FAQ (Frequently Asked Question)

1. My PC’s speed seems to become slower after ZombieZero Personal is installed.

A) If you install ZombieZERO Personal with other anti-virus vaccines and run them together on your PC, your PC must become slower because they may crash or conflict each other and use up more CPU resources. Therefore, we highly recommend you to install ZombieZero Personal and run one anti-virus vaccine on your PC. In addition, if you activate on the real time detection (DDoS, Backdoor, and file exfiltration, your PC may become slower depending on your PC’s specifications. We recommend you to check off on the real time detection function if your PC is low-end specifications.

2. Is it possible to update ZombieZERO Personal even if firewall is activated?

A) The update function of ZombieZero Personal can be applied regardless of firewall configuration.

3. If the threat level on the main screen displays caution or serious, what should I do?

A) After entering detail view in ZombieZero Personal interface, you need to check process that level is high with VirusTotal or your anti-virus. And if you make sure that process is malware, I recommend deleting it. Please enter the view details window for checking each process. We strongly recommend you to check on the high threat level processes with VirusTotal or anti-virus vaccine on your PC. If the process is determined as malware, we recommend you to delete it.

4. Does ZombieZero Personal contain a detection function for malicious web site?

A) ZombieZero Personal is already equipped with a web security function. Based on NPCore’s database, when a specific process attempts to access the malicious website, ZombieZERO immediately alerts the user about the website access.

5. Does ZombieZERO Personal support a proxy server?

A) ZombieZero Personal does not support a proxy server.

You can get more detailed information if you contact technical support center.

6. What is the threat level displaying on screen? Is my PC in danger if the threat level is not 0?

A) NPCore divides running programs and accessed websites with 5 threat levels. Even though the threat level is not 0, your PC might not be in danger. However, I recommend you to check with updated anti-virus for the malware analysis if the threat level is 3 or higher.

7. Why is ZombieZero Personal icon flickering? Is there any problem?

A) ZombieZero Personal tray icon will be flickering if ZombieZERO Personal is normally detecting the APT attack. If ZombieZERO Personal continues to flicker without any event, please visit NPCore’s website and write on Q&A board. We will answer your question in timely manner.

8. What is the minimum requirement of PC specifications to install ZombieZero Personal.

A) ZombieZERO Personal can be running under the following environment.

- CPU: Intel Pentium 4 3GHz

- RAM: 1G

- HDD: Need at least 100MB or more

- OS: Windows XP sp3(32bit), Windows 7(32,64bit), Windows 8(32,64bit)

- Other: .net Framework 4.0(Included in install file)

- Language: English, Korean

9. I cannot connect to the internet during the installation or uninstallation.

A) ZombieZero Personal installs own driver in the NIC(Network Interface Card) to detect the process behavior of transmitting malicious traffic. During this time, you might not be able to connect to internet.

10. I want to delete the high threat level file.

A) ZombieZero Personal does not support this function to delete the malicious file.

So, we recommend you to install an anti-virus vaccine on your PC and check the malicious file with the latest updated vaccine.

11. Can I use ZombieZero Personal for business purpose?

A) ZombieZero Personal is an APT solution for personal users and freeware that is supposed to be used only for personal use. Therefore, we don’t recommend you to use for commercial purpose.

12. Is it related to the malware that PC is frozen or slower?

A) It is a possible situation that the malware affects this symptom for PC being frozen or slower. But it can happen if your system files on the Operating System are damaged. In addition, if there are too many starting program registered in the Windows registry, CPU of your PC can be overload so that your PC will be slower. And then, the installation of several anti-virus can be the problem of this symptom.

13. It shows me malicious whenever I access to one specific website.

A) Currently, ZombieZero Personal contains information about malicious URL in order to protect user PC from C&C server. Recently, hackers tend to make malicious script files or images that are placed in the website. So I recommend you to send a message to the webmaster of applicable website about this.

14. Some files that I think they are normal files, but they are detected as malware.

A) Even if user thinks there is no problem on some files that ZombieZero Personal determines as malware, but they can be malicious files. So we recommend you to check them with the latest anti-virus vaccine.

15. I cannot install ZombieZero Personal.

A) Currently, you can only install ZombieZERO Personal on Windows XP, 7, and 8. ZombieZERO Personal does not support other operating system other than Windows XP, 7, and 8. We recommend you to install the supported operating systems to install ZombieZERO Personal.

16. Suddenly, a blue screen pops up right after I close a process.

A) Among the processes detected by ZombieZero Personal, there are some processes which are essential for the composition of Windows. So, you should not close these processes listed in the below.

audiodg.exe

csrss.exe

dllhost.exe

dwm.exe

hkcmd.exe

lass.exe

lsm.exe

services.exe

svchost.exe

wininit.exe

winlogon.exe

zombiezero personal.exe

zzero.exe

zzeromain.exe

zzerosrvc.exe

zzhook.exe

zzhookx64.exe

17. How is the threat level distinguished?

A) ZombieZero Personal displays the PC status in accordance with the highest risk of malicious behavior in user’s PC.

1 Stage(Normal): User PC has no problem as normal.

2 Stage(Concern): It is the state that weak malicious traffic (DDoS attack) is occurred.

3 Stage(Caution): It is the state that strong malicious traffic session(DDoS attack) is occurred.

4 Stage(Alert): It is the state that reverse connection, file exfiltration, and sneaking are occurred.

5 Stage(Serious): It is the state that C&C server access, malicious URL access, and violation of integrity on core processes are occurred.

20. What is the definition of DDoS attack?

A) DDoS (Distributed Denial of Services) attack is making web server paralyzed with regularly sending abnormal traffic from several PC to one web server, so that server wastes a lot of traffic and normal user cannot connect. It can socially become terrible issue because it is a type of cyber terror that ordinary person can do easily.

If you want to see the DDoS attack ongoing in the world, please refer to the following site.

http://www.digitalattackmap.com/

21. What is www.malware.com?

A) www.malware.com is a web service that everyone in the world can check file with several anti-virus. With over 50 anti-virus programs used in this website, user can scan malware that one anti-virus cannot detect.

22. Is it possible that both ZombieZero Personal and anti-virus are installed in the same host?

A) ZombieZero Personal is an APT defense solution unlike anti-virus vaccines. So we recommend you to use both of them. However using too many anti-virus programs can cause errors on your PC and even make your PC down. Therefore, we don’t recommend you to use multiple vaccines on your PC while using ZombieZERO Personal.

23. I want to delete ZombieZero Personal.

A) You can delete ZombieZero Personal in control panel -> uninstall a program.

After selecting ZombieZero Personal, please click remove, then you can delete it.

24. Installation seems to be too slow.

A) The reason for the slow installation is that .net Framework is not installed in user PC, so it is just a progress of installing that program.

.net Framework is a windows program development tool by Microsoft, and developers can compile network and interface.