Hi Dave,
Still having problems. When ZoneAlarm is running, it's constantly opening new processes that in Task Manager are called 'ZoneAlarm AntiKeylogger'. Process Explorer calls them AkSVC.exe. These small processes build up until I have thousands of them running and my RAM is clogged. When I shut down ZoneAlarm (after disconnecting that computer from the internet), these excess processes all disappear and my resources are freed up again. When I start up ZoneAlarm, the processes begin building up again.
Windows Defender also appears damaged - it's permanently in 'snooze' mode and I can't wake it up again.
Here is the output for Process Explorer - can you see anything that looks evil? I've only included a few dozen of the AkSVC.exe processes - they go on for pages.
Process CPU Private Bytes Working Set PID Description Company Name
System Idle Process 74.88 0 K 4 K 0
System 0.89 1,776 K 664,820 K 4
Interrupts 1.25 0 K 0 K n/a Hardware Interrupts and DPCs
smss.exe 396 K 960 K 408
csrss.exe 0.06 1,460 K 3,716 K 552
wininit.exe 960 K 4,284 K 660
services.exe 0.06 3,408 K 7,332 K 736
svchost.exe 0.15 7,116 K 10,400 K 844 Host Process for Windows Services Microsoft Corporation
SkypeHost.exe Suspended 4,092 K 240 K 2540 Microsoft Skype Microsoft Corporation
RuntimeBroker.exe 12,200 K 12,808 K 2680 Runtime Broker Microsoft Corporation
ShellExperienceHost.exe 22,472 K 11,968 K 3232 Windows Shell Experience Host Microsoft Corporation
SearchUI.exe Suspended 42,976 K 404 K 508 Search and Cortana application Microsoft Corporation
ApplicationFrameHost.exe 10,324 K 2,820 K 7856 Application Frame Host Microsoft Corporation
SystemSettings.exe Suspended 14,216 K 300 K 8060 Settings Microsoft Corporation
Video.UI.exe Suspended 8,932 K 272 K 488 Video Application Microsoft Corporation
dllhost.exe 0.38 1,776 K 9,644 K 22916 COM Surrogate Microsoft Corporation
svchost.exe 0.14 4,368 K 6,224 K 968 Host Process for Windows Services Microsoft Corporation
svchost.exe 0.20 19,620 K 40,348 K 8 Host Process for Windows Services Microsoft Corporation
taskeng.exe 1,708 K 8,112 K 2256 Task Scheduler Engine Microsoft Corporation
ioloGovernor64.exe 0.99 8,676 K 11,864 K 2364 iolo Process Governor iolo technologies, LLC
sihost.exe 5,040 K 9,912 K 2340 Shell Infrastructure Host Microsoft Corporation
taskhostw.exe < 0.01 5,516 K 5,412 K 4928 Host Process for Windows Tasks Microsoft Corporation
taskeng.exe < 0.01 1,248 K 6,016 K 19516
wermgr.exe 1.30 2,696 K 10,448 K 18856
svchost.exe 0.19 80,836 K 67,136 K 472 Host Process for Windows Services Microsoft Corporation
dasHost.exe 3,756 K 1,528 K 1776
svchost.exe 0.01 3,860 K 4,160 K 1116 Host Process for Windows Services Microsoft Corporation
svchost.exe 0.08 14,828 K 13,492 K 1124 Host Process for Windows Services Microsoft Corporation
audiodg.exe 5,932 K 10,440 K 23548 Windows Audio Device Graph Isolation Microsoft Corporation
svchost.exe 0.01 172,860 K 30,424 K 1132 Host Process for Windows Services Microsoft Corporation
svchost.exe 0.05 9,296 K 9,116 K 1140 Host Process for Windows Services Microsoft Corporation
atiesrxx.exe 1,136 K 940 K 1332 AMD External Events Service Module AMD
atieclxx.exe 1,976 K 1,108 K 1416
svchost.exe 0.01 7,232 K 10,700 K 1368 Host Process for Windows Services Microsoft Corporation
vsmon.exe 2.62 310,328 K 273,328 K 1808 ZoneAlarm Check Point Software Technologies Ltd.
svchost.exe 4,432 K 8,428 K 2548 Host Process for Windows Services Microsoft Corporation
spoolsv.exe 6,020 K 2,332 K 2732 Spooler SubSystem App Microsoft Corporation
svchost.exe 1,336 K 384 K 2944 Host Process for Windows Services Microsoft Corporation
svchost.exe 0.02 8,076 K 17,260 K 2992 Host Process for Windows Services Microsoft Corporation
ASGT.exe 744 K 680 K 3048
armsvc.exe 1,232 K 1,220 K 3068 Adobe Acrobat Update Service Adobe Systems Incorporated
ioloServiceManager.exe 36,632 K 20,888 K 2308 iolo System component iolo technologies, LLC
LiveBoost.exe 0.01 18,088 K 18,868 K 2832 iolo LiveBoost iolo technologies, LLC
mDNSResponder.exe 1,544 K 2,424 K 2316 Bonjour Service Apple Inc.
AppleMobileDeviceService.exe < 0.01 3,228 K 2,080 K 2336 MobileDeviceService Apple Inc.
mbae-svc.exe 0.05 4,172 K 11,748 K 3096 Malwarebytes Anti-Exploit Service Malwarebytes Corporation
mbae64.exe < 0.01 1,360 K 5,092 K 3908
conhost.exe 0.14 1,280 K 1,112 K 3916
AdAwareService.exe 0.01 210,552 K 9,356 K 3108 Ad-Aware service Lavasoft
AdAwareTray.exe 0.02 11,652 K 5,072 K 4376 Ad-Aware tray Lavasoft
PnkBstrA.exe < 0.01 1,260 K 1,120 K 3160
svchost.exe 1,948 K 440 K 3196 Host Process for Windows Services Microsoft Corporation
SDUpdSvc.exe 0.08 8,216 K 2,148 K 3220 Spybot-S&D 2 Background update service Safer-Networking Ltd.
RzKLService.exe 1,196 K 888 K 3308 RzKLService.exe Razer Inc.
SDWSCSvc.exe 0.06 6,160 K 4,136 K 3432 Windows Security Center integration. Safer-Networking Ltd.
Antitheft.exe < 0.01 4,224 K 2,780 K 3440 ZoneAlarm Anti-theft Service Check Point Software Technologies Ltd.
SearchIndexer.exe 0.04 29,424 K 8,284 K 4120 Microsoft Windows Search Indexer Microsoft Corporation
alg.exe 1,108 K 956 K 4428 Application Layer Gateway Service Microsoft Corporation
svchost.exe < 0.01 1,684 K 3,248 K 5216 Host Process for Windows Services Microsoft Corporation
iPodService.exe 0.01 2,128 K 2,252 K 2960 iPodService Module (64-bit) Apple Inc.
GameScannerService.exe 0.29 19,016 K 4,648 K 6708 GameScannerService
svchost.exe 2,188 K 748 K 8008 Host Process for Windows Services Microsoft Corporation
AkSVC.exe 3.68 2,956 K 5,324 K 22692 ZoneAlarm AntiKeylogger Check Point Software Technologies LTD
WerFault.exe 24.72 4,208 K 9,948 K 22116
AkSVC.exe Suspended 168 K 32 K 12984
lsass.exe 0.21 5,064 K 12,228 K 744 Local Security Authority Process Microsoft Corporation
csrss.exe 0.41 5,956 K 7,280 K 676
winlogon.exe 1,884 K 7,740 K 896
dwm.exe 0.30 48,044 K 35,716 K 448
fontdrvhost.exe 788 K 532 K 5080
explorer.exe 0.04 43,236 K 93,316 K 2532 Windows Explorer Microsoft Corporation
LWEMon.exe 0.05 4,040 K 3,000 K 5840 Logitech WingMan Event Monitor Logitech Inc.
iTunesHelper.exe < 0.01 4,152 K 2,672 K 5868 iTunesHelper Apple Inc.
cnext.exe < 0.01 110,780 K 4,648 K 5896 Radeon Settings: Host Application Advanced Micro Devices, Inc.
OneDrive.exe 6,024 K 5,976 K 2392 Microsoft OneDrive Microsoft Corporation
procexp.exe 2,816 K 9,624 K 6620 Sysinternals Process Explorer Sysinternals -
www.sysinternals.com procexp64.exe 14.50 33,940 K 70,848 K 5188 Sysinternals Process Explorer Sysinternals -
www.sysinternals.comAkSA.exe 0.01 3,180 K 3,112 K 2804 ZoneAlarm AntiKeylogger Check Point Software Technologies LTD
AkSVC.exe Suspended 192 K 28 K 5344
AkSVC.exe Suspended 172 K 12 K 5816
AkSVC.exe Suspended 176 K 12 K 6052
AkSVC.exe Suspended 176 K 12 K 3720
mbae.exe 5,288 K 11,820 K 2380 Malwarebytes Anti-Exploit Malwarebytes Corporation
zatray.exe 0.01 52,432 K 6,404 K 5788 ZoneAlarm Check Point Software Technologies Ltd.
SDTray.exe 0.24 11,236 K 6,744 K 5880 Spybot - Search & Destroy tray access Safer-Networking Ltd.
AkSVC.exe Suspended 172 K 12 K 6108
raptr.exe 0.22 94,932 K 16,888 K 316 Raptr Desktop App Raptr, Inc
raptr_im.exe 0.02 13,000 K 7,092 K 6484 Raptr Desktop App Raptr, Inc
raptr_ep64.exe 2,848 K 1,312 K 7772 Elevation Proxy Raptr Inc.
AkSVC.exe Suspended 176 K 12 K 4844
AkSVC.exe Suspended 168 K 12 K 5964
AkSVC.exe Suspended 176 K 12 K 5620
AkSVC.exe Suspended 172 K 12 K 732
AkSVC.exe Suspended 172 K 12 K 1040
AkSVC.exe Suspended 172 K 12 K 6156
AkSVC.exe Suspended 172 K 12 K 7020
AkSVC.exe Suspended 184 K 12 K 7876
AkSVC.exe Suspended 176 K 12 K 8124
AkSVC.exe Suspended 168 K 12 K 7228
AkSVC.exe Suspended 172 K 12 K 6636
AkSVC.exe Suspended 168 K 12 K 7104
AkSVC.exe Suspended 172 K 12 K 7100
AkSVC.exe Suspended 172 K 12 K 7416
AkSVC.exe Suspended 168 K 12 K 7724
AkSVC.exe Suspended 168 K 12 K 8100
AkSVC.exe Suspended 200 K 12 K 7056
AkSVC.exe Suspended 180 K 12 K 5592
AkSVC.exe Suspended 172 K 12 K 7672
AkSVC.exe Suspended 172 K 12 K 3740
AkSVC.exe Suspended 168 K 12 K 5928
AkSVC.exe Suspended 168 K 12 K 7844
AkSVC.exe Suspended 184 K 12 K 8016
AkSVC.exe Suspended 176 K 12 K 2644
AkSVC.exe Suspended 172 K 12 K 6688
AkSVC.exe Suspended 168 K 12 K 7608
AkSVC.exe Suspended 176 K 12 K 7112
AkSVC.exe Suspended 172 K 12 K 7188
AkSVC.exe Suspended 168 K 12 K 7480
AkSVC.exe Suspended 168 K 12 K 6980
AkSVC.exe Suspended 168 K 12 K 7660
AkSVC.exe Suspended 172 K 24 K 5528
AkSVC.exe Suspended 176 K 12 K 3496
AkSVC.exe Suspended 168 K 12 K 4828
AkSVC.exe Suspended 172 K 12 K 2848
AkSVC.exe Suspended 172 K 12 K 7884
AkSVC.exe Suspended 176 K 12 K 7468
AkSVC.exe Suspended 172 K 12 K 7268
AkSVC.exe Suspended 176 K 12 K 7460
AkSVC.exe Suspended 168 K 12 K 3212
AkSVC.exe Suspended 176 K 12 K 8188
AkSVC.exe Suspended 176 K 12 K 256
AkSVC.exe Suspended 168 K 12 K 7380
AkSVC.exe Suspended 200 K 12 K 3076
AkSVC.exe Suspended 168 K 12 K 1032
AkSVC.exe Suspended 172 K 12 K 5472
Thanks,
Gav