Is ZONEALARM really using spyware??

knicks · Post by **knicks** » Sun Mar 18, 2001 11:02 pm

I came across this discussion, let me know what you guys make of it. I really hope that this isn't true. http://www.multiproxy.org/board/1474.shtml

Prey521 · Post by **Prey521** » Sun Mar 18, 2001 11:26 pm

Damn, that sounds serious, I hope it aint true

clevelandtexas · Post by **clevelandtexas** » Mon Mar 19, 2001 8:51 am

I checked out the file IAMDB.RDB in my c:\windows\internet logs folder. Guess what, this file was last updated the last time I had ZoneAlarm running on my PC. Since installing Tiny Firewall on March 12th this file has not been updated. It looks like ZoneAlarm does update this file. What is interesting is that IAMDB.RDB is some sort of encrypted file and I can't even read. Imagine ZoneAlarm and Microsoft creating log files on someone's computer that can't be read.

Scoot · Post by **Scoot** » Mon Mar 19, 2001 7:18 pm

Originally posted by Ken:
http://www.dslreports.com/forum/remark,525468;root=security,1;mode=flat;start=0
http://www.multiproxy.org/board/1474.shtml
http://groups.google.com/groups?lr=&safe=off&ic=1&th=1f9213da39dff7bd&seekd=917 871391#917871391
http://groups.google.com/groups?hl=en&lr=&safe=off&th=1f9213da39dff7bd&rnum=1 &seld=925269354&ic=1
http://www.computing.net/windows95/wwwboard/forum/3943.html
http://cexx.org/rpcss.htm
http://cpcug.org/user/clemenzi/technical/Parasites.htm#mdm.exe
http://freepages.tech.rootsweb.com/~atguard/20000930-233-002109.html
http://pub10.ezboard.com/fvoiceofthepublic6483voiceofthepublic.showMessage?topicID= 36.topic

WOW
Good links bro....anybody handy with a packet sniffer

tekelberry · Post by **tekelberry** » Thu Mar 22, 2001 10:18 am

I actually got a response from ZA about this...here it is:

Subj: Re : Zonealarm v2 (#7225-000014-1805\141805)
Date: 3/21/01 5:28:56 PM Eastern Standard Time
From: support@zonelabs.com (Support)
To: RainForest132@aol.com

(#7225-000014-1805\141805)

Thanks for your mail and certainly, your concerns are understandable.

ZoneAlarm does not collect surfing data about users' behavior. The only information we ever see from an end-user of ZoneAlarm is: (1) your registration data (if you chose to supply it), (2) your version and registration numbers (if you have one) every time you "check for updates" (if you have that option marked in the configure panel), and (3) Alert data, when you click the More Info button on an alert to get more information about an Alert. This information does not get shared with anyone else, as we state quite clearly in our privacy statement on our web site.

We never receive any other information from a ZoneAlarm client, and cannot retrieve any other info from your machine. Since ZoneAlarm does not log users' surfing behavior, there is no way for this information to be retrieved in any case.

Due to a problem with the uninstaller, ZA does leave elements in the registry but our FAQ details how to remove them out in the event of a problem. That information is found here: http://www.zonelabs.com/support.htm

In the past, we have also been asked about our relationship with Media Metrics. This company is the equivalent of Neilsen ratings for PC users and their Zone Labs statistics are confined to the number of downloads of ZoneAlarm off our servers and ZDNet servers. Nothing else.

Other than that, you are dealing with a company formed by software engineers exclusively for the purpose of creating great software. We have no interest whatsoever in what people do in the privacy of their homes.

Best regards,
Zone Labs Support

ORIGINAL MESSAGE:
-----------------

From: RainForest132@aol.com
Posted At: 11:40:32.143 03/19/2001
Posted To: Multiple recipients of list support_list <support_list@zonelabs.com>
Subject: Zonealarm v2

Could you please take a look at this page: http://www.multiproxy.org/board/1474.shtml
It says there that you (Zonelabs) are spying on us. I STRONGLY disagree with
that and I think you should make an optional patch DELETING the spyware in
ZA. Myself and the rest of the public (as I know of) HATE spyware. I know I
will stop using ZA and tell everyone that ZA could be spyware and to not use
it because I strongly disagree with that decision you made. I have already
uninstalled ZA off of ALL of my computers and will probably now use Norton
Personal Firewall 2001. Please be aware that this is spreading around the
internet. As of right now, I believe, many websites are strongly suggesting
ZA. They may end up saying DO NOT use ZA at all because of this theory. I
would suggest you make a public announcement about this clearing everything
up. I know I am not happy about this and a bunch others. If I could have a
reply to this e-mail that would be great. As for now, I will not use your
product until I have enough evidence that there is not spyware in it. Thank
you for listening.
Sincerely,
Andrew Techmeier

----------------------- Headers --------------------------------
Return-Path: <support@zonelabs.com>
Received: from rly-zc01.mx.aol.com (rly-zc01.mail.aol.com [172.31.33.1]) by air-zc03.mail.aol.com (v77_r1.21) with ESMTP; Wed, 21 Mar 2001 17:28:55 -0500
Received: from heronweb1.zonelabs.com (222.zonelabs.com [216.15.66.222]) by rly-zc01.mx.aol.com (v77_r1.21) with ESMTP; Wed, 21 Mar 2001 17:27:55 -0500
Received: by heronweb1.zonelabs.com from localhost
(router,SLMail V3.2); Wed, 21 Mar 2001 14:28:44 -0800
Received: from zonelabs.com [192.168.254.221]
by heronweb1.zonelabs.com [216.15.66.222] (SLmail 3.2.3113) with ESMTP
id 933A41BE1D6F11D5B69C00B0D049D665
for <RainForest132@aol.com>; Wed, 21 Mar 2001 14:28:43 -0800
Message-ID: <3AB92B19.support@zonelabs.com>
Date: Wed Mar 21 14:28:41 2001
From: "Support" <support@zonelabs.com>
To: RainForest132@aol.com
Subject: Re : Zonealarm v2 (#7225-000014-1805\141805)
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
X-SLUIDL: 5F14B85A-1D6E11D5-B69C00B0-D049D665

cyberskye · Post by **cyberskye** » Thu Mar 22, 2001 1:43 pm

Don't know if it's true or not. Running a sniffer on your lan could shed some light.

ZLabs has always had the backing of that marketting firm. ZA is free -- why? The True Vector engine that ZA uses could have other applications as well (besides PC firewall security). Zlabs might have plans to sell the technology to companies that may use it for marketting or other purposes. Meida Metrics is like the Nielson rating group -- they pay people to have their surfing habits tracked. If both parties are aware....

BoT · Post by **BoT** » Fri Mar 30, 2001 5:27 am

Nice heads up Ken

I may have to install ZoneAlarm and turn on Iris for a look see......

tekelberry · Post by **tekelberry** » Fri Mar 30, 2001 6:33 pm

Na...I bet not.

g-c0de · Post by **g-c0de** » Mon Apr 02, 2001 2:29 pm

hey tekelberry nice profile, it cracks me up everytime i see it

Leprocy · Post by **Leprocy** » Mon Apr 02, 2001 5:03 pm

Me thanks Ken now me can go surf internet without people knowing that i look at circus midget porn. DOh

Quitch · Post by **Quitch** » Mon Apr 02, 2001 7:47 pm

The first group of select users who got to use ZoneAlarm agreed to be tracked, and this is how ZoneLabs supported themselves, and now of course, they have ZoneAlarm Pro to provide revenue.

Storm90 · Post by **Storm90** » Wed Apr 11, 2001 5:53 am

iF you really want to know if they are useing a spy.dll like most do. Go to find files and type in spy.dll. Their older version had it. I don't know about there newwer version I do not use it. GoodLuck!

Matt615 · Post by **Matt615** » Wed Apr 11, 2001 11:53 am

I just searched my systems and no results came up spy.dll.

Croc · Post by **Croc** » Sun Apr 15, 2001 9:49 am

Do you actually believe that ZoneLabs would jepoardise ZoneAlarm's credibility by placing spyware in it?

If anything like that were true don't you think it would have shown up before now?

WHAT A LOAD OF BS!!!!

There have been over 8 million downloads. Don't you all think the program has had enough independent testing by some very talented people in the computer industry.

Leave this alone. Use the program and be thankfull that it remains free for personal use. There has been enough scrutiny here and at other forums to say this is NOT TRUE.

KSJNX · Post by **KSJNX** » Sun Apr 15, 2001 3:01 pm

try searching for the file named : THEBIGFILETHATZONEALARMUSESTOSPONYOU.exe

Croc · Post by **Croc** » Sun Apr 15, 2001 5:43 pm

THEBIGFILETHATZONEALARMUSESTOSPONYOU.exe
Oh bugger, I tried that .exe and it didn't work.

I thought I would split it up into separate words to see if there was a mistake. THE BIG FILE THAT ZONEALARM USES TO SP heretis, a missing Y ON YOU.exe
Then I thought 'Y bother?'

Noone would believe the rumour.

KSJNX · Post by **KSJNX** » Mon Apr 16, 2001 6:56 am

lol one typeo comen

if you can't find that one searchfor THEOTHERFILETHATZONEALARMUSESTOSPYONYOU.exe