Download TrojanHunter Now
Free 30-day trial!
Latest TrojanHunter Version:
TrojanHunter 5.0
Order Now
License file delivered within minutes.
Welcome, Guest. Please Login or Register.
May 16th, 2008, 2:48am
   Mischel Internet Security Forum
   TrojanHunter
   TrojanHunter Scanner (Moderators: Helena, Gavin_Coe, Magnus)
   possible trojan NPMON.EXE		 « Previous topic | Next topic »
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print
   Author  Topic: possible trojan NPMON.EXE  (Read 1457 times)
tabascorules
Newbie
*



I love YaBB 1G - SP1!

   


Posts: 2
possible trojan NPMON.EXE
« on: Jan 18th, 2004, 8:04am »		 Quote Quote  Modify Modify
After getting a virus detect with Nortons.  I ran Trojan Hunter on a full scan.  it came back with a possible Trojan.  Here is the error.
 
Found possible tojan file:  C:WINNT\system32\NPMON.EXE (GENERROR (TExportDetector): List count out of bounds (672729790))  
 
I did a search on the web for the file name NPMON.EXE and I could only find a reference on a Korian web page which I could not read.  Any idea what this could be?
« Last Edit: Jan 18th, 2004, 5:27pm by tabascorules » IP Logged
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
 Posts: 5270
Re: possible trojan NPNMON.EXE
« Reply #1 on: Jan 18th, 2004, 9:00am »		 Quote Quote  Modify Modify
Hmmm...I did a Google search and found it (NPNMON) on this website.
http://www.geology.gla.ac.uk/staff/photo/Eddie#ggviewer-offsite-nav-8991 208
 
When going to the above site, it immediately starts downloading something.  I aborted it promptly.  
 
Is it NPMON or NPNMON you have on your system?
 
Might want to zip the NPNMON.exe file you have and send it to Magnus at submit@misec.net
« Last Edit: Jan 18th, 2004, 9:02am by siliconman01 » IP Logged
______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!
Randy_Bell
Global Moderator
*****




TrojanHunter is the Best!

40416585 40416585   randybell_98   atmrover
WWW   Email

Gender: male
 Posts: 2883
Re: possible trojan NPNMON.EXE
« Reply #2 on: Jan 18th, 2004, 1:40pm »		 Quote Quote  Modify Modify
on Jan 18th, 2004, 9:00am, siliconman01 wrote:
Hmmm...I did a Google search and found it (NPNMON) on this website.
http://www.geology.gla.ac.uk/staff/photo/Eddie#ggviewer-offsite-nav-8991 208
 
When going to the above site, it immediately starts downloading something.  I aborted it promptly.

That page just displays a bunch of gibberish in Opera.  I allowed it to finish downloading {about 4 MB}, then nothing happened: not a peep from TH 3.7 nor NAV 2004.  There was nothing strange or new loaded in my Task Manager.  So I assume it downloads a bunch of gibberish into your browser cache.  I will clean out my Opera cache as a precaution. Wink
IP Logged
tabascorules
Newbie
*



I love YaBB 1G - SP1!

   


Posts: 2
Re: possible trojan NPMON.EXE
« Reply #3 on: Jan 18th, 2004, 5:29pm »		 Quote Quote  Modify Modify
It is NPMON.EXE.  
 
Sorry about that.  I guess that is what happens when you are trying to clean a virus off of a system at 2:00 a.m.
IP Logged
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
 Posts: 5270
Re: possible trojan NPMON.EXE
« Reply #4 on: Jan 18th, 2004, 6:00pm »		 Quote Quote  Modify Modify
I'd upgrade to TH Version 3.8 and repeat the scan.  Then submit the file to Magnus if it still is detected.
IP Logged
______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!
tmzine
Newbie
*





   


Posts: 1
Re: possible trojan NPMON.EXE
« Reply #5 on: May 4th, 2008, 5:28am »		 Quote Quote  Modify Modify
NPMON.exe is korean security program name
 
usually we called nProtect also nProtect Netizen V3
 
this program always can be use for internet banking system.
 
so it is not necessary loading on your computer. also it's not trojan stuff.  it means only korean activity.
 
plus, this protector serve to lineage game before logging so far.
 
nProtect site is http://www.nprotect.com/
and specific page is http://www.nprotect.com/v6/service/index.php?mode=service_netizen#
 
 
you can remove npmon.exe process. also i recommend
« Last Edit: May 4th, 2008, 5:34am by tmzine » IP Logged
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print

« Previous topic | Next topic »
Search
Members
Login
Register