TechSpot

Trojan horse Agent_r.CX in zonelabs/lib

By billyellis
Oct 14, 2008
  1. OK, here's a new one for me. When I booted my laptop this morning, AVGFree detected 5 instances on startup of "Trojan horse Agent_r.CX" in ZoneAlarm's library folder (c:/windows/system32/zonelabs/lib), and ZA did not startup and will not start manually either, so the 5 'infections' that are now in the virus vault are obviously in files critical to the program's function:

    zui.zip.dll
    zpy.zip.dll
    licenseui.zip.dll
    zlsvc.zip.dll
    ConfigWizard.zip.dll

    Does this sound like a real problem, or maybe just an incompatibility that showed up in the latest updates of one of the two programs?
     
  2. billyellis

    billyellis TS Enthusiast Topic Starter Posts: 155

    ZA forum suggests a user reporting the same problem to go here:

    http://forum.zonelabs.org/zonelabs/board/message?board.id=security&message.id=20040

    The recommendation is to add that ZA directory to the list of exclusions. My question is...doesn't that merely create a safe zone for virus writers to send malware to live with no fear of detection??

    Any comments, confirmations, or horror stories would be appreciated...
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...