Nico just notified me that the popular security company ZoneAlarm has started to use scareware tactics to sell more of their products. ZoneAlarm Free Firewall users received a notification window, that informed them about a global virus alert. The notification reads “Global virus alert Your PC may be in danger! Virus Details: Risk:high Threat name: ZeuS.Zbot.aoaq”, “ZeuS.Zbot.aoaq is a new Trojan virus that steals banking passwords and financial account data. Your ZoneAlarm Free Firewall provides basic protection, but this new threat requires additional security”. Options are to see the threat details or get protection.

global virus alert

The problem lies in the wording. This is not actually a threat that was found on the user’s computer. It is merely a notification of the threat. But ZoneAlarm makes it look like the user’s PC is infected and that there is need for action. And the action is to purchase ZoneAlarm products.

Users who read the notification carefully may notice that it is a notification, and not an infection that has been found on the system. Is that something that the firewall usually detects? I have never used their firewall but it is unlikely that a firewall would display those messages. The real problem here is that the alert looks like an infection was detected on the PC. What makes matters worse is that the notification does not let the user know that everything is alright at the moment, and that the user does not need to worry if an antivirus software is installed on the system. No, it only displays an option to see the threat details or to buy a product from ZoneAlarm. That’s scareware tactics at its best.

ZoneAlarm Firewall Free users who get the global virus alert should close the notification immediately. If they have an up to date antivirus software on their system it is all they need to do. If they do not have one, they should consider installing AVG 9 or Microsoft Security Essentials, both completely free and very good at detecting those kind of things.

The forum announcement of Zonealarm 9.1 links to a download page at the Zonealarm website where users can download that version of the free software firewall. Major changes in Zonealarm 9.1 include full Windows 7 compatibility and a new browser security toolbar that detects spy sites, offers website safety checks and ratings as well as a signature and heuristic phishing detection.

The direct download link for Zonealarm 9.1 can be accessed here. Zonealarm users who are running an earlier version of the Zonealarm firewall are asked to uninstall that version before they start installation of Zonealarm 9.1. Best way to do so is to remove Zonealarm from the list of Windows startup items by going to Overview> Preferences > General > Load ZoneAlarm at startup.

It also has to be noted that Zonealarm 9.1 should be run as the only software firewall on the computer system. It is therefor highly recommended to uninstall other software firewalls and to disable Windows firewall to ensure that the firewall protects the PC properly. Zonealarm 9.1 is compatible with both 32-bit and 64-bit editions of Windows 7 and previous Windows operating systems. (Thanks Dante for the tip).