How to force a Service to stop?

[Paul Speller]

Hi there,

I'm running Windows XP Pro and Zone Alarm Pro. ZA runs a service called
TrueVector Internet Monitor. I've been having some problems with ZA and
Internet Connection Sharing, which are easily resolved by simply
restarting Zone Alarm from its system tray icon.

However, often the problem comes up when I am not here and other network
users would like to be able to restart this without having me Remote
Desktop in to sort it out for them.

I got psservice.exe from the sysinternals web site but there is
something strange about the TrueVector service, which I have not come
across before: it can't be controlled (stopped etc.). All the buttons
are greyed out in its Properties in Services, and psservice says it
can't be restarted.

Clearly it can be restarted because when I restart Zone Alarm via its
system tray icon it quits and restarts the service too. But it can't be
restarted in any way other than this right-click action, which is a real
pain.

I've been looking at Security Templates and wondering if they can help,
but I am completely new to that area and simply don't know what I'm
doing (despite being an advanced Windows user in most respects - so
don't worry about explaining what a taskbar is or how to access MMC in
your response ).

If anyone could suggest how I could make the TrueVector service be
'controllable' (for want of a better word) - or suggest an alternative
way around my predicament - I would be most appreciative.

Thanks,

Paul Speller

 

[Wesley Vogel]

Paul;
When I need to kill Zone Alarm (Free Version) and TrueVector Internet Monitor Service.
While installing software, or whatever, I kill zonealarm.exe and
VSMON.EXE with Ctrl + Alt + Delete | End Task.
I have a shortcut to: C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe
for restarting. This also starts the TrueVector Service.
However, in services.msc, my TrueVector Service has all
the buttons; only Start and Resume are grayed out while it's running.
=========
TrueVector Internet Monitor | Log On tab |
Local System account??
Allow service to interact with desktop??
[Specifies whether the service provides a user interface on a desktop that can be used by whomever
is logged on when the service is started. This option is available only if the service is running as
a LocalSystem account.]
Or is This account: checked??
[Assigns a logon account to a service. Although most services log on to the system account, some
services can be configured to log on to special user accounts, so that the user can have access to
resources such as files and folders that are protected.]
==============
Are you using the Free Version?
Maybe something is corrupted.
Uninstall, reinstall?

 

[Paul Speller]

Paul;
When I need to kill Zone Alarm (Free Version) and TrueVector Internet Monitor Service.
While installing software, or whatever, I kill zonealarm.exe and
VSMON.EXE with Ctrl + Alt + Delete | End Task.

When I do this (End Process rather than End Task, since neither process
has a window associated with it generally), zonealarm.exe will let me
kill it (provided I have uncheck the option within Zone Alarm called
"Protect the ZoneAlarm Pro client"), but vsmon.exe will not - "Access is
denied".

I have a shortcut to: C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe
for restarting. This also starts the TrueVector Service

Aha, I think you are on a different version from mine - I have
4.5.538.000, which changed the .exe file for the program interface from
zonealarm.exe to zlclient.exe. So perhaps these extra security measures
(which are presumably designed to prevent viruses etc. from killing the
ZoneAlarm processes in order to launch an attack) were only introduced
in the latest version.

However, in services.msc, my TrueVector Service has all
the buttons; only Start and Resume are grayed out while it's running.
=========
TrueVector Internet Monitor | Log On tab |
Local System account??
? Allow service to interact with desktop??
[Specifies whether the service provides a user interface on a desktop that can be used by whomever
is logged on when the service is started. This option is available only if the service is running as
a LocalSystem account.]
Or is ? This account: checked??
[Assigns a logon account to a service. Although most services log on to the system account, some
services can be configured to log on to special user accounts, so that the user can have access to
resources such as files and folders that are protected.]

My one has the first thing selected, Local System Account, and "Allow
service" etc. is checked. All four control buttons are greyed out.

I don't think it's a corruption, I think it's just an extra security
measure. I assume Zone Labs have found out how things like vital MS
system services manage to get their control buttons greyed out so you
can't stop them, and duplicated it. So I just need to find out how to
undo this 'improvement'!

Thanks for the tips anyway. My advice to you is: don't upgrade if you
want to be able to kill your processes! (Although if you're sat at the
PC you can kill them both easily enough just by choosing Shutdown
ZoneAlarm Pro from the system tray context menu.)

Paul

 

[Wesley Vogel]

Paul;
Yes, I have an older version of Zone Alarm (Free Version).
I did upgrade, but I uninstalled it and reinstalled version 3.7.211
because I did not like the way the new version wanted me to try
the pro version or whatever.

For all intents and purposes my version seems to be a completely
different program.

I won't upgrade if I don't have to. Thanks for the tip. )
--
Hope this helps. Let us know.
Wes

In

Paul;
When I need to kill Zone Alarm (Free Version) and TrueVector Internet Monitor Service.
While installing software, or whatever, I kill zonealarm.exe and
VSMON.EXE with Ctrl + Alt + Delete | End Task.

When I do this (End Process rather than End Task, since neither process
has a window associated with it generally), zonealarm.exe will let me
kill it (provided I have uncheck the option within Zone Alarm called
"Protect the ZoneAlarm Pro client"), but vsmon.exe will not - "Access is
denied".

I have a shortcut to: C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe
for restarting. This also starts the TrueVector Service

Aha, I think you are on a different version from mine - I have
4.5.538.000, which changed the .exe file for the program interface from
zonealarm.exe to zlclient.exe. So perhaps these extra security measures
(which are presumably designed to prevent viruses etc. from killing the
ZoneAlarm processes in order to launch an attack) were only introduced
in the latest version.

However, in services.msc, my TrueVector Service has all
the buttons; only Start and Resume are grayed out while it's running.
=========
TrueVector Internet Monitor | Log On tab |
Local System account??
? Allow service to interact with desktop??
[Specifies whether the service provides a user interface on a desktop that can be used by
whomever is logged on when the service is started. This option is available only if the service
is running as a LocalSystem account.]
Or is ? This account: checked??
[Assigns a logon account to a service. Although most services log on to the system account, some
services can be configured to log on to special user accounts, so that the user can have access
to resources such as files and folders that are protected.]

My one has the first thing selected, Local System Account, and "Allow
service" etc. is checked. All four control buttons are greyed out.

I don't think it's a corruption, I think it's just an extra security
measure. I assume Zone Labs have found out how things like vital MS
system services manage to get their control buttons greyed out so you
can't stop them, and duplicated it. So I just need to find out how to
undo this 'improvement'!

Thanks for the tips anyway. My advice to you is: don't upgrade if you
want to be able to kill your processes! (Although if you're sat at the
PC you can kill them both easily enough just by choosing Shutdown
ZoneAlarm Pro from the system tray context menu.)

Paul

 

[Tom Pepper Willett]

You can disable the latest free Version of ZA from bugging you about ZA Pro.

Tom

Paul;
Yes, I have an older version of Zone Alarm (Free Version).
I did upgrade, but I uninstalled it and reinstalled version 3.7.211
because I did not like the way the new version wanted me to try
the pro version or whatever.

For all intents and purposes my version seems to be a completely
different program.

I won't upgrade if I don't have to. Thanks for the tip. )
--
Hope this helps. Let us know.
Wes

In

Paul;
When I need to kill Zone Alarm (Free Version) and TrueVector Internet Monitor Service.
While installing software, or whatever, I kill zonealarm.exe and
VSMON.EXE with Ctrl + Alt + Delete | End Task.

When I do this (End Process rather than End Task, since neither process
has a window associated with it generally), zonealarm.exe will let me
kill it (provided I have uncheck the option within Zone Alarm called
"Protect the ZoneAlarm Pro client"), but vsmon.exe will not - "Access is
denied".

I have a shortcut to: C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe
for restarting. This also starts the TrueVector Service

Aha, I think you are on a different version from mine - I have
4.5.538.000, which changed the .exe file for the program interface from
zonealarm.exe to zlclient.exe. So perhaps these extra security measures
(which are presumably designed to prevent viruses etc. from killing the
ZoneAlarm processes in order to launch an attack) were only introduced
in the latest version.

However, in services.msc, my TrueVector Service has all
the buttons; only Start and Resume are grayed out while it's running.
=========
TrueVector Internet Monitor | Log On tab |
Local System account??
? Allow service to interact with desktop??
[Specifies whether the service provides a user interface on a desktop that can be used by
whomever is logged on when the service is started. This option is available only if the service
is running as a LocalSystem account.]
Or is ? This account: checked??
[Assigns a logon account to a service. Although most services log on to the system account, some
services can be configured to log on to special user accounts, so that the user can have access
to resources such as files and folders that are protected.]

My one has the first thing selected, Local System Account, and "Allow
service" etc. is checked. All four control buttons are greyed out.

I don't think it's a corruption, I think it's just an extra security
measure. I assume Zone Labs have found out how things like vital MS
system services manage to get their control buttons greyed out so you
can't stop them, and duplicated it. So I just need to find out how to
undo this 'improvement'!

Thanks for the tips anyway. My advice to you is: don't upgrade if you
want to be able to kill your processes! (Although if you're sat at the
PC you can kill them both easily enough just by choosing Shutdown
ZoneAlarm Pro from the system tray context menu.)

Paul

 

[JAX]

Hi Wes,

I have version 4.5.538.000 installed. As far as I know, it is the latest. I
don't get nagged about the Pro. purchase, I don't even get the old splash
screen at boot As best I recall, the only thing I have done is set it to not
notify me of all activity and, of course, some of the "permissions".

Cheers, JAX

Paul;
Yes, I have an older version of Zone Alarm (Free Version).
I did upgrade, but I uninstalled it and reinstalled version 3.7.211
because I did not like the way the new version wanted me to try
the pro version or whatever.

For all intents and purposes my version seems to be a completely
different program.

I won't upgrade if I don't have to. Thanks for the tip. )
--
Hope this helps. Let us know.
Wes

In

Paul;
When I need to kill Zone Alarm (Free Version) and TrueVector Internet Monitor Service.
While installing software, or whatever, I kill zonealarm.exe and
VSMON.EXE with Ctrl + Alt + Delete | End Task.

When I do this (End Process rather than End Task, since neither process
has a window associated with it generally), zonealarm.exe will let me
kill it (provided I have uncheck the option within Zone Alarm called
"Protect the ZoneAlarm Pro client"), but vsmon.exe will not - "Access is
denied".

I have a shortcut to: C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe
for restarting. This also starts the TrueVector Service

Aha, I think you are on a different version from mine - I have
4.5.538.000, which changed the .exe file for the program interface from
zonealarm.exe to zlclient.exe. So perhaps these extra security measures
(which are presumably designed to prevent viruses etc. from killing the
ZoneAlarm processes in order to launch an attack) were only introduced
in the latest version.

However, in services.msc, my TrueVector Service has all
the buttons; only Start and Resume are grayed out while it's running.
=========
TrueVector Internet Monitor | Log On tab |
Local System account??
? Allow service to interact with desktop??
[Specifies whether the service provides a user interface on a desktop that can be used by
whomever is logged on when the service is started. This option is available only if the service
is running as a LocalSystem account.]
Or is ? This account: checked??
[Assigns a logon account to a service. Although most services log on to the system account, some
services can be configured to log on to special user accounts, so that the user can have access
to resources such as files and folders that are protected.]

My one has the first thing selected, Local System Account, and "Allow
service" etc. is checked. All four control buttons are greyed out.

I don't think it's a corruption, I think it's just an extra security
measure. I assume Zone Labs have found out how things like vital MS
system services manage to get their control buttons greyed out so you
can't stop them, and duplicated it. So I just need to find out how to
undo this 'improvement'!

Thanks for the tips anyway. My advice to you is: don't upgrade if you
want to be able to kill your processes! (Although if you're sat at the
PC you can kill them both easily enough just by choosing Shutdown
ZoneAlarm Pro from the system tray context menu.)

Paul

 

[Wesley Vogel]

Tom;
Thanks for the tip. In I effect, I already did that. )

Wes

In

You can disable the latest free Version of ZA from bugging you about ZA Pro.

Tom

Paul;
Yes, I have an older version of Zone Alarm (Free Version).
I did upgrade, but I uninstalled it and reinstalled version 3.7.211
because I did not like the way the new version wanted me to try
the pro version or whatever.

For all intents and purposes my version seems to be a completely
different program.

I won't upgrade if I don't have to. Thanks for the tip. )
--
Hope this helps. Let us know.
Wes

In

On Thu, 22 Jan 2004 02:16:57 GMT, Wesley Vogel wrote:

Paul;
When I need to kill Zone Alarm (Free Version) and TrueVector Internet Monitor Service.
While installing software, or whatever, I kill zonealarm.exe and
VSMON.EXE with Ctrl + Alt + Delete | End Task.

When I do this (End Process rather than End Task, since neither process
has a window associated with it generally), zonealarm.exe will let me
kill it (provided I have uncheck the option within Zone Alarm called
"Protect the ZoneAlarm Pro client"), but vsmon.exe will not - "Access is
denied".

I have a shortcut to: C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe
for restarting. This also starts the TrueVector Service

Aha, I think you are on a different version from mine - I have
4.5.538.000, which changed the .exe file for the program interface from
zonealarm.exe to zlclient.exe. So perhaps these extra security measures
(which are presumably designed to prevent viruses etc. from killing the
ZoneAlarm processes in order to launch an attack) were only introduced
in the latest version.

However, in services.msc, my TrueVector Service has all
the buttons; only Start and Resume are grayed out while it's running.
=========
TrueVector Internet Monitor | Log On tab |
Local System account??
? Allow service to interact with desktop??
[Specifies whether the service provides a user interface on a desktop that can be used by
whomever is logged on when the service is started. This option is available only if the
service is running as a LocalSystem account.]
Or is ? This account: checked??
[Assigns a logon account to a service. Although most services log on to the system account,
some services can be configured to log on to special user accounts, so that the user can
have access to resources such as files and folders that are protected.]

My one has the first thing selected, Local System Account, and "Allow
service" etc. is checked. All four control buttons are greyed out.

I don't think it's a corruption, I think it's just an extra security
measure. I assume Zone Labs have found out how things like vital MS
system services manage to get their control buttons greyed out so you
can't stop them, and duplicated it. So I just need to find out how to
undo this 'improvement'!

Thanks for the tips anyway. My advice to you is: don't upgrade if you
want to be able to kill your processes! (Although if you're sat at the
PC you can kill them both easily enough just by choosing Shutdown
ZoneAlarm Pro from the system tray context menu.)

Paul

 

[Wesley Vogel]

JAX;
Thanks for the tip.
I disabled the ZA splash screen; by accident,
not on purpose, by having ZA start from:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run


Maybe I'll give it a try again.
Wes

In

Hi Wes,

I have version 4.5.538.000 installed. As far as I know, it is the latest. I
don't get nagged about the Pro. purchase, I don't even get the old splash
screen at boot As best I recall, the only thing I have done is set it to not
notify me of all activity and, of course, some of the "permissions".

Cheers, JAX

Paul;
Yes, I have an older version of Zone Alarm (Free Version).
I did upgrade, but I uninstalled it and reinstalled version 3.7.211
because I did not like the way the new version wanted me to try
the pro version or whatever.

For all intents and purposes my version seems to be a completely
different program.

I won't upgrade if I don't have to. Thanks for the tip. )
--
Hope this helps. Let us know.
Wes

In

On Thu, 22 Jan 2004 02:16:57 GMT, Wesley Vogel wrote:

Paul;
When I need to kill Zone Alarm (Free Version) and TrueVector Internet Monitor Service.
While installing software, or whatever, I kill zonealarm.exe and
VSMON.EXE with Ctrl + Alt + Delete | End Task.

When I do this (End Process rather than End Task, since neither process
has a window associated with it generally), zonealarm.exe will let me
kill it (provided I have uncheck the option within Zone Alarm called
"Protect the ZoneAlarm Pro client"), but vsmon.exe will not - "Access is
denied".

I have a shortcut to: C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe
for restarting. This also starts the TrueVector Service

Aha, I think you are on a different version from mine - I have
4.5.538.000, which changed the .exe file for the program interface from
zonealarm.exe to zlclient.exe. So perhaps these extra security measures
(which are presumably designed to prevent viruses etc. from killing the
ZoneAlarm processes in order to launch an attack) were only introduced
in the latest version.

However, in services.msc, my TrueVector Service has all
the buttons; only Start and Resume are grayed out while it's running.
=========
TrueVector Internet Monitor | Log On tab |
Local System account??
? Allow service to interact with desktop??
[Specifies whether the service provides a user interface on a desktop that can be used by
whomever is logged on when the service is started. This option is available only if the
service is running as a LocalSystem account.]
Or is ? This account: checked??
[Assigns a logon account to a service. Although most services log on to the system account,
some services can be configured to log on to special user accounts, so that the user can
have access to resources such as files and folders that are protected.]

My one has the first thing selected, Local System Account, and "Allow
service" etc. is checked. All four control buttons are greyed out.

I don't think it's a corruption, I think it's just an extra security
measure. I assume Zone Labs have found out how things like vital MS
system services manage to get their control buttons greyed out so you
can't stop them, and duplicated it. So I just need to find out how to
undo this 'improvement'!

Thanks for the tips anyway. My advice to you is: don't upgrade if you
want to be able to kill your processes! (Although if you're sat at the
PC you can kill them both easily enough just by choosing Shutdown
ZoneAlarm Pro from the system tray context menu.)

Paul