vsmon.exe
TrueVector Service by Check Point Software Technologies Ltd. (Signed)
| Version: | 11.0.000.020 |
| MD5: | 336dc743f3e6eeca74a48719d323e5a5 |
| SHA1: | f40b6cb1e6e587cee781df14ad9409999dee971c |
| SHA256: | a98323398fa658b53d6d48c0c17471c5254f4b4e32a87c2f47e771e34d58cc16 |
What is vsmon.exe?
True Vector Internet Monitor, also known as TrueVector Security Engine, is the core scanning engine of ZoneAlarm. It is a Windows service which runs as "vsmon.exe" in the processes list. TrueVector Service Monitors internet traffic and generates alerts for disallowed access.
About vsmon.exe (from Check Point Software Technologies Ltd.)
“ZoneAlarm Security Toolbar is keeping you protected and connected.”
Overview
vsmon.exe runs as a service under the name TrueVector Internet Monitor (vsmon) with extensive SYSTEM privileges (full administrator access). It is installed with a couple of know programs including ZoneAlarm Free Firewall published by Check Point, Inc, ZoneAlarm Free Firewall from Check Point, Inc and ZoneAlarm Free Firewall by Check Point, Inc. The file is digitally signed by Check Point Software Technologies Ltd. which was issued by the VeriSign certificate authority (CA).
Details
| File name: | vsmon.exe |
| Publisher: | Check Point Software Technologies LTD |
| Product name: | TrueVector Service |
| Typical file path: | C:\Program Files\checkpoint\zonealarm\vsmon.exe |
| Original name: | vsmondll.dll |
| File version: | 11.0.000.020 |
| Size: | 2.33 MB (2,447,440 bytes) |
| Certificate |
| Issued to: | Check Point Software Technologies Ltd. |
| Authority (CA): | VeriSign |
| Expiration date: | Monday, May 5, 2014 |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following programs will install this file
The software is typically bundled with third party installers such as Open Candy. "Offer your users a free software firewall to help them protect their PC -- created by one of the world's leading security companies. Note: Includes ZoneAlarm Security Toolbar with ZoneAlarm homepage, search default and new tab page search."
“Stops Internet attacks at the front door and even catches thieves on their way out. Our two-way firewall software proactively protects against inbound and outbound attacks while making you invisible to hackers.
No product is 100% effective against viruses or spyware. ZoneAlarm's advanced firewall monitors behaviors within your computer to spot and stop even the most sophisticated new attacks that bypass traditional antivirus and secur...”
“The only free Antivirus that also includes a Firewall. Protect yourself with the ultimate free Internet security solution. The all-in-one security solution that seamlessly integrates antivirus and firewall together for maximum protection and performance. Product features: Antivirus/Anti-spyware Engine--Detect and blocks viruses, spyware, trojans, worms, bots, and rootkits. Two-Way Firewall--Makes your PC invisible to hackers and stops s...”
“Detects and removes viruses, spyware, Trojan horses, worms, bots and more. Independently tested to provide superior protection. Restricts programs from malicious activities – blocking attacks that bypass other defenses. Antivirus by itself is on average only 68% effective against new threats and even two-way firewalls can’t keep all hackers out. Application Control stops malware from phoning home or turning your PC into a bot. Stops Int...”
“Monitors programs for suspicious behavior spotting and stopping new attacks that bypass traditional anti-virus protection. Locks out hackers, blocks intrusions and makes your PC invisible online. No product is 100% effective against viruses or spyware. ZoneAlarm's advanced firewall monitors behaviors within your computer to spot and stop even the most sophisticated new attacks that bypass traditional antivirus and security suites. Autom...”
“ZoneAlarm Extreme Security is a comprehensive security suite protects your PC, identity, data and everything you do online. Further protection comes with anti-phishing, anti-spam, parental controls and online backup. Also includes unique security not found in other suites like virtual and private browsing, identity protection with victim recovery services, and optional hard drive encryption that stops others from reading your PC, laptop...”
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'vsmon' (TrueVector Internet Monitor)
- vsmon
Network connections
[TCP] 107.14.46.48:80
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00025017% | |
| Kernel CPU: | 0.00015660% | |
| User CPU: | 0.00009357% | |
| Kernel CPU time: | 38,844 ms/min | |
| CPU cycles: | 12,265,305/sec | |
| Memory |
| Private memory: | 95.14 MB | |
| Private (maximum): | 82 MB | |
| Private (minimum): | 15.45 MB | |
| Non-paged memory: | 95.14 MB | |
| Virtual memory: | 293.22 MB | |
| Virtual memory (peak): | 442.91 MB | |
| Working set: | 46.16 MB | |
| Working set (peak): | 133.02 MB | |
| Page faults: | 2,108,642/min | |
| I/O |
| I/O read transfer: | 1.3 MB/sec | |
| I/O read operations: | 337/sec | |
| I/O write transfer: | 311.08 KB/sec | |
| I/O write operations: | 70/sec | |
| I/O other transfer: | 1.59 MB/sec | |
| I/O other operations: | 755/sec | |
| Resource allocations |
| Threads: | 45 | |
| Handles: | 992 | |
Process properties
| Integrety level: | System |
| Platform: | 64-bit |
| Command line: | "C:\Program Files\checkpoint\zonealarm\vsmon.exe" -service |
| Owner: | SYSTEM |
| Windows Service |
| Service name: | vsmon |
| Display name: | TrueVector Internet Monitor |
| Description: | “Monitors internet traffic and generates alerts for disallowed access.” |
| Type: | Win32OwnProcess, InteractiveProcess |
| Parent process: | services.exe (Services and Controller app by Microsoft) |
Threads
Averages
| vsmon.exe (main module) |
| Total CPU: | 0.00790430% | |
| Kernel CPU: | 0.00146274% | |
| User CPU: | 0.00644155% | |
| CPU cycles: | 265,943/sec | |
| Memory: | 2.44 MB | |
| ntdll.dll |
| Total CPU: | 0.00199166% | |
| Kernel CPU: | 0.00001487% | |
| User CPU: | 0.00197678% | |
| CPU cycles: | 50,727/sec | |
| Memory: | 1.66 MB | |
| wow64.dll |
| Total CPU: | 0.00115741% | |
| Kernel CPU: | 0.00057134% | |
| User CPU: | 0.00058607% | |
| CPU cycles: | 39,330/sec | |
| Memory: | 252 KB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
58.82% |
|
| Windows 7 Ultimate |
11.76% |
|
| Microsoft Windows XP |
8.82% |
|
| Windows 7 Professional |
5.88% |
|
| Windows Vista Home Premium |
2.94% |
|
| Windows Vista Home Basic |
2.94% |
|
| Windows 8 Pro |
2.94% |
|
| Windows 7 Ultimate N |
2.94% |
|
| Windows Vista Ultimate |
2.94% |
|
Distribution by country
United States installs about 58.82% of TrueVector Service.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Acer |
36.84% |
|
| Sony |
21.05% |
|
| Hewlett-Packard |
21.05% |
|
| Sahara |
10.53% |
|
| Toshiba |
10.53% |
|
