 RhobitePremium
join:2002-02-24
Cambridge, MA | Question for folks who've been following Are we sure that this isn't some sort of trojan or other sort of spyware on the users' machines, that's made to look like ZA? After all the traffic is being blocked by ZA and I'd assume that ZA lets its own "real" traffic pass through. Are we sure that ZA is the source of this traffic, and not some other program that's running on the PC?
--
Jimmysquid.com - I take pictures. |
|
 SteveI know your IP addressConsultant
join:2001-03-10
Yorba Linda, CA
kudos:5 | If it *is* a Trojan or other badware, none of the anti-badware software is detecting it. Our users have been over the hills and through the woods looking for badware without any success.
Steve
--
Stephen J. Friedl * Security Consultant * Tustin, California USA * my web site |
|
 SmokeyI'd rather be skiingPremium
join:2003-05-20
Wild West | But when will we get to grandma's house? |
|
 OwlbetIgnite the IcePremium,MVM
join:2002-09-24
Palmer, AK | reply to Rhobite
said by Rhobite:
Are we sure that this isn't some sort of trojan or other sort of spyware on the users' machines, that's made to look like ZA? After all the traffic is being blocked by ZA and I'd assume that ZA lets its own "real" traffic pass through. Are we sure that ZA is the source of this traffic, and not some other program that's running on the PC?
I highly doubt that. Most of the MVMs, VIPS, Mods, Regulars & general lurkers, run pretty tight ships. We come loaded with our hosts files, Spybot, Spyware Guard, Hi-Jack This, Ad-Aware, various AVs & ATs, etc. I agree with the consensus here that there is a programming flaw in Zone Alarm that is causing this and not some undiscovered malicious payload piggybacking on Zone Alarm.
On a lighter note....Zone Alarm wants to read the Security Update Sticky in the Security Forum. 
--
Rocky is, was, and always will be Dawg E. Dawg. Miss you, pal. |
|
