Incompatibility between Daemon Tools & Zone Alarm Extreme

[ZIPZAP]

Thanks for the feedback.

Uuuhm, that is not what I read officially from ZA. By experience when ZA dev. posts such clear statment it means they have factually found an issue (they rarely do so)

Just wanted to bring the other side of the coin here.

Thank you anyway for the input into the issue.

http://forum.daemon-tools.cc/f27/int...tml#post125516

No permission to access this...

[Blazkowicz]

It is in customer forum, here is the quote:

First of all yes, DAEMON Tools does test for debuggers and if some "security" software tries to "start all progs in debug mode" it will surely fail.
Second, practically all issues with security software we had in the past happened because this "software" actually tries to modify code inside all other processes by injecting own code, patching original one and installing own hooks. Thus it acts like a virus itself.
DAEMON Tools has strong internal checksum verifications in lot of places to maintain own integrity and it will not tolearate when some other application penetrates into its process and modifies something inside it. We do not think of it as a "security issue" of our product, but rather as ill behavior of other malicious application which makes changes in other processes without warning user - they should at least allow user to skip monitoring or patching some processes.

[ZIPZAP]

Ok thanks! Sounds like a non-resolvable issue. Both sides gives strong arguments not to fix it.

Thanks again and enjoy the day or night.

[Terramex]

No permission to access this...

Oops, sorry , and thanks Blaz.

Not up to date but maybe also of interest:
Plague in (security) software drivers - www.matousec.com

Anyhow, as some security software developers aren't willing to address those issues (or at least it has low priority) the DT team will finally sort this out by releasing their future products with the option to not use the SPTD access layer.

[ZIPZAP]

Anyhow, as some security software developers aren't willing to address those issues (or at least it has low priority) the DT team will finally sort this out by releasing their future products with the option to not use the SPTD access layer.

Ah, great! Good news then
Thank you for the info.

[Bikkhu]

Oops, sorry , and thanks Blaz.

Not up to date but maybe also of interest:
Plague in (security) software drivers - www.matousec.com

Anyhow, as some security software developers aren't willing to address those issues (or at least it has low priority) the DT team will finally sort this out by releasing their future products with the option to not use the SPTD access layer.

It looks to me that ZoneAlarm is not only security software which have problems with DT. My Comodo went crazy with DT, both installation and use, and keeps screaming:

"DTLite4356-001.exe tried to execute shellcode as a result of a possible buffer owerflow attack. This is typical of a buffer owerflow attack. Comodo Defense+ has already isolated DTLite4356-001.exe from the rest of the system....."

It is a shame that ZoneAlarm crash in this situation, but on the other hand, none of the security software should tolerate such a behavior.
DTLite and DTLiteHlp are the same.