I can't seem to find any information on the net regarding NPFMONTR.exe. I realized its existance when I was looking in my Program Controls (FIY, I'm using ZoneAlarm Pro) This "thingy" is located in Windows\System32 folder. Does anyone know if this "thingy" poses a danger or not?
npfmontr.exe is bad, bad.
I have a Sonicwall firewall (TZ170) that goes to 6200 sessions in 1 minute when this program is running. npfmontr was slowing down all the internet connections.
The mistery here is how this programa gets into the startup programs in my web server !!
The solution was simple, just take out npfmontr.exe from the startup programs (I had to download a msconfig program for windows 2000 server).
The problem happens on Jun-02 the same date that npfmontr.exe file has.
Thanks guys! But I found out the hard way.
It came along with svhosts.exe (note the 's' at the end before the .exe) which I quote from www.processlibrary.com
svchosts.exe is a process which is registered as the Troj/Sdbot-N Trojan. This Trojan allows attackers to access your computer, stealing passwords and personal data. It is a registered security risk and should be removed immediately.
But finally managed to get rid of it. Thanks anyway!
Following the recent ransomware attacks that leveraged the WannaCrypt0r malware and NSA-developed EternalBlue vulnerability exploit, there was plenty of advice that backup, backup, backup was the best mitigation. Data backups ...