> Can't comment on the true vector thing, but I do know that 
> zonealarm will ask you if you want to allow an app to access 
> the net. You can allow on a case by case basis or allow 
> always. Say you allow always - the app will never cause 
> Zonealarm to notify you again. Now say you modify the app 
> (maybe it is one you have written yourself.) The new app with 
> the same name tries to access the net & Zonealarm will ask if 
> it is allowed to access the net as if it was the first time.
> 
> Now my zonealarm truevector monitor has started shutting down 
> intermittently over the last week. I'm wonder if I've got a 
> problem myself, but have found nothing so far. I'm running 
> McAfee virusscan with the latest dat files & am connected to 
> the net behind an SMC firewalled router, but you never know......


I picked up some sort of trogan/virus a while back, it kept creating new
programs, well, the same program with a different name.

ZoneAlarm popped up & blocked it, but every few minutes it would ask again
as the name changed...  That's one thing that annoys me about ZoneAlarm (and
probably others as well).  The program was exactly the same, so why not
block it on some sort of signature, anti-virus style?  Length & CRC would be
enough.

The spyware scanner in ZA didn't pick it up, btw, but Ewido did.

Tony

-- 
http://www.piclist.com PIC/SX FAQ & list archive
View/change your membership options at
http://mailman.mit.edu/mailman/listinfo/piclist