Trojan horse Agent_r.CX in zonelabs/lib

[billyellis]

OK, here's a new one for me. When I booted my laptop this morning, AVGFree detected 5 instances on startup of "Trojan horse Agent_r.CX" in ZoneAlarm's library folder (c:/windows/system32/zonelabs/lib), and ZA did not startup and will not start manually either, so the 5 'infections' that are now in the virus vault are obviously in files critical to the program's function:

zui.zip.dll
zpy.zip.dll
licenseui.zip.dll
zlsvc.zip.dll
ConfigWizard.zip.dll

Does this sound like a real problem, or maybe just an incompatibility that showed up in the latest updates of one of the two programs?

 

[billyellis]

ZA forum suggests a user reporting the same problem to go here:

http://forum.zonelabs.org/zonelabs/board/message?board.id=security&message.id=20040

The recommendation is to add that ZA directory to the list of exclusions. My question is...doesn't that merely create a safe zone for virus writers to send malware to live with no fear of detection??

Any comments, confirmations, or horror stories would be appreciated...