ("vsdatant.sys"). This can be exploited by sending two specially crafted control codes using the "DeviceIoControl()" function, which request the device driver to perform certain operations.

Actually if I were you, I wouldn't bother with ZoneAlarm in the first place. The protection they give you is terrible, heurestics suck, the scanner is slow and ZoneAlarm uses way too many resources.

**Vampmon** · May 8th, 2006, 10:32 AM

Thanks!

There is something seriously wrong with the installer, or something with ZoneAlarm Security Suite, i asked 2 of my friends to try the current stable build and there computer shuts down and recovers with a serious error.

The same happens to be, but it's totally fine with the Beta installer.

The version with this serious error is: ZoneAlarm Internet Security Suite 6.1.744

I don't mind not using ZoneAlarm, but i want a program which has everything built in, i don't want 2 programs or something.

Like ZoneAlarm Security Suite i want a program with Firewall, AntiVirus, Popup & Ad Blocker, & AntiSpyware.

The only reason why i started using ZA in the first place was because it allowed me to download torrents and play online games without any issues.

**lifehacker** · May 8th, 2006, 04:29 PM

Originally Posted by VampmonI

don't mind not using ZoneAlarm, but i want a program which has everything built in, i don't want 2 programs or something.

Go with BitDefender then. Its got an excellent anti virus with great heurestics, the fastest on-demand scanner of any antivirus out there right now, anti-spyware, an ok firewall, and a registry defender. ZoneAlarm's Antivirus is really bad (though their firewall is alright).

**DigitalJunkie** · May 8th, 2006, 04:30 PM

I'm using updated ZoneAlarm Pro v6.1.744.001 without any problem.

**Lehk** · May 8th, 2006, 04:36 PM

Originally Posted by Vampmon

Trying to install ZoneAlarm Security Suite.

I found your problem.

use a NAT don't bother with software firewalls

if you must enable the windows firewall

**vixenk** · May 8th, 2006, 08:23 PM

Originally Posted by Lehk

I found your problem.

use a NAT don't bother with software firewalls

if you must enable the windows firewall

Some rather major problems with using only a NAT:

- Most hardware firewalls stealth your ports and that's close to all they do. Overall, they're meant to add an extra layer of protection for a network, not to be your sole source of protection for a single computer. An attacker can STILL work their way in, with you being none the wiser because you don't have any *easy/sane* means of monitoring/logging/blocking traffic
- You have no *easy/sane* means of controlling your outbound/inbound connections... your anti malware apps don't always detect everything, and it's not uncommon for a piece of malware to use a commonly allowed port
- More advanced software firewalls also alert you in cases of dll injection, md5 checksum changes, applications launching other applications, etc.

To the poster: I would highly suggest using something other than ZA. Not that it's a bad firewall, it's just one of the most commonly exploited due to its popularity.

**Vampmon** · May 9th, 2006, 12:50 AM

Thanks for your suggestions guys, the guys over @ ZoneLabs gave me a new build to use and installed it without any problem.

They asked if i had a valid installation key, ha i told them i had just installed it and was using their 15 day trial before i buy it, so they gave me the update, couldn't tell them i used a keygen :O

v6.1.745.02

I only like their Ad blocker & Firewall, i agree their AntiVirus/AntiSpyware is a little bad, but i do use back-up AntiSpyware (Spy Sweeper, Ad-Aware) ...

Their security suite is a fantastic program over all, and was the only one that didn't mess up P2P/Torrent downloads & gaming.

**lifehacker** · May 9th, 2006, 04:18 AM

Glad your problem is solved.

**Vampmon** · May 9th, 2006, 08:32 AM

Thanks for the help lifehacker :)

**shawners** · May 9th, 2006, 04:33 PM

I never have any need for that, just the NOD32 for email. But heard BLACK Ice was good.

**Malakai1911** · May 9th, 2006, 06:47 PM

Originally Posted by shawners

But heard BLACK Ice was good.

Black ICE is horrid. Absolutely horrid.

**Vampmon** · May 10th, 2006, 12:54 AM

I haven't used BlackICE in a long time, but that firewall used to be fantastic back in the days, not sure about it now though ...

**lifehacker** · May 10th, 2006, 04:42 AM

BlackICE used to be alright.....but then so many better programs came along. And it has many security flaws that can be exploited now.

**Malakai1911** · May 10th, 2006, 09:26 AM

BlackICE was the first (only??) firewall I can remember that allowed you to be remotely exploited.

DoS attacks on a firewall are one thing (don't actually compromise your machine, more of a potential annoyance), but buffer overflows and mishandling of data is another.