What is trying to connect?

Question

What is trying to connect?
my zone alarm is telling me that these are trying to connect to the internet can anyone tell me what they are and if i should allow them access or not?
Ycommon exec module
Ypager.exec
Vidmon.exe
wirelessdaemon
nfomon.exe
update.exe
i tried using spybot to check what was on my computer and it found loads of bad stuff but wanted paying to clear it, i've checked for stuff with avg but it found nothing!

Answer 1

Unfortunately, Spybot Search & Destroy is correct; your computer is infected with an adware/spyware called Delfin. There are several things you need to know. For future reference, when you come across an unfamiliar file, you can search for it at (http://www.processlibrary.com/). It is a great resource. All you need to do is enter the file names in to the search box and click [Find]. Here is some information I found on the site:

"nfomon.exe is a process belonging to an advertising program by DelFin. This process monitors your browsing habits and distributes the data back to the author's servers for analysis. This also prompts advertising popups. This process is a security risk and should be removed from your system. "

"vidmon.exe is a process belonging to an advertising program by DelFin. This process monitors your browsing habits and distributes the data back to the author's servers for analysis. This also prompts advertising popups. This process is a security risk and should be removed from your system. "

You can search for the other files at the website. You should remove these files. First, go to Start Menu > Control Panel > Add/Remove Program > look for "delfin" or any of the other files > next to each file click [Remove]. Unfortunately, adware/spyware and be difficult to remove. If you fail to find the files on Add/Remove Programs, then remove them with Spybot or any other anti spyware program you have installed. You mentioned that Spybot found the files; if so, it can remove them as well. Just look for the prompt after the completion of a scan. There are other free anti spyware programs available, such as Lavasoft's Ad Aware and Microsoft's Windows Defender. You can find these programs at (http://www.filehippo.com/software/antispyware/)

If you need instructions on how to use these programs, go to:
1. Spybot (http://www.download.com/1200-2023_4-5157526.html)_
2. Ad Aware (http://www.download.com/How-to-use-Ad-Aware/1200-2023_4-5157520.html?tag=morehowto)

You mentioned you used AVG and it found nothing. Did you mean AVG antivirus or AVG anti spyware? If you used AVG antivirus, the program scans for viruses and not spyware. If you used AVG anti spyware, it is a not a good anti spyware program. PC Magazine reviewed the product and found it detected only 20% of spyware and it did worse on removing any spyware found.

Sorry, there is a lot to digest. If you have any more questions, just drop me an e-mail. By the way, it is a good thing you are using ZoneAlarm because it alerted you that something was admist.

Answer 2

Your PC is infected with spyware (that is why AVG Anti-virus found nothing). The fact that you have a copy of rogue spyware protection (fake spybot, because spybot never asks for money to remove infected objects) is already a sign that your PC is infected with spyware.

Vidmon and nfomon.exe is spyware and update.exe can be spyware or legitimate software, depending on its location.

Visit the following page and follow the instructions to clean your PC from this infection.
http://www.cybertopcops.com/malicious-software-removal.php

Ycommon.exe module and Ypager.exe are part of Yahoo Instant Messenger and you may allow access to them, otherwise you won't be able to chat using Yahoo! Messenger. I recommend you use IMSecure for special protection for Instant Messaging software. http://www.cybertopcops.com/free-downloads.php#firewalls

Answer 3

You could not have possibly used the genuine Spybot Search and Destroy to check for malware on your computer. Spybot has always been 100% free both to detect and remove.

You can get the real thing free here:
http://www.safer-networking.org/en/download/

Good luck!

Answer 4

Ypager is yahoo messenger
update is either windows updater or another programme trying to update.
The others are legit as well, I believe.

Answer 5

your zonealarm firewall settings need adjusting
contact zone alarm & let them figure it out.
change to a different anti-virus suite ie kapersky

Answer 6

Check out each at http://www.processlibrary.com