I've found out from the ZA forums that a dubious program is one not included in the vast ZA safe database.  So - I've contacted BenVista and asked them what it's all about and asked them to register the program with ZA.