Re: Neomonap23.exe

From: Wesley Vogel (123WVogel955_at_comcast.net)
Date: 07/30/05 

Date: Sat, 30 Jul 2005 11:28:02 -0600

Neomonap23.exe could be in your registry from doing a search for it. It
could be in an MRU key. You need to copy the registry key name and paste it
into a message. Just because something is in your registry does not
necessarily mean it is a bad thing.

I just did a Search for files or folders for Neomonap23.exe on my machine.
I then searched my registry and found...
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer
Bars\{C4EE31F3-4768-11D2-BE5C-00A0C9A83DA1}\FilesNamedMRU
000 REG_SZ Neomonap23.exe

{C4EE31F3-4768-11D2-BE5C-00A0C9A83DA1} is the File Search Explorer Band. In
other words Search for files or folders.

To copy a registry key name

1. In the registry tree (on the left), click a registry key.
2. On the Edit menu, click Copy Key Name.
3. Paste the name of the registry key into another program or document.

Or...

1. In the registry tree (on the left), right click a registry key.
2. Select Copy Key Name.
3. Paste the name of the registry key into another program or document.

However...
wuampd.exe is Added by the RBOT.UM WORM!
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_RBOT.UM

Neomonap23.exe is added by a variant of the W32/SDBOT WORM!
http://vil.nai.com/vil/content/v_100454.htm

ctfom.exe? Did you mean ctfmon.exe?

ctfmon.exe = CTF Loader. Part of Microsoft Office. It activates
the Alternative User Input Text Input Processor (TIP) and the Microsoft
Office XP Language Bar.

When you run a Microsoft Office XP program, the file Ctfmon.exe (Ctfmon)
runs in the background, even after you quit all Office programs.

Ctfmon.exe monitors the active windows and provides text input service
support for speech recognition, handwriting recognition, keyboard,
translation, and other alternative user input technologies.

To prevent Ctfmon.exe from running, follow these steps.
OFFXP: What Is CTFMON and What Does It Do?
http://support.microsoft.com/default.aspx?scid=kb;en-us;28259 

-- 
Hope this helps.  Let us know.
Wes
MS-MVP Windows Shell/User
In news:A52A56E7-CCB8-4534-8C8D-4099B606A4D1@microsoft.com,
fguidobaldo@email.it <fguidobaldo@email.it@discussions.microsoft.com> hunted
and pecked:
> i found Neomonap23.exe in my registry
> ( at the moment  not remember precisely where but it was in the same
> folder as ctfom.exe and wuampd.exe) ...this is malware but i have not
> found any neomonap23.exe file in the system32 folder,what
> i have searched for ax executable file name neomonap23.exe  but i have not
> found any,
> what is the name of the virus? how can i delete it completely?
> searching on the internet i have read that it may possibile be a boot
> sector virus ?

Relevant Pages

  • Re: Spell check does not work in Word 2007
    ... If you delete the correct registry key, ... If so then is the Microsoft Office Button in the upper left corner ... If spell check does not work at all, see if the following corrects the ... >>> Turn Language off and on, watching in the Status bar to see what ...
    (microsoft.public.word.docmanagement)
  • Re: Virus causing System32 folder to be opened at startup?
    ... If you have any Microsoft Office programs, ... Turn Off the Speech Recognition and Handwriting Recognition Features ... I ran msconfig but did not see anything unexpected under Startup ... but now the ctfmon.exe registry key is gone and the msconfig Startup ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Outlook XP - have to save files
    ... Check whether Level1Remove doesn't include txt. ... Microsoft Office and Microsoft Office related News ... >> Have you edited the Level1Remove registry key or are you using a tool to ... >> Microsoft Office and Microsoft Office related News ...
    (microsoft.public.outlook)
  • Re: Opening an attachment without saving
    ... Most likely the file-type pdf is added to the LevelOneRemove registry key. ... Microsoft Office and Microsoft Office related News ... >>> When trying to open a pdf file attachment the system ...
    (microsoft.public.outlook)
  • Re: Disable Junk E-mail
    ... You can use Group Policy indeed to force the setting ... For the registry key; ... Microsoft Office and Microsoft Office related News ... e-mail option under Tools | Options | Preferences tab. ...
    (microsoft.public.outlook.installation)