Is monitor.exe in ZoneAlarm directory a keylogger?

Is monitor.exe in ZoneAlarm directory a keylogger?

Secure Home | Search | About
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Is monitor.exe in ZoneAlarm directory a keylogger? Jim Blanton 05-27-2007
Posted by Jim Blanton on May 27, 2007, 2:34 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Group,

Last week, I did a complete re-install of XP/SP2 beginning from an
fdisk and format. Then I installed the latest complete updates from
the MS-update website. I also updated my ZoneAlarm security
suite(with anit-virus and anti-spy) from the ZoneLab site.

When I was looking at WinXPs' task monitor, I saw an application named
monitor.exe that had accumulated over 30 seconds CPU time during the
day. I did a search and found it was located in this directory

C:\WINDOWS\system32\ZoneLabs\avsys\monitor.exe

On occasion, I also run an application by Systweak, Inc. called
Advanced System Optimizer(ASO). I decided to run the spy checker. It
identified monitor.exe as a high-danger keylogger.

Spending several hours trying different spy sweepers, nothing else
identified this file as a keylogger, only ASO.

Does anyone know if this file monitor.exe is safe?

Was the ASO alert a "false positive?"

Thanks in advance,

Jim

Posted by jen on May 27, 2007, 3:57 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
> Group,
>
> Last week, I did a complete re-install of XP/SP2 beginning from an
> fdisk and format. Then I installed the latest complete updates from
> the MS-update website. I also updated my ZoneAlarm security
> suite(with anit-virus and anti-spy) from the ZoneLab site.
>
> When I was looking at WinXPs' task monitor, I saw an application named
> monitor.exe that had accumulated over 30 seconds CPU time during the
> day. I did a search and found it was located in this directory
>
> C:\WINDOWS\system32\ZoneLabs\avsys\monitor.exe
>
> On occasion, I also run an application by Systweak, Inc. called
> Advanced System Optimizer(ASO). I decided to run the spy checker. It
> identified monitor.exe as a high-danger keylogger.
>
> Spending several hours trying different spy sweepers, nothing else
> identified this file as a keylogger, only ASO.
>
> Does anyone know if this file monitor.exe is safe?
>
> Was the ASO alert a "false positive?"

monitor.exe is part of the Kaspersky AV in the suite(I would say it is a
false positive):
http://forums.zonealarm.com/zonelabs/search?submitted=true&q=monitor.exe

-jen



Posted by Jim Blanton on May 28, 2007, 11:11 am
If you were  Registered and logged in, you could reply and use other advanced thread options

>> Group,
>>
>> Last week, I did a complete re-install of XP/SP2 beginning from an
>> fdisk and format. Then I installed the latest complete updates from
>> the MS-update website. I also updated my ZoneAlarm security
>> suite(with anit-virus and anti-spy) from the ZoneLab site.
>>
>> When I was looking at WinXPs' task monitor, I saw an application named
>> monitor.exe that had accumulated over 30 seconds CPU time during the
>> day. I did a search and found it was located in this directory
>>
>> C:\WINDOWS\system32\ZoneLabs\avsys\monitor.exe
>>
>> On occasion, I also run an application by Systweak, Inc. called
>> Advanced System Optimizer(ASO). I decided to run the spy checker. It
>> identified monitor.exe as a high-danger keylogger.
>>
>> Spending several hours trying different spy sweepers, nothing else
>> identified this file as a keylogger, only ASO.
>>
>> Does anyone know if this file monitor.exe is safe?
>>
>> Was the ASO alert a "false positive?"
>
>monitor.exe is part of the Kaspersky AV in the suite(I would say it is a
>false positive):
>http://forums.zonealarm.com/zonelabs/search?submitted=true&q=monitor.exe
>
>-jen
>

Jen,

Thank you!

Jim

Posted by jen on May 28, 2007, 2:26 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
>>> When I was looking at WinXPs' task monitor, I saw an application
>>> named
>>> monitor.exe that had accumulated over 30 seconds CPU time during the
>>> day. I did a search and found it was located in this directory
>>> C:\WINDOWS\system32\ZoneLabs\avsys\monitor.exe
>>> On occasion, I also run an application by Systweak, Inc. called
>>> Advanced System Optimizer(ASO). I decided to run the spy checker.
>>> It
>>> identified monitor.exe as a high-danger keylogger.
>>> Spending several hours trying different spy sweepers, nothing else
>>> identified this file as a keylogger, only ASO.
>>> Does anyone know if this file monitor.exe is safe?
>>> Was the ASO alert a "false positive?"
>>monitor.exe is part of the Kaspersky AV in the suite(I would say it is
>>a
>>false positive):
>>http://forums.zonealarm.com/zonelabs/search?submitted=true&q=monitor.exe
> Jen,
> Thank you!

You're most welcome Jim :)

-jen



Similar ThreadsPosted
PC ACME Keylogger Monitor...can't uninstall March 10, 2006, 10:06 pm
Anyone recognize these files found in Winnt directory? March 22, 2006, 7:59 pm
Win32.Trojan.Spy.Agent.kb detected by ZoneAlarm Internet Security May 23, 2008, 3:13 pm
HELP! Chinese to Hacker-2 Monitor Worm. August 7, 2006, 6:58 pm
Virus Makes Monitor Go Black Upon Detection July 20, 2006, 12:06 pm
Please help me with a keylogger! December 3, 2005, 1:03 pm
stubborn Keylogger ! March 25, 2008, 4:19 pm
Re: How can I tell if a keylogger got added to my PC while I was in Beijing? November 3, 2008, 12:20 pm
KEYLOGGER KEYSTROKES MONITORING IN CHAT ROOMS. October 28, 2005, 3:32 pm

The site map in XML format XML site map

Contact Us | Privacy Policy