Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

12.0.104.000 20.00%
11.0.768.000 8.57%
11.0.000.504 20.00%
11.0.000.057 8.57%
11.0.000.038 2.86%
11.0.000.020 20.00%
11.0.000.018 2.86%
10.2.078.000 2.86%
10.2.074.000 2.86%
10.2.047.000 8.57%
10.1.065.000 2.86%

Relationships

PE structurePE file structure
Show functions
Import table
advapi32.dll
RegOpenKeyExW, RegQueryValueExW, RegCreateKeyExA, RegSetValueExA, RegOpenKeyExA, RegCloseKey, RegQueryValueExA
kernel32.dll
GetCurrentProcess, TerminateProcess, GetStartupInfoA, InterlockedExchange, GetSystemTimeAsFileTime, GetCurrentProcessId, GetCurrentThreadId, QueryPerformanceCounter, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, FreeLibrary, LoadLibraryA, GetUserDefaultLangID, CloseHandle, FlushFileBuffers, GetTickCount, WriteFile, ReadFile, PeekNamedPipe, ResetEvent, WaitForSingleObject, Sleep, CreateFileA, SetEvent, CreateThread, CreatePipe, CreateEventA, lstrlenA, MoveFileA, DeleteFileA, GetLocalTime, GetFileSizeEx, SetStdHandle, SetFilePointer, UnhandledExceptionFilter, SetCurrentDirectoryA, GetCurrentDirectoryA, lstrcpyA, SetConsoleTitleA, GetConsoleTitleA, AllocConsole, lstrcatA, GetDiskFreeSpaceExA, GlobalUnlock, GlobalLock, GlobalAlloc, FindClose, FindNextFileA, FindFirstFileA, WideCharToMultiByte, LocalFree, GetCommandLineW, lstrcmpA, GetModuleFileNameA, RaiseException, InterlockedCompareExchange, GetVersionExA, GetWindowsDirectoryW, GetSystemDirectoryW, GetSystemWow64DirectoryW, IsDebuggerPresent, GetLastError
msvcp90.dll
DllMain
msvcr90.dll
DllMain
ole32.dll
CoUninitialize
shell32.dll
ShellExecuteExA, CommandLineToArgvW
shlwapi.dll
PathAppendA, PathRemoveFileSpecA, SHDeleteKeyA
user32.dll
CloseClipboard, wsprintfA, SetClipboardData, EmptyClipboard, LoadImageA, LoadStringA, OpenClipboard
zpeng25.dll
Py_VerboseFlag, _Py_NoneStruct

zatray.exe

ZoneAlarm by Check Point Software Technologies Ltd. (Signed)

Remove zatray.exe
Version:   11.0.000.038
MD5:   01848b246695d84fd5592c40136a0014
SHA1:   f636b87151da8ac50559126558316bf972ffc83f
SHA256:   aea8ef78d18575c7043c1df41b4c5529bfdaa77427d9b63bfa99a0d4579403b9

What is zatray.exe?

zatray.exe is the program that runs in the notification area system tray for the ZoneAlarm application.

About zatray.exe (from Check Point Software Technologies Ltd.)

“ZoneAlarm Security Toolbar is keeping you protected and connected.”

Overview

zatray.exe executes as a process under the SYSTEM account with extensive privileges (the system and the administrator accounts have the same file privileges). It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). It is installed with a couple of know programs including ZoneAlarm Free Antivirus + Firewall published by Check Point, Inc and ZoneAlarm Free Firewall published by Check Point, Inc. The file is digitally signed by Check Point Software Technologies Ltd. which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:zatray.exe
Publisher:Check Point Software Technologies LTD
Product name:ZoneAlarm
Typical file path:C:\Program Files\checkpoint\zonealarm\zatray.exe
File version:11.0.000.038
Size:72.25 KB (73,984 bytes)
Build date:1/2/2013 2:36 PM
Certificate
Issued to:Check Point Software Technologies Ltd.
Authority (CA):VeriSign
Expiration date:Monday, May 5, 2014
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 9.0
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
ZoneAlarm Free Antivirus + Firewall
 Check Point, Inc
30% remove
“The only free Antivirus that also includes a Firewall. Protect yourself with the ultimate free Internet security solution. The all-in-one security solution that seamlessly integrates antivirus and firewall together for maximum protection and performance. Product features: Antivirus/Anti-spyware Engine--Detect and blocks viruses, spyware, trojans, worms, bots, and rootkits. Two-Way Firewall--Makes your PC invisible to hackers and stops s...”
ZoneAlarm Free Firewall
 Check Point, Inc
29% remove
The software is typically bundled with third party installers such as Open Candy. "Offer your users a free software firewall to help them protect their PC -- created by one of the world's leading security companies. Note: Includes ZoneAlarm Security Toolbar with ZoneAlarm homepage, search default and new tab page search."

BehaviorsBehaviors

Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'ZoneAlarm' → "C:\Program Files\CheckPoint\ZoneAlarm\zatray.exe"

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00138324%
0.028634%
Kernel CPU:0.00070307%
0.013761%
User CPU:0.00068018%
0.014873%
Memory
Private (maximum):7.26 MB
Private (minimum):2.04 MB

BehaviorsProcess properties

Platform:32-bit
Command line:"C:\Program Files\checkpoint\zonealarm\zatray.exe"
Owner:SYSTEM

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 60.00%
Windows 7 Ultimate 11.43%
Microsoft Windows XP 8.57%
Windows 7 Professional 5.71%
Windows Vista Home Premium 2.86%
Windows Vista Home Basic 2.86%
Windows 8 Pro 2.86%
Windows 7 Ultimate N 2.86%
Windows Vista Ultimate 2.86%

Distribution by countryDistribution by country

United States installs about 60.00% of ZoneAlarm.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Acer 40.00%
Sony 20.00%
Hewlett-Packard 20.00%
Sahara 10.00%
Toshiba 10.00%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE