Monday, December 05, 2005 1:36 PM PT Posted by Andrew Brandt
News has leaked out that adware company 180solutions filed a lawsuit in King County, Washington last month against security software company Zone Labs, maker of the ZoneAlarm firewall application.
(We reported on 180solutions recently in our feature
The Hidden Money Trail, and later reported on how 180 is
working with law enforcement to find hackers who installed the software, as part of a fraud scheme, on the PCs of thousands of unsuspecting victims.
We reviewed ZoneAlarm 6 in the October issue of our magazine.)

One new feature, introduced into version 6 of ZoneAlarm earlier this year, is at the heart of the lawsuit. The feature, called the OS Firewall by Zone Labs, warns PC users when a program is capable of monitoring mouse movements or keystrokes, according to a dialog box warning (right) that appears when ZoneAlarm detects 180solutions' Zango application running for the first time.
Zone Labs released a statement when I contacted them this morning: "We believe consumers have the right to know what programs reside on their computers, to understand what those programs are doing, and ultimately have the choice to keep or remove them from their systems."
"I completely agree with that statement," said Sean Sundwall of 180solutions. But, he added, "We absolutely don't track mouse movements or keystrokes."
The problem seems to be that, in an effort to be thorough, ZoneAlarm's OS firewall seems to claim that many programs may be "trying to monitor mouse movements or keystrokes." While this is technically correct, it can lead you to think that you have a keystroke logger installed on your PC, when in fact, it's perfectly safe. Adding to the problem, the SmartDefense Advisor, part of ZoneAlarm's warning dialog box that is supposed to help you decide what to do, may not be very helpful.
In fact, when I first started using the new version of the software this summer, I noticed that I got that warning with virtually every new application. And a reader even wrote in to complain about a similar problem he was having with ZoneAlarm.
The reader wrote "I just upgraded to the latest Zone Labs version 6. I started Quicken and then ZoneLabs alerts me that Quicken is using a keystroke logger and mouse movement logger and asks if I want to allow the program to proceed!"
I contacted both Zone Labs and Intuit, the company that makes Quicken, to find out what was going on. Quicken's spokesman, Chris Repetto, said at the time, "We have been working with Zone Labs to understand why their program is incorrectly displaying this information. As a result, we have a better understanding of how their program works and are confident that we can make some changes to help avoid this problem occuring in future releases."
A lot of other common (and completely safe) software also triggered this same ZoneAlarm warning about keystroke logging/mouse movement monitoring. The first time I rebooted after installing ZoneAlarm 6, it warned me about Microsoft's
Alt-Tab Replacement Power Toy for Windows XP, and Lotus Notes 6.5.2, the corporate e-mail client I use, among other programs. If Zone Labs' own user forums are any indication, the problem was common, and
confusing to other people as well.
The fact of the matter is, ZoneAlarm is alerting people to something that is a fundmental, underlying component of many applications--both legitimate and dangerous--but the adware industry in general is super-sensitive about other companies characterizing their software as a keystroke logger. After all, Sundwall didn't have any issue with
anything else Zone Labs says about his company's adware, which isn't particularly flattering.
In the case of 180, Sundwall says the warning dialog is "affecting our business to the tune of millions of dollars," because a potential partner won't sign on with 180 until the ZoneAlarm dialog box issue gets cleared up.
When we reviewed the new ZoneAlarm, writer Mary Landesman said that "on a number of occasions SmartDefense tripped over telling me what to do with known adware and spyware. When one program attempted to reach the Internet, the suite could not suggest what action to take." I'm no fan of adware, but it seems like ZoneAlarm might have a problem here.
If you're using ZoneAlarm 6, and you've been confused by this dialog box, please post a comment; I'd like to know what application you used that triggered the warning.
I have received this dialog box from Zone Alarm 6 a few times, but when I was alerted that Winamp 5 was attempting to monitor my mouse and keyboard, it was very confusing. Ultimately I decided to allow it based only on the software's well-established reputation. It's refreshing to now know that dialog box shouldn't always be taken so seriously.
I have had this box come up with Music Match and Napster. I'm very happy with Zone Alarm. I think it's designed for advanced users who know what to allow and what to deny. I've been fighting spyware for well over 2 years now and know that you actually need more than one scanner to detect these bugs. Whether the box is red, yellow or green, I always read to see if I identify with the program. I feel bad for the people that are not as computer literate and have to deal with the onslaught of these malicious programs out there. I have had to seriously self educate myself which includes countless hours of recovery procedures, reading everything I can about security and implementing everything to my network. I've got a second Fort Knox here and I maintain just about everyday. I really like reading your articles Andrew.
Overall I am very happy with Zone Alarm Pro (even if there warning message can be sometimes cryptic). That said, I too have seen this "security alert" about keyloggers. It seems to especially hate Netscape (probably because it has AOL Instant Messenger built in I guess) - but the SmartDefense Advisor seems of little use. Happily I use Mozilla Firefox as my primary browser
I am running ZoneAlarm 6.0 with NetNanny 5.0 on my kids computer and get the keylogger prompt that NetNanny is monitoring mouse movements and keyboard strokes.
I am quite happy with Zone Alarm... Common sense goes a long way. Unfortunately computer users seem to lack it.
My Dad helped make NetNanny.
I use ZoneAlarm alot too. I like its security. And I think it is pretty cool to have this feature, how come norton doesn't have this? Because they are lazy.
They need to make programs that are KISS friendly. (keep It Simple & STUPID). The 9 out of 10 computers that has spyware or some sort. You can see how many dumb people are out there. With this new alert from adware I'm sure most of those dumb people will take it serious and I hope 180 wins the case against adware because I think adware takes the wrong turn with it's product.
I have installed Zone Alarm 6 and I am pleased that it is warning me of a potential problem. I have seen this dialog when opening Outlook and a few other programs.
I would venture to say that many people would be glad to know that there is a program that they didn't know was even installed on their machine with the possibility of logging mouse movements or keystrokes. You may have a some false positives, but it is better to be aggressive about these things than not aggressive enough.
Every program has to monitor mouse and keystrokes in order to know what is being input. IF the warning is for a program you know then simply allow it permanently. IF you are not sure then investigate. I like it greatly.
I've been using ZA for the past three years and have found it to be one of the best firewalls available. I recently ungraded to 6.0 and I did get the message that Quicken was trying to monitor my keyboard and mouse movements. I would much rather ZA give me all these warnings and let me decide what I want to take place on my computer. I like as much control over my computer and software as possible. Even if it does increase the number of messages I might receive, this is only during the learning phase (when you first install the software). Once ZA has gone through the learning phase, which usually takes only about a couple days, these messages hardly pop up. People should stop complaining about such issues and become just a little educated about safe computing.
I use Zone Alarm Pro, and it did tell me that Windows Messenger was trying to monitor my keystrokes. I do not use Windows Messenger, and I tried to uninstall it, but it would not uninstall. I had to turn my computer off, and when it started, I used Windows Explorer to go in and delete the Windows Messenger folder entirely. I love Zone Alarm, and use it to clean the cache constantly. I am constantly being attacked by somebody or something and it's the only reason I can still get online. Thank God for Zone Alarm.
I think ZA is a good program that means well. It does go overboard for the average user but for those of us who like to know whats going on it is a handy tool. I repair computers and remove spyware from computers everyday and 180 solutions is one of the most common ones. Any program that is installed without people knowing it CLEARLY and makes it hard to remove is spyware or junkware. I feel bad for 180 solutions but they need to make this program conform to the standards of legitimate computer programs to be called anything but spyware
I've been using zonealarm pro 5 (automatically upgrades itself to 6), and i love it. You just have to get used to warnings when you install new programs. If it tells me my new game is trying to access my mouse and keyboard, all the power to it! Now i just give it permission. same with responding to email links on the web.
It "asks" permission. Very impressive.
Zone alarm is not ment for a beginner user. I don't know how to repair my car engine, and my mechanic doesn't know what a hard disk is. He shouldn't use Zone Alarm, just like I shouldn't touch an engine.
I'm using zone alarm 6. I got some alerts 3 out 100 is wrong, but I don't might. those ads and spyware company got a big problem with zone alarm because those ads and spywares companies don't want you to know what they are doing behind your back in your pc. Why don't those ads and spywares companies fix their softwares if they are not spyware, so they can be like those software that don't cause those spyware alerts. They can't because they are in the business of make millions of dollars of put secret things inside your pc behind you back, so they can sell ton of ads, and put spy on your pc and sell your infomations.
You people having problems with adware are novices anyway. Run Norton AV Autoprotect on and use Firefox as your browser, you get no dialog boxes like this and you get no adware.
The people at 180 Solutions should be shot on sight for adware anyway.
While I agree that Zone Alarm's warnings & 'more info' button may not be the most useful, I would rather it be too sensitive than not sensitive enough; it's pretty clear Quicken isn't a risk, but the few seconds it takes me to clear the box are well worth it to avoid the hassle of searching out & removing spyware or aware, which can take hours.
I use zone alarm alot, but the security is so tight that when i got to a centain web page. like when i tried to buy a computer from hpshopping.com, during check out it blocks the website's cookie and i got thrown back to the homepage. sometimes i need to shutdown zone alarm to get it working. but most of the time it does not work... i needed to uninstall the program in order of get checked out at hpshopping.com.
i think zone alarm is a good program, but there is just too many little things that annoys me... it hassles me about every little thing because this program cannot decide anything automatically.
As far as I'm concerned, any company complaining about anti-spyware has an ulterior motive. I agree with Adam. And Zonealarm should counter sue 180 Solutions. Enough anti-ad-spyware companies are caving into pressure from scum trying to invade my privacy. They pay off spy-adware companies to "ignore" their f-ing bugs. Keep up the good work, ZA!
As far as I'm concerned, any company complaining about anti-spyware has an ulterior motive. I agree with Adam. And Zonealarm should counter sue 180 Solutions. Enough anti-ad-spyware companies are caving into pressure from scum trying to invade our privacy. They pay off spy-adware companies to "ignore" their f-ing bugs. Keep up the good work, ZA!
sorry for double post...pcworlds fualt. My "preview"got posted as well.
I USED Zone Alarm up until about a year ago. I found it to be a pain in the butt for me and people I had recommended it to hated it because they weren't as computer literate as myself. I'd constantly get calls from people asking what they should do and I'd have to give them the whole "Did you just open up a program that you trust?" speech everytime. I now use Symantec Client Firewall and feel ten times more comfortable recommending this software over Zone Alarm. I'm glad some of you are happy with it but it's not for me or those I support.
Additionally, I know there are a lot of programs out there but come on. If Zone Alarm can't figure out a list of safe programs or offer updates as false alarms are reported then I would definitely stear clear. I'm really glad I'm not using them anymore if this new version is causing this much of a hassle.
Fuck 180solutions.
No offense to anyone, but "adware companies" shouldn't be allowed to get off the ground. They make useless pieces of software, and the only reason people "use" them is because the majority of the time they are bundled with other pieces of software (such as AIM).
Personally though, I could care less as I'm not a Windows user. I don't have the problems that all you peons have.
im not going to read all the posts but if no body else has posted it said that with the msn instant messenger... i thought it have might be a hacker trying to enterr through msn :p
"You people having problems with adware are novices anyway. Run Norton AV Autoprotect on and use Firefox as your browser, you get no dialog boxes like this and you get no adware."
Thank you for a HUGE dose of humor. You really made my day.
The only reason you should even *consider* using a symantec antivirus product (such as norton) is if you are picking Sym. AV Corporate.
I've been a registers ZAP user for a few years and have nothing but praise for the company. I use the latest version of Zone Alarm Pro and don't give a rats rear is there are occasional erroneous warnings as they allow me the option of following them up further, if I care to. Better that then allowing some Spyware germ like 180solutions in the backdoor.
I've been a registered ZAP user for a few years and have nothing but praise for the company. I use the latest version of Zone Alarm Pro and don't give a rats rear is there are occasional erroneous warnings as they allow me the option of following them up further, if I care to. Better that then allowing some Spyware germ like 180solutions in the backdoor.
I've been a registered ZAP user for a few years and have nothing but praise for the company. I use the latest version of Zone Alarm Pro and don't give a rats rear is there are occasional erroneous warnings as they allow me the option of following them up further, if I care to. Better that then allowing some Spyware germ like 180solutions in the backdoor.
I use Zone Alarm Security Suite 6. I know some of the alerts are erroneous, but, I do not find them overly bothersome. Quicken sets the warning off every time I open it. I can follow up if I want to. I'd rather know that something is going on. The core of the issue, as I see it, is that 180solutions is just another arrogant software installed on MY equipment without my consent.
Windows has been giving incorrect error messages forever. Not that there is not an error; just that the message about it is incorrect!
I tried McAfee's firewall and other programs recently. I found it not to be transparent enough. I am using ZA Security Suite 6, again. I also have a 2nd computer and run Zonoe Alarm Pro on it. I will very soon upgrade ZA Pro to ZA Security Suite on it, too.
I use Zone Alarm Security Suite 6. I know some of the alerts are erroneous, but, I do not find them overly bothersome. Quicken sets the warning off every time I open it. I can follow up if I want to. I'd rather know that something is going on. The core of the issue, as I see it, is that 180solutions is just another arrogant software installed on MY equipment without my consent.
Windows has been giving incorrect error messages forever. Not that there is not an error; just that the message about it is incorrect!
I tried McAfee's firewall and other programs recently. I found it not to be transparent enough. I am using ZA Security Suite 6, again. I also have a 2nd computer and run Zonoe Alarm Pro on it. I will very soon upgrade ZA Pro to ZA Security Suite on it, too.
Zonealarm is superb as a Security Suite. It's not as if Windows never had a bug or flaw in it!
I for one am perfectly happy with the job that ZoneAlarm is doing for me and my pc. I have not had the keylogger and mouse movement messages come up on my pc at all that I can think of. I have alerts come up on occasion, but do not find them a bother at all. It just reassures me of the programs watchful eyes. Thanks a million to Zone Labs for this wonderful program.
I'm a very happy 3 year subscriber of Zone Alarm and have watched the product evolve over the years.
Any information that is presented to me as a possible threat to my PC habits is advantageous.
Even now PC World is sending doubleclick and other cookies galore from their webpage graciously being blocked by Zone Alarm.
The Adware industry has gotten out of hand and unless our government starts protecting internet users with legislation, then I welcome a product like Zone Alarm with open arms.
Keep up the good work Zone Labs!
Has it not occurred to computer users that the proliferation of after-market software items such as firewalls, anti-virus and so on are necessary because of one single reason? It is amazing to me that the average computer user puts up with a flawed, overpriced O/S and accompanying software. Microsoft is much better at marketing than it is at designing quality software. I have a couple of machines here, one is a dual-boot with Win XP and Xandros linux, the other (my work machine) is very happy with Fedora Core GNU/Linux. Oh, i use Zone Alarm on the XP machine. It works.
That Net Nanny's some really bad spyware. ;)
Here's a few answers to this problem:
Ubuntu
Fedora
Suse
Xandros
Debian
etc, etc.
I have used zone alarm pro for quite some time now and it does a great job. The fact is that zone alarm pro is not lieing when this alert comes up. These programs are actually monitoring your mouse movements and/or keystrokes in some way, so i dont see a problem with it. Plus 180 Solutions is widley known to be spyware/adware friendly and as far as im conserned has no buisness being on anyones computer.
i use zone arm pro and it helps me keep track of which programs are trying to get online and i think it's great to have these warnings up b/c you never really know what it is trying to get into your computer throught the internet and denying them access is key to stoping ad-ware and what ever else is out there even worms
Adware is a warped virus in most cases the program is secretly put on to your pc to watch you behaviour. Thats a breach of the Australian Privicy act. If ZA comes to australia thay can sue 180 solution. 180 solution should be jailed for the stolen bandwidth and computer errors thay cause.
I agree great program. I also get mouse/keyboard warning with most all programs including Internet Explorer. I also Get the warning on yahoo messenger, I tried blocking it, but then when I want to view someones profile I cant, dousn't do anything when I click on it. Also If you use MSN messenger or any others like yahoo then it wont show if your idle and may have other features removed.
Who are these illiterate people posting on this site?
I have tried Zone Alarm Pro now for 3 months and I hate it. I don't know why people would want to put up with all those popup warning messages that don't tell you anything in a written language that the average person can understand. Also if you accidentally click on not to allow then you have more work to do.