when i start my winxp pc i can't connect to internet except port 80 (web sites)
so i can't scan , exploit , and connect to irc (port 6667)
when i look in the process manager (ctrl+alt+del second tab) then i see an application named: VSMON.EXE started...
that's suspicious i said and terminated that...
then i connected to remote's via telnet irc and others...
but i have to do this each time win starts ...
also there is one more that doesn't allow me check email (via outlook)
named: CTFMON.EXE
same here...
killing process solves the problem...

Also these processes aren't Network or Local Services
but Administrator and system runned!!!

what are these?
how can i stop them, ?
(in registry i found no start key in run folder)
the same in autoexec.bat and startup in start menu
also i checked win.ini


anyone knows?

i suggest you scan your hard drive using antivirus AND ad-aware
what you are talking about is some seriuos case of "spyware" and\or trojan
and\or firewall (?) goto your services (run services.msc) and look into the web for what processes you dont need (about 12 of them) in winxp and disable those who u dont need. look for a list on google "safe processes under xp"

good luck with your pests

vsmon is the truevector internet monitor service of zonealarm
more i dunno
so vsmon isn't a trojan orso

if i recall (sorry but i don't run windows from home) correctly, you can use "msconfig" to configure all start-up/services running on your machine.

although, since this is your firewall we're talking about- there are most likely some master rules that are blocking all of your non-80 traffic.

you should be able to re-configure vsmon in the ZoneAlarm "Advanced Settings"

i have uninstalled zone alarm !!!
i've done this last 2 weeks
then the problems started!

Do a google on ctfmon.exe. Microsoft has a bit to say about it (an office component).

You've uninstalled Zone alarm the last 2 weeks? Not sure what you mean.

Make sure no ZA-related services are still running. You might need to go into the registry and kill the related ZA entries, but back up your reg first to another machine or removable device first.