home

vsmon.exe

TrueVector Service

Check Point Software Technologies Ltd.

It runs as a separate (within the context of its own process) windows Service named “TrueVector Internet Monitor”. This is installed with multiple programs including ZoneAlarm Pro and ZoneAlarm Free Firewall.
Publisher:
Check Point Software Technologies Ltd.  (signed and verified)

Product:
TrueVector Service

Version:
13.3.209.0

MD5:
21d22ac9b8b33af6eeebdb10d1661c37

SHA-1:
bf02dc88bc7f8eb84d1c5c5ae90cbaad8b746805

SHA-256:
56c7a8e5c3084163342a433fd20de8e9931c1c293b49c0f9cd9c8f45a56d135b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/26/2024 10:56:16 PM UTC  (today)

File size:
3.4 MB (3,596,752 bytes)

Product version:
13.3.209.0

Copyright:
Copyright © 1998-2014, Check Point, LTD

Original file name:
vsmon.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\checkpoint\zonealarm\vsmon.exe

Digital Signature
Signed by:
Check Point Software Technologies Ltd.

Authority:
VeriSign, Inc.

Valid from:
5/11/2014 7:00:00 PM

Valid to:
7/10/2017 6:59:59 PM

Subject:
CN=Check Point Software Technologies Ltd., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Check Point Software Technologies Ltd., L=Ramat-Gan, S=Ramat-Gan, C=IL

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
47E81C30F2CA2304E8F8BC304E44AB6F

File PE Metadata
Compilation timestamp:
8/13/2014 2:52:24 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
49152:AvPVb/ea7qHmsGGIFwqhhMW4U2BK4X/GaSS6rqe52Dm9TlKp/hT/ib/xR8YC7w4Z:kOHmsXgMW4pK0GaWrqhh8xI

Entry address:
0x20BEC8

Entry point:
E8, 8B, 07, 00, 00, E9, 36, FD, FF, FF, FF, 25, 30, C6, 65, 00, FF, 25, 4C, C6, 65, 00, FF, 25, 50, C6, 65, 00, FF, 25, 54, C6, 65, 00, FF, 25, 58, C6, 65, 00, FF, 25, 64, C6, 65, 00, FF, 25, 6C, C6, 65, 00, FF, 25, 74, C6, 65, 00, FF, 25, 78, C6, 65, 00, FF, 25, 84, C6, 65, 00, CC, CC, 56, 8B, 44, 24, 14, 0B, C0, 75, 28, 8B, 4C, 24, 10, 8B, 44, 24, 0C, 33, D2, F7, F1, 8B, D8, 8B, 44, 24, 08, F7, F1, 8B, F0, 8B, C3, F7, 64, 24, 10, 8B, C8, 8B, C6, F7, 64, 24, 10, 03, D1, EB, 47, 8B, C8, 8B, 5C, 24, 10, 8B...
 
[+]

Entropy:
6.5243

Code size:
2.4 MB (2,466,304 bytes)

Service
Display name:
TrueVector Internet Monitor

Service name:
vsmon

Description:
Monitors internet traffic and generates alerts for disallowed access.

Type:
Win32OwnProcess

Group:
TDI

Depends on:
RpcSs CryptSvc vsdatant


The file vsmon.exe has been discovered within the following programs.

ZoneAlarm Antivirus  by Check Point, Inc
Publisher's description - “Detects and removes viruses, spyware, Trojan horses, worms, bots and more. Independently tested to provide superior protection. Restricts programs from malicious activities – blocking attacks that bypass other defenses.”
www.zonealarm.com/security/en-us/computer-security.htm
23% remove it
ZoneAlarm Extreme Security  by Check Point, Inc
Publisher's description - “ZoneAlarm Extreme Security is a comprehensive security suite protects your PC, identity, data and everything you do online. Further protection comes with anti-phishing, anti-spam, parental controls and online backup.”
www.zonealarm.com/security/en-us/zonealarm-extreme-security.htm
23% remove it
ZoneAlarm Free Antivirus + Firewall  by Check Point, Inc
Publisher's description - “The only free Antivirus that also includes a Firewall. Protect yourself with the ultimate free Internet security solution. The all-in-one security solution that seamlessly integrates antivirus and firewall together for maximum protection and performance.”
www.zonealarm.com
30% remove it
ZoneAlarm Free Firewall  by Check Point, Inc
The software is typically bundled with third party installers such as Open Candy. "Offer your users a free software firewall to help them protect their PC -- created by one of the world's leading security companies.
www.zonealarm.com/security/en-us/zonealarm-pc-security-free-firewall.htm
29% remove it
ZoneAlarm Internet Security Suite  by Check Point, Inc
Publisher's description - “Monitors programs for suspicious behavior spotting and stopping new attacks that bypass traditional anti-virus protection. Locks out hackers, blocks intrusions and makes your PC invisible online. No product is 100% effective against viruses or spyware.”
www.zonealarm.com/security/en-us/zonealarm-computer-security-suite.htm
24% remove it
ZoneAlarm Pro  by Check Point, Inc
Publisher's description - “Stops Internet attacks at the front door and even catches thieves on their way out. Our two-way firewall software proactively protects against inbound and outbound attacks while making you invisible to hackers. No product is 100% effective against viruses or spyware.”
www.zonealarm.com/security/en-us/zonealarm-pro-firewall-anti-spyware.htm
25% remove it
 
Powered by Should I Remove It?

Scan vsmon.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.