Chet, I've read about many folks' problems with a file called vsmon.exe. Some of those folks never had Zonealarm installed on their machine. That would indicate that some people (possibly you) have a "phony" vsmon.exe file on their machine. It may be part of a worm or virus which is masquerading as Zonealarm's vsmon.exe. If that is so, simply deleting it would do no good. It would be far too sophisticated for that to work. Zonealarm knows about this issue. Their web site says it can be a worm they call Win32.Rbot.GE, or WORM_RBOT. I don't know what antivirus you're using and I'm hesitant to recommend specific products, but I'd try to update it, then run it again with the vsmon.exe file still on the computer. If it doesn't find anything, I'd suggest another check with a different antivirus (Avast or AVG 7.5, not AVG 8), or an online antivirus checker. I used to have good luck with Trendmicro's Housecall online virus checker. You can find it by searching Google for "housecall". I haven't used it for a while but it used to work very well. It will have to install some software on your machine, Java I believe. If you're going to format, you have nothing to lose. You should already have any valuable files backed up.
Here's a very thorough Trendmicro page that may apply to you:
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_RBOT.BO&VSect=T
Here's a Trendmicro page on how to remove the above mentioned worm if you have it. I'd try to print this page and then use it as a guide to help you, if you are infected.
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM%5FRBOT%2EBO&VSect=Sn
Additional thought: If this is a worm, it has caused you to eliminate your Zonealarm firewall protection. If this worm is really using your computer to connect to other computers, a software firewall may detect it, and allow you to block it. Comodo is a possible alternative to Zonealarm. Good luck.
>From: CHET <[log in to unmask]>
>Subject: [PCSOFT] vsmon.exe
>
>I want to thank all of you for the suggestions re deleting vsmon.exe. I
>tried one or two of the ones I could understand to no avail..Most were
>over my head as I'm not that computer savvy. My choices seem to be
>limited to format the hd, continue to remove each time with task
>manager, find a friend who understands what was suggested here or my
>favorite..FIND A PROGRAM that guarantees to remove it which I will be
>happy to pay for; so the follow up question is : does anyone know of
>such a program that can do that?
>Thanks, Chet
>
>PCSOFT automatic digest system wrote:
>> LISTSERV mailing list manager <http://www.lsoft.com> LISTSERV 15.0
>> <http://listserv.icors.org/SCRIPTS/WA-ICORS.EXE?LIST=PCSOFT>
>>
>>
>> PCSOFT Digest - 22 May 2008 to 23 May 2008 (#2008-128)
>>
>>
>> Table of contents:
>>
>> * VSMON.EXE HOW TO DELETE PERMANENTLY <#S1> (6)
>> * XP CD burning program <#S2> (2)
>> * computer stops -log-out tech #s <#S3> (3)
>>
>> 1.
>>
>>
>> * VSMON.EXE HOW TO DELETE PERMANENTLY
>> <mailbox:///C%7C/Documents%20and%20Settings/Owner/Application%20Data/Thunderbird/Profiles/fp5odtjl.default/Mail/Local%20Folders/Inbox?number=51944029&header=quotebody&part=1.2>
>> (05/22)
>> *From:* CHET <[log in to unmask]>
>> * Re: VSMON.EXE HOW TO DELETE PERMANENTLY
>> <mailbox:///C%7C/Documents%20and%20Settings/Owner/Application%20Data/Thunderbird/Profiles/fp5odtjl.default/Mail/Local%20Folders/Inbox?number=51944029&header=quotebody&part=1.4>
>> (05/22)
>> *From:* Thomas Mayer <[log in to unmask]>
>> * Re: VSMON.EXE HOW TO DELETE PERMANENTLY
>> <mailbox:///C%7C/Documents%20and%20Settings/Owner/Application%20Data/Thunderbird/Profiles/fp5odtjl.default/Mail/Local%20Folders/Inbox?number=51944029&header=quotebody&part=1.5>
>> (05/23)
>> *From:* Peter Ekkerman <[log in to unmask]>
>> * Re: VSMON.EXE HOW TO DELETE PERMANENTLY
>> <mailbox:///C%7C/Documents%20and%20Settings/Owner/Application%20Data/Thunderbird/Profiles/fp5odtjl.default/Mail/Local%20Folders/Inbox?number=51944029&header=quotebody&part=1.6>
>> (05/23)
>> *From:* Peter Ekkerman <[log in to unmask]>
>> * Re: VSMON.EXE HOW TO DELETE PERMANENTLY
>> <mailbox:///C%7C/Documents%20and%20Settings/Owner/Application%20Data/Thunderbird/Profiles/fp5odtjl.default/Mail/Local%20Folders/Inbox?number=51944029&header=quotebody&part=1.7>
>> (05/23)
>> *From:* Bob Lendrim <[log in to unmask]>
>> * Re: VSMON.EXE HOW TO DELETE PERMANENTLY
>> <mailbox:///C%7C/Documents%20and%20Settings/Owner/Application%20Data/Thunderbird/Profiles/fp5odtjl.default/Mail/Local%20Folders/Inbox?number=51944029&header=quotebody&part=1.10>
>> (05/23)
>> *From:* Bob Lendrim <[log in to unmask]>
>>
>> 2.
>>
>>
>> * Re: XP CD burning program
>> <mailbox:///C%7C/Documents%20and%20Settings/Owner/Application%20Data/Thunderbird/Profiles/fp5odtjl.default/Mail/Local%20Folders/Inbox?number=51944029&header=quotebody&part=1.3>
>> (05/22)
>> *From:* Russ Cox <[log in to unmask]>
>> * Re: XP CD burning program
>> <mailbox:///C%7C/Documents%20and%20Settings/Owner/Application%20Data/Thunderbird/Profiles/fp5odtjl.default/Mail/Local%20Folders/Inbox?number=51944029&header=quotebody&part=1.9>
>> (05/23)
>> *From:* Peter Ekkerman <[log in to unmask]>
>>
>> 3.
>>
>>
>> * computer stops -log-out tech #s
>> <mailbox:///C%7C/Documents%20and%20Settings/Owner/Application%20Data/Thunderbird/Profiles/fp5odtjl.default/Mail/Local%20Folders/Inbox?number=51944029&header=quotebody&part=1.8>
>> (05/22)
>> *From:* Normand Doucet <[log in to unmask]>
>> * Re: computer stops -log-out tech #s
>> <mailbox:///C%7C/Documents%20and%20Settings/Owner/Application%20Data/Thunderbird/Profiles/fp5odtjl.default/Mail/Local%20Folders/Inbox?number=51944029&header=quotebody&part=1.11>
>> (05/23)
>> *From:* Russ Poffenberger <[log in to unmask]>
>> * Re: computer stops -log-out tech #s
>> <mailbox:///C%7C/Documents%20and%20Settings/Owner/Application%20Data/Thunderbird/Profiles/fp5odtjl.default/Mail/Local%20Folders/Inbox?number=51944029&header=quotebody&part=1.12>
>> (05/23)
>> *From:* jokester <[log in to unmask]>
>>
>>
>> Browse the PCSOFT online archives.
>> <http://listserv.icors.org/SCRIPTS/WA-ICORS.EXE?LIST=PCSOFT>
"Hold No Punches.." Rode brings you great shareware/freeware
programs with his honest opinions in this weekly column.
http://freepctech.com/rode
|
