This is our old Q&A Site. Please post any new questions and answers at

Dear sirs,

Zone alarm reports this file as a 'zombie'.


C Gilbert

asked 10 May '11, 08:41

SwissBob's gravatar image

accept rate: 0%

edited 10 May '11, 15:13

Gerald%20Combs's gravatar image

Gerald Combs ♦♦

Has ZoneAlarm updated itself since May 10? If so, is it still reporting a problem with the Wireshark installer?

(14 May '11, 11:03) Gerald Combs ♦♦

This is a common false positive reported by ZoneAlarm users. The issue is most likely with ZoneAlarm, not the Wireshark installer.

permanent link

answered 10 May '11, 09:19

bstn's gravatar image

accept rate: 14%

Can you provide a few more details? Specifically:

  • The exact error reported. Did ZoneAlarm trigger on the installer itself or one of the files contained in the installer?
  • The version of Wireshark.
  • The version of ZoneAlarm.
  • The version of ZoneAlarm's DAT file.

If possible can you submit the installer to ZoneAlarm for manual verification?

So far every antivirus warning we've encountered has been a false positive but I'd like to verify that this is the case here as well.

permanent link

answered 10 May '11, 09:32

Gerald%20Combs's gravatar image

Gerald Combs ♦♦
accept rate: 24%

edited 10 May '11, 11:11

First ZA Extreme Security reports it cannot verify the file.

The advanced scan reports:

wireshark-win64-1.4.6 is malicious, secondly that "The file is zombie software that silently terminates itself etc etc, can execute malicious commands"

(10 May '11, 10:29) SwissBob
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 10 May '11, 08:41

question was seen: 2,579 times

last updated: 14 May '11, 11:03

p​o​w​e​r​e​d by O​S​Q​A