ZoneAlarm and Google Toolbar

[johnkeats]

My ZoneAlarm popped up this alert:

Google Toolbar is trying to access the internet
Validation: Not available in ZoneAlarm
Application: gtb694.tmp.exe
Destination IP: 127.0.0.1ort 4651

More Information Available:

This is the program's first attempt to access the Internet.

I have Google Toolbar installed, but don't really use it, and haven't changed it in more than a year. Furthermore, I find no reference to gtb694 online, and find no correlaton online between Google Toolbar and port 4651. I am wondering whether this is malware impersonating Google Toolbar. I have run ZoneAlarm for a long time and never seen a request like this.



Thanks the help anyone can offer.

 

[Sam25]

Welcome to the Forums!

I'm guessing it's probably just a Google toolbar update. You might want to run a scan with Malwarebytes or better still download Hijackthis, run it on your system and post the log file here so someone could analyze and tell you if your system is infected.

 

[VirtualLarry]

I think it sounds like malware. I remember reading about some malware that tended to infect in the Google Toolbar directories, using fairly random filenames. This sounds like one of them.