What is vsdatant?

Vsdatant.sys is a Windows driver. A driver is a small software program that allows your computer to communicate with hardware or connected devices. This means that a driver has direct access to the internals of the operating system, hardware etc. The free file information forum can help you determine if vsdatant.sys is a Windows system file or if it belongs to an application that you can trust.

Run a free scan to check for vsdatant drivers in need of updating

Vsdatant.sys file information

The process known as TrueVector Device Driver or ZoneAlarm Firewalling Driver

belongs to software TrueVector Device Driver or ZoneAlarm or ZoneAlarm Pro or ZoneAlarm Anti-virus or Zone Labs Internet Security Utility or ZoneAlarm Security Suite

by Zone Labs ( or Check Point Software Technologies LTD or Check Point Software Technologies (

Description: Vsdatant.sys is not essential for Windows and will often cause problems. The vsdatant.sys file is located in the C:\Windows\System32 folder. Known file sizes on Windows 10/8/7/XP are 394,952 bytes (42% of all occurrences), 353,680 bytes and 7 more variants. 
The driver can be started or stopped from Services in the Control Panel or by other programs. The program has no visible window. It is a Verisign signed file. The vsdatant.sys file is digitally signed. The service has no detailed description. Vsdatant.sys is not a Windows system file. Vsdatant.sys is able to record keyboard and mouse inputs. Therefore the technical security rating is 12% dangerous, however you should also read the user reviews.

Uninstalling this variant: In the event of any problems with vsdatant.sys, you can also uninstall ZoneAlarm or ZoneAlarm Pro software via Windows Control Panel/Add or Remove Programs (Windows XP) or Programs and Features (Windows 10/8/7).

Recommended: Identify vsdatant.sys related errors

If vsdatant.sys is located in the C:\Windows\System32\drivers folder, the security rating is 0% dangerous. The file size is 456,088 bytes (50% of all occurrences) or 454,744 bytes. Vsdatant.sys is a Verisign signed file. Vsdatant.sys is able to record keyboard and mouse inputs.

Uninstalling this variant: In the event of any problems with vsdatant.sys, you can also uninstall Zone Labs Internet Security Utility software via Windows Control Panel/Add or Remove Programs (Windows XP) or Programs and Features (Windows 10/8/7).

Important: Some malware camouflages itself as vsdatant.sys. Therefore, you should check the vsdatant.sys process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.


User Comments

used in Zonelabs Zonealarm program go to zonelabs site and download alternative driver file
something left behind after a zonealarm uninstall
it s causing my computer to restart at start up
I want to delete the file
  Murali Krishnan  
I confirm its related to Zone Alarm. It gave me crashes (blue screen of death) when using IExplorer. - system: XP SP2, ZoneAlarm non-commercial, updated in August 2005. Problem actually started to appear after update. If file is removed, ZA stops working, obviously.
Believe part of Zone Alarm Pro
Be sure to remove from Registry
  Troy Mullins  
trojans hides in it found tr/dldr.zlob can only find with avast during pre boot scan //advise
  johnny on the spot  
I have no problems on my desktop but my portable crashes with blue screen + ntoskrnl & vsdatant.sys. My solution is to use vad*.sys ver. 3.7.143 (2003 file) on the portable
  John St  
This program gets loaded over and over again untill the computer stops working . I have found it to be loaded up into the hundreds of times.
Zone Alarm "Firewall" program driver
After a Zone alarm upgrade, Norton utilities detected file was missing. However, it does not create problem: Zone alarm works without it
causing blue screen of death after booting (Win XP Pro/Dell Dimension 9150/Intel DCP
Causes system crash with Cisco VPN client V3
Part of CheckPoint Integrity client product
  Rick Mahn   (further information)
twice been the source of computer failing to boot
  doc paul  
Belongs to zone alarm nothing wrong with it i've got no problems
used in Zonelabs Zonealarm program
189792 bytes file caused Windows bugcheck (STOP screen); ZoneAlarm had been removed years previously
ebenfalls Bestandteil des Cisco VPN Clienten // part of the Cisco VPN client
  Quedel   (further information)
device manager, show hidden devices, non plug and play drivers, disable vsdatant
It is also used by CISCO VPN application if you have stateful firewall enabled
  Re Álvarez  
It caused my system to repeatedly reboot. It should have been removed when I uninstalled ZA. Therefore, I think it's a malicious leftover file.
ZoneAlarm Firewall (Core-) Protection Service. -- If you have Zonealarm do not stop this service ;)- ....
it was the problem what my computer did startup everytime. 3 nights searching before I find it. Thanks for help!!! I removed the file from the system32 folder by using command promt. Finally!!!
It cause the "Blue Screen of death" when u start the pc at first time. After that u reset and when u reboot the pc this file don't work and u can use the pc.
If the files size is other than that mentioned, should it be removed?
Zone alarm File
whenever i restart my pc it gives me the blue screen of death. this happens a lot now. ever since i started to use internet explorer. its either a coincodence or I.E. is causing the problem
As of Oct-2006 the new version is BSOD for Windows 2000
  Shannon Jacobs  
Vsdatant.sys is also a legit component of Cisco VPN Client software. I believe that they use Zone Alarm soft as part of their stateful firewall.
  Alan Batten  
I uninstalled Zone Alarm (free) and installed Zone Alarm Pro and now this appears in RegSeeker as an orphan to be deleted.
  Johnny Faster  
Truevector device driver is necessary for Zonealarm (firewall). Do not remove unless have a replacement ready. (Reminder: check if something is trying to masquerade as vsdatant.sys)
Do we need zone alarm in xp? I'm going to kill anyway
  FourQ XP  
Also used in Cisco secure VPN client as part of the firewall security. This has caused bsod, but can't get rid of it and still vpn in to work.
vdsdatant causes windows stop blue screens less than 2 minutes after booting the laptop, there was no solution from dell but uninstalling zonealarm security suite in windows save mode solved the problem!
According to Process Explorer it "belongs to" Zone Labs on my XP SP2 box.
  Alan   (further information)
Indeed it is also used by Cisco VPN client, the statefull firewall part. Caused problems on my machine. Disabling service vsdatant in regedit solved problems concerning connecting to tcp port 80.. (Which makes you wonder why it wants to hijack this port?)
  DvdB   (further information)
After installing en later uninstalling Zonealarm, my Laptop acted in strange way, in the startup i got error and soundcard fail o work. just rename the file vsdatant.sys repair my problem
  H Shaban  
DeviceIoControl function from the vsdatant.sys driver.may lead to a loss of integrity.
  david peire  
This file is also used with Cisco VPN Client, if you have stateful firewall enabled. Causes a BSOD with F-Secures firewall.
Also used in Cisco VPN Client.
It can cause 721 error when connecting to VPN
It is a Zone Alarm file. To remove it: Device Manager, View Show hidden devices, Non plug and play drivers Right Click on vsdatant.sys disable. Uninstall Zone Alarm - then Reinstall if you want.
  Ryan the lion Weaks   (further information)
It is used by ZoneAlarm. I have gotten BSOD from 394160/397312 bytes. I hope they figure out the problem.
  Video Game Dictator  
Its registry entry can cause http failure and stop internet connectivity. Can cause NetBios and DHCP to fail (erros 4321 and 2001 respecively). Set its registry start parameter to 3.
I have never used Zone Alarm but I do use Cisco VPN and I have received this error.
When F-Secure and Cisco VPN client is installed it couses BSOD when VPN is trying to connect. It is part of Cisco VPN soft. If driver is disabled (not removed) everything works fine. This driver interferes with AV (Panda, Kaspersky, F-secure, etc.) software if it has any firewall option, and causes BSOD. As it is started by program on demand, i think it is not essential.
  Karolis Narbutas  
I think is a Zone Alarm File, I have to disable the multiCore Support in bios in my Dell XPS1210 and windows started good, so, I enabled the MultiCore Option in Bios and reboot and All Works Well, see yaa
  Robert   (further information)
File used by Zone Alarm firewall, causes blue screen of death. Solution: uninstalling Zone Alarm in Safe Mode.
  Piotr Zimoch  
Causes BSOD on Dell Latitude D500
Installing the Cisco VPN Client software and running the uninstall process shut my home computer's Internet access down for 3 days! It was only after a Microsoft 3rd tier support tech spent over 4 hours inspecting my machine that the culprit was discovered. WATCH OUT FOR THIS PROBLEM IF YOU UNINSTALL CISCO VPN CLIENT!
  Bob G,  
This file was part of Cisco VPN adapter and was causing blue screens during the launch of various applications. Removing the file solved the problem, but probably disables firewall for VPN also. Haven't found a better solution yet.
I have been running ZoneAlarm Security for years and never got this problem until I ran DriverCure and updated several drivers. I don't have any information that any of these updates affected vsdatant.sys.
  Rene LeBlanc  
Zone Alarm driver. True Vector technologies. Verified by Checkpoint Software Technologies LTD.
  Jaakko ***  
It is a Zone Labs (Zone Alarm) file. True-Vector device driver which is used in its filtering/firewall. Cisco Client VPN software also uses this file as its stateful firewall from Zone Alarm. Do not remove this service or file if you have these products. IF IT CORRUPTS OR IS STILL PRESENT AFTER UNINSTALL -- REMOVE IT. It can cause failure to browse HTTP/port 80 even while you can get to HTTPs/443 and other services, mimics an infection
  Christopher Catarella  
ZoneAlarm service file
Has also caused random blue screen crash on my Dell latitude D820 several times since i installed VPN client. Don't know yet if can remove it.
If the start parameter is set to 2 it blocks or redirects port 80 (http) exactly 10 minutes after a reboot. If the start paremeter is set to 3 the problem goes away.
  Jondalar   (further information)
vsdatant (Zone Alarm program, not malware) caused a blue screen at boot, Windows said it tried to write to a read only file.
I have it on xp sp3. This file is both part of CISCO VPN and ZONE. Zone has a few dll's and .sys files incorperated into CISCO VPN. The 2 different companies are in league with each other. Ill be updating CISCO VPN client to see if it resolves the BSOD caused by this file.
Caused Blue Screen of Death on my new Delll XPZ 501X. Of note, Zone Alarm was the first program I installed following the purchase of my laptop so I think this is a clear problem with Dell-Windows7-Zone Alarm. Note, I also have Mcaffe installed.
I find it consistently blocked by Zone Alarm Extreme with Win 7. It's location shown as in the registry. If it's a ZA file then why is it blocked??? Something fishy in Denmark.
  Choctaw Leader  
ive never used zonealarm on this computer but have vsdatant popping up into taskmanager
  magnus alexa  
I have had desktop lockup problems; several times while trying to run zonealarm scans and at other times. PC TuneUp shows it as "referenced dll is invalid"
  Emilio L  
It ''makes'' BSOS show screen, with false error codes
  The Weeder  
It is part of True Vector ZA. I have ZA Extreme and yet the OS firewall stops it from changing it's registry key. ZA seems to work well without this change, but need to get more info from ZA over and above their "more info" box.
HKCS\SERVICES\VSDATANT\PARAMETERS\ADAPTERS is flagged as prevented from being changed everytime I start my 'ZA Pro'protected PC since ZA upgrade recently.Not sure what it means.

Rating chart

Summary: Average user rating of vsdatant.sys: based on 77 votes with 68 user comments. 20 users think vsdatant.sys is essential for Windows or an installed application. 14 users think it's probably harmless. 25 users think it's neither essential nor dangerous. 10 users suspect danger. 8 users think vsdatant.sys is dangerous and recommend removing it. 6 users don't grade vsdatant.sys ("not sure about it").

Do you have additional information?
What do you know about vsdatant.sys:
How would you rate it:
Link for more info:
Your Name:

Best practices for resolving vsdatant issues

A clean and tidy computer is the key requirement for avoiding problems with vsdatant. This means running a scan for malware, cleaning your hard drive using 1cleanmgr and 2sfc /scannow, 3uninstalling programs that you no longer need, checking for Autostart programs (using 4msconfig) and enabling Windows' 5Automatic Update. Always remember to perform periodic backups, or at least to set restore points.

Should you experience an actual problem, try to recall the last thing you did, or the last thing you installed before the problem appeared for the first time. Use the 6resmon command to identify the processes that are causing your problem. Even for serious problems, rather than reinstalling Windows, you are better off repairing of your installation or, for Windows 8 and later versions, executing the 7DISM.exe /Online /Cleanup-image /Restorehealth command. This allows you to repair the operating system without losing data.

To help you analyze the vsdatant.sys process on your computer, the following programs have proven to be helpful: ASecurity Task Manager displays all running Windows tasks, including embedded hidden processes, such as keyboard and browser monitoring or Autostart entries. A unique security risk rating indicates the likelihood of the process being potential spyware, malware or a Trojan. BMalwarebytes Anti-Malware detects and removes sleeping spyware, adware, Trojans, keyloggers, malware and trackers from your hard drive.

Other processes

vsdatant.sys [all]