ZoneAlarm uses something called TrueVector (vsmon.exe) which controls Internet access on a PC. It stars when you boot up the machine, as it is designed to protect your machine, In early versions it runs even when you close any software and will do so until you eventually shut down the PC.It makes sure that its protection is running all the time - even if you have switched on, but not logged on. (and presumably logged off but not switched off)