Information and startup locations can be examined on this page: verify all your files to make sure that they are legitimate, digitally signed and from the company Zone Labs Inc. to which they should belong.
vsmon.exe security and file info
TrueVector Service
- TrueVector Service
- Zone Labs Inc.
 |
 |
 |
| Filetype : executable |
An executable file is a program that can be executed in your windows environment.
|
|
What is vsmon.exe?
Vsmon.exe is ZoneAlarm True Vector Monitor. It is an essential component of the third-party ZoneAlarm firewall software.
This is an nonessential process. If you wish to disable it, you should uninstall ZoneAlarm. If you need to disable it temporarily, you should exit ZoneAlarm properly. Killing the process may leave you without a network connection until your next reboot occurs.
Dangers of vsmon
As this is a relatively common process in that it is part of a popular third-party firewall software, it is common for virus writers and spyware vendors to disguise their malware as the genuine one.
Some malicious files may have the same name but be stored somewhere other than in %SystemRoot%\System32\zonelabs. Other malware may use a name that appears similar to it but with slight differences in spelling or with appended digits. The following malware is known to disguise itself as vsmon.exe:
- W32/Rbot-FB (%SystemRoot%\System32)
- This is a backdoor Trojan that can spread over network shares. It allows a remote attacker to take full control over an infected system.
There is typically only one instance of this process running at a given time on a system. The presence of multiple instances may be an indicator of a malware infection. Furthermore, if you do not have the ZoneAlarm firewall installed, an instance of this process is almost certainly an indication of a piece of malware on your system.
Common problems
- This process is using 100% CPU time
- If you have anti-virus software installed, be sure that MailSafe is disabled. MailSafe conflicts with the mail scanning features of most anti-virus programs.
- This process uses excessive memory
- If you have anti-virus software installed, be sure that MailSafe is disabled. If this does not resolve the problem, try turning off the ZoneAlarm virus engine. There are known memory leaks in it.
|
|
|
|
|
|
| MD5 File security rating |
A MD5 hash is a unique fingerprint of a file.
Different files/versions can have the same filenames. The MD5 hash verifies that the legitimate file is not altered.
Runscanner (Freeware) can help you checking the file's MD5 hashes
| Vsmon.exe files in Runscanner database |
 |
|
1 different item(s) in database |
 |
|
38 different item(s) in database |
 |
|
63 different item(s) in database |
|
 |
Green items are verified safe to use |
 |
Unrated items are not yet checked for safety. |
 |
Red items are not safe (typically virusses, spyware or other malware) |
 |
This file is digitally signed by it's publisher.
This means that the file is from the company claiming to created it, this does not mean by default that the file is safe
|
|
|
|
| General file info |
| Product name: |
TrueVector Service
|
| Description: |
TrueVector Service
|
| Company: |
Zone Labs Inc.
|
| Fix VSMON.EXE errors: Free registry scan |
|
|
|
| Pacman startup database |
|
Even if you don't have ZoneAlarm or ZoneAlarm Pro run at start-up you do need this |
|
Added by the RBOT.BO WORM! If this was the ZoneAlarm firewall the name column would be TrueVector |
| info provided by sysinfo.org |
|
|
|
Automatic startup locations
 |
| |
 |
001 Running Processes |
| |
 |
010 Installed services |
User comments for this file
 |
ZoneAlarm Security Suite version:7.1.218.000, Vista beta |
|
|
|
More system processes
|
|
| Filename / Process |
|
| Guid / CLSID |
|
| MD5 hash |
|
|
|
102 MD5 version(s) found
only top 10 displayed
|
|
|
| Check your autostart files
|
|
|
|