Cleaning out broken zone alarm components
jeffd
Status: Assistant
Joined: 04 Oct 2003
Posts: 594
Reply Quote
I came across the problem of a totally failed zone alarm install, which in turn was breaking windows networking, causing the networking to fail randomly after a few minutes of working, and realized that the broken zone alarm install was at fault.

Found a very good set of cleanup directions here: forums.techguy.org/malware-removal-hijackthis-logs/427720-truevector-internet-monitor-problem-help.html

which in case that forum vanishes, I'm reproducing here:

:: Quote ::
If you're comfortable with editing the registry, you can follow these instructions I found over at CastleCops to completely remove ZoneAlarm. If you've attempted to uninstall ZA or remove it in Safe Mode at all, you must install it again before starting these directions.

* Run ZoneAlarm and go to Overview>>Preferences
* Uncheck Load at Startup

* Restart your computer

* Go to Start>>Programs>>Zone Labs>>Uninstall


Say Yes when asked to Delete all files
Allow TrueVector Service to be shutdown if asked

* Restart your computer

* Set Windows to Show All Files

* Go to Start>>Search or Find>>Files
* Ensure that Location is set to All Local Drives
* Search your computer for the following folders and delete them if found:


zonelabs
"zone labs"
"Internet logs"

* Search for the following files and delete any found within the Windows or Temp folders:


vsdata.dll
vsdata95.vxd
vsdatant.sys
vsmon.*
vsmonapi.dll
vsnetutils.dll
vspubapi.dll
vsutil.dll
zaplus.*
zapro.*
zllictbl.dat
zlparser.dll
zonealarm.exe

* Search your computer for the following files and delete any found within the Program Files folder:


zapro
zonealarm
"zonealarm pro"

* Go to Start>>Run>>regedit
* Search for and delete any of the following keys found:


ZAMailSafe
ZoneAlarm
Zone Alarm

* Search for and delete any of the following values found:


vsdata.dll
vsdata95.vxd
vsdatant.sys
vsmon.*
vsmonapi.dll
vsnetutils.dll
vspubapi.dll
vsutil.dll
zaplus.*
zapro.*
zllictbl.dat
zlparser.dll
zonealarm.exe

* Delete the contents of C:\Windows\Internet Logs\ and C:\winnt\Internet Logs\
* Go to Start>>Control Panel>>Add or Remove Programs and uninstall Spyware Doctor
* Restart your computer


nice synopsis, brendandonhu.

I found a few more missing pieces, but they were just red flagged vsdatant driver failed to load, which is correct, since we removed it.

Also, the truevector service is still listed in the nt services, though I switched it off.

A few more notes, to removes some of these files I had to start windows in safe mode F8 on boot, otherwise it complained that the files were in use.

Removing the broken zonealarm install seems to have solved the issue on this machine though.
Back to top
Display posts from previous:   

All times are GMT - 8 Hours