Port scanning yourself isn't particularly reliable. It depends on what your security settings for zone alarm were. I think zone alarm is setup by default to allow your nic to address any port it wants and that is probably why you saw ports that were open when the ShieldsUp didn't. I suspect if you look at your security settings, you will find that the NIC is permitted access to anything. If not, list what the settings are (sanitize any ip's/names), and I will help you have a looksee.

Neb