Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

12.0.104.000 20.00%
11.0.768.000 8.57%
11.0.000.504 20.00%
11.0.000.057 8.57%
11.0.000.038 2.86%
11.0.000.020 20.00%
11.0.000.018 2.86%
10.2.078.000 2.86%
10.2.074.000 2.86%
10.2.047.000 8.57%
10.1.065.000 2.86%

Relationships

Child process
Related files

PE structurePE file structure
Show functions
Import table
advapi32.dll
RegOpenKeyExW, RegQueryValueExW, RegCreateKeyExA, RegSetValueExA, RegOpenKeyExA, RegCloseKey, RegQueryValueExA
kernel32.dll
GetCurrentProcess, TerminateProcess, GetStartupInfoA, InterlockedExchange, GetSystemTimeAsFileTime, GetCurrentProcessId, GetCurrentThreadId, QueryPerformanceCounter, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, FreeLibrary, LoadLibraryA, GetUserDefaultLangID, CloseHandle, FlushFileBuffers, GetTickCount, WriteFile, ReadFile, PeekNamedPipe, ResetEvent, WaitForSingleObject, Sleep, CreateFileA, SetEvent, CreateThread, CreatePipe, CreateEventA, lstrlenA, MoveFileA, DeleteFileA, GetLocalTime, GetFileSizeEx, SetStdHandle, SetFilePointer, UnhandledExceptionFilter, SetCurrentDirectoryA, GetCurrentDirectoryA, lstrcpyA, SetConsoleTitleA, GetConsoleTitleA, AllocConsole, lstrcatA, GetDiskFreeSpaceExA, GlobalUnlock, GlobalLock, GlobalAlloc, FindClose, FindNextFileA, FindFirstFileA, WideCharToMultiByte, LocalFree, GetCommandLineW, lstrcmpA, GetModuleFileNameA, RaiseException, InterlockedCompareExchange, GetVersionExA, GetWindowsDirectoryW, GetSystemDirectoryW, GetSystemWow64DirectoryW, IsDebuggerPresent, GetLastError
msvcp90.dll
DllMain
msvcr90.dll
DllMain
ole32.dll
CoUninitialize
shell32.dll
ShellExecuteExA, CommandLineToArgvW
shlwapi.dll
PathAppendA, PathRemoveFileSpecA, SHDeleteKeyA
user32.dll
CloseClipboard, wsprintfA, SetClipboardData, EmptyClipboard, LoadImageA, LoadStringA, OpenClipboard
zpeng25.dll
Py_VerboseFlag, _Py_NoneStruct

zatray.exe

ZoneAlarm by Check Point Software Technologies Ltd. (Signed)

Remove zatray.exe
Version:   12.0.104.000
MD5:   76085f350aac7eea7d91471f58a9e344
SHA1:   8471fbff690a1eb897f8b8b36b7846e404c27d7c

What is zatray.exe?

zatray.exe is the program that runs in the notification area system tray for the ZoneAlarm application.

About zatray.exe (from Check Point Software Technologies Ltd.)

“ZoneAlarm Security Toolbar is keeping you protected and connected.”

Overview

zatray.exe executes as a process with the local user's privileges. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). This is typically installed with the program ZoneAlarm Free Firewall published by Check Point, Inc. The file is digitally signed by Check Point Software Technologies Ltd. which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:zatray.exe
Publisher:Check Point Software Technologies LTD
Product name:ZoneAlarm
Typical file path:C:\Program Files\checkpoint\zonealarm\zatray.exe
File version:12.0.104.000
Size:72.1 KB (73,832 bytes)
Build date:10/26/2013 7:05 AM
Certificate
Issued to:Check Point Software Technologies Ltd.
Authority (CA):VeriSign
Expiration date:Monday, May 5, 2014
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 9.0
.NET CLR:No
More details

ResourcesPrograms

The following program will install this file
ZoneAlarm Free Firewall
 Check Point, Inc
29% remove
The software is typically bundled with third party installers such as Open Candy. "Offer your users a free software firewall to help them protect their PC -- created by one of the world's leading security companies. Note: Includes ZoneAlarm Security Toolbar with ZoneAlarm homepage, search default and new tab page search."

BehaviorsBehaviors

Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'ZoneAlarm' → "C:\Program Files\CheckPoint\ZoneAlarm\zatray.exe"

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00034883%
0.028634%
Kernel CPU:0.00024281%
0.013761%
User CPU:0.00010601%
0.014873%
Kernel CPU time:4,456 ms/min
100,923,805ms/min
CPU cycles:3,309,802/sec
17,470,203/sec
Context switches:14/sec
284/sec
Memory
Private memory:51.54 MB
21.59 MB
Private (maximum):15.81 MB
Private (minimum):2.05 MB
Non-paged memory:51.54 MB
21.59 MB
Virtual memory:173.63 MB
140.96 MB
Virtual memory (peak):180.32 MB
169.69 MB
Working set:5.92 MB
18.61 MB
Working set (peak):51.6 MB
37.95 MB
Page faults:738,098/min
2,039/min
I/O
I/O read transfer:1.87 KB/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O write transfer:42 Bytes/sec
274.99 KB/min
I/O write operations:4/sec
227/min
I/O other transfer:196 Bytes/sec
448.09 KB/min
I/O other operations:6/sec
1,671/min
Resource allocations
Threads:11
12
Handles:339
600
GUI GDI count:195
103
GUI GDI peak:207
142
GUI USER count:20
49
GUI USER peak:46
71

BehaviorsProcess properties

Tray notification:Yes
Integrety level:Undefined
Platform:64-bit
Command line:"C:\Program Files\checkpoint\zonealarm\zatray.exe"
Owner:User

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 60.00%
Windows 7 Ultimate 11.43%
Microsoft Windows XP 8.57%
Windows 7 Professional 5.71%
Windows Vista Home Premium 2.86%
Windows Vista Home Basic 2.86%
Windows 8 Pro 2.86%
Windows 7 Ultimate N 2.86%
Windows Vista Ultimate 2.86%

Distribution by countryDistribution by country

United States installs about 60.00% of ZoneAlarm.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Acer 40.00%
Sony 20.00%
Hewlett-Packard 20.00%
Sahara 10.00%
Toshiba 10.00%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE