English | Deutsch
Try  Security
Task Manager

Inspect the ctfmon.exe on your PC!
www.neuber.com

How to remove ctfmon error


The free file information forum can help you find out if ctfmon.exe is a virus, trojan, spyware, adware which you can remove, or a file belonging to a Windows system or an application you can trust.

ctfmon.exe file information

The process CTF Loader or Userinit Logon Application or Cicero Loader or Sun Java update scheduler or CTFMON or eMule or Microsoft Office Word or ctfmon MFC ?? ???? belongs to the software Microsoft® Windows® Operating System or MicrosoftR WindowsR Operating System or Microsoft Data Access or Microsoft? Windows? Operating System or Microsoft¢ç Windows¢ç Operating System or ctfmon.exe or Microsoft(R) Windows NT(R) Operating System or jusched.exe or Microsoft Office Professional Edition or eMule or Microsoft@ Windows@ Operating System or Family Keylogger v or wsgta or ctfmon.exe or ctfmon ?? ???? by Microsoft Corporation (www.microsoft.com) or Sun MicroSystems, Inc or http://www.emule-project.net (www.emule-project.net).

Description: File ctfmon.exe is located in the folder C:\Windows\System32. Known file sizes on Windows XP are 15360 bytes (90% of all occurrence), 13312 bytes, 30208 bytes, 8192 bytes, 13824 bytes, 14336 bytes, 25088 bytes, 40448 bytes, 192990 bytes, 92160 bytes, 69632 bytes, 44032 bytes, 38924 bytes, 15361 bytes, 20992 bytes, 156635 bytes, 356864 bytes, 365056 bytes, 22528 bytes, 192978 bytes, 192992 bytes, 26112 bytes, 36628 bytes, 129536 bytes, 16897 bytes, 25600 bytes, 8704 bytes, 24080 bytes.
File ctfmon.exe is a Windows core system file. The program has no visible window. ctfmon.exe is a Microsoft signed file. The program is loaded during the Windows boot process (see Registry key: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders). Therefore the technical security rating is 17% dangerous, however also read the users reviews.

If ctfmon.exe is located in a subfolder of C:\Windows\System32 then the security rating is 69% dangerous. File size is 4952064 bytes (51% of all occurrence), 80896 bytes, 80384 bytes, 15360 bytes, 43520 bytes, 76800 bytes, 82036 bytes, 6212 bytes, 291908 bytes, 598528 bytes. It is not a Windows core file. There is no information about the maker of the file. It is located in the Windows folder, but it is not a Windows core file. The program has no visible window. Program is loaded during the Windows boot process (see Registry key: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders). ctfmon.exe is able to record inputs, connect to Internet, hide itself.

If ctfmon.exe is located in the folder C:\Windows then the security rating is 60% dangerous. File size is 95744 bytes (33% of all occurrence), 33280 bytes, 2811732 bytes, 17211 bytes, 23552 bytes, 94208 bytes, 74950 bytes. File ctfmon.exe is not a Windows core file. The program is not visible. The file is located in the Windows folder, but it is not a Windows core file. The program is loaded during the Windows boot process (see Registry key: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders). ctfmon.exe is able to monitor applications.

If ctfmon.exe is located in a subfolder of C:\Windows then the security rating is 28% dangerous. File size is 15360 bytes (66% of all occurrence), 13312 bytes, 180224 bytes.

If ctfmon.exe is located in a subfolder of "C:\Program Files" then the security rating is 64% dangerous. File size is 13312 bytes (25% of all occurrence), 80896 bytes, 20480 bytes, 291908 bytes, 8192 bytes, 13824 bytes, 892928 bytes.

If ctfmon.exe is located in a subfolder of "C:\Documents and Settings" then the security rating is 48% dangerous. File size is 20480 bytes (60% of all occurrence), 49152 bytes, 90112 bytes.

If ctfmon.exe is located in a subfolder of C:\ then the security rating is 100% dangerous. File size is 45568 bytes.

If ctfmon.exe is located in the folder C:\Windows\System32\drivers then the security rating is 74% dangerous. File size is 569856 bytes.

External information from Paul Collins:

  • "ctfmon" can run at start up. CTFMon is involved with the language/alternative input services in Office XP. CTFMON.exe will continue to put itself back into MSConfig when you run the Office XP apps as long as the Text Services and Speech applets in the Control Panel are enabled. Not required if you don't need these features. For more info on ctfmon see here

Important: Some malware camouflage themselves as ctfmon.exe, particularly if they are located in c:\windows or c:\windows\system32 folder. Thus check the ctfmon.exe process on your pc whether it is pest. We recommend Security Task Manager for verifying your computer's security. It is one of the Top Download Picks of 2005 of The Washington Post and PC World.

Links: ,

Score

User Comments

Rate
It's unnecessary. Disable it from starting automatically by using a start-up viewing utility or just do it manually by editing the registry.
  Dethklok  
Rate
If you want to turn off ctfmon do this.Start = All Programs =Control Panel = Select Date,Time,Language and Regional Options Then select Regional and Language Options. Click on Languages = Select Text Services and Input Languages = settings = advanced . Chevk Turn Off Advanced Text Services. It won't bother you again.
  KoalMan  
Rate
Magman. ctfmon.exe is NOT a virus!
  Lee  
Rate
it can be found on c:\windows\servicepackfiles\i386, not dangerous, easy to remove...
  Daniel Furlan Carobrez  
Rate
It's a major part of text-input services for Windows apps, especially in Office and, more importantly, the language toolbar. I personally use four different languages on my computer, so this file is ESSENTIAL. Especially for East Asian language users (with a non-EA version of Windows), this file is very important for multi-language support. On the other hand, if you aren't using more than one language and you don't rely on Office's text services (minor things, anyway) then KILL it, it just eats up processing anyway. Especially for any games, I usually have to kill it when playing games. XD
  Teh Mastah Cheef  
Rate
On install ZoneAlarm set the send mail allow flag against this file. Why should this program need this permission. I'll follow the links to the MS KB and remove it from my PC. I don't need the features it provides.
  Mark  
Rate
i dunno anything but it is not dangerous
  ctfmon.exe   (further information) (further information)
Rate
Process Guard is always catching cftmon.exe trying to register itself as a startup program. This is irksome about Microsoft as I don't even have Microsoft Office loaded!
  Donna Harrington  
Rate
If you have Office 2000, you can disable ctfmon.exe by renaming the file.
  Ibennia   (further information)
Rate
If The File Is In The System32 Folder It is Not A Virus. It is Used By OfficeXP Programs However If It Is Outside The System32 Folder It Is Probably A Virus
  Alex  
Rate
This file is a typical Micro$oft screw-up. It is used for the language bar. You sgould be able to disable it, howerver, I have found it will be re-enabled somehow. It does cause conflict with many games and especially CD/DVD copy protection schemes like SecureRom. This file was responsible for a empty tool bar on my task bar that I could not get rid of. Disabling it and then rebooting fixed the problem. But, it eventually turns back on, whenever a process expects to see it. Possibly Office apps always expect to see it, and when an Office app is run, it re-enables without your consent.
  Shinsa  
Rate
File Download - Security Warning Do you want to save this file NAVCANCL Unknown file type from IEFRAME.dll When tried to open internet explorer, this is the message i got.
  Mukul Sharma  
Rate
It seems to cause lag and when i stop it thru task manager it seems to restart after i open an explorer window
  ( , Y , )  
Rate
Just check the file's date stamp to find out when it got into your pc. For me, if I find it too recent and differs very much with the rest of windows system files, I can always safely delete it =)
  sherry zak  
Rate
I have microsoft office and works and i haven't even opened them since installation and yet ctfmon.exe is always there on task manager using up 584K of memory usage. Is this normal it's getting very annoying!
  David Jones  
Rate
More comments can be found here:
    (further information)

Summary: 113 users think ctfmon.exe is essential for Windows or an installed application. 16 users think it's probably harmless. 95 users think it's neither essential nor dangerous. 51 users suspect danger. 61 users think ctfmon.exe is dangerous and recommend to remove it.. 18 users doesn't grade ctfmon.exe ("not sure about it").

Do you have additional information?
What do you know about ctfmon.exe:
How do you rate it:
Link for more info's:
Your Name:

ctfmon scanner


image

Security Task Manager shows all running Windows tasks including embedded hidden functions (e.g. keyboard or browser monitoring, autostart entry). A unique security risk rating indicates the likelihood of the process being potential spyware, malware, keylogger or a Trojan.

Spyware Doctor detects and removes sleeping spyware, adware, trojans, keyloggers, malware and tracking threats from your hard disk. Ideal supplement to Security Task Manager.

Registry Booster free scans, cleans, repairs and optimizes your system.

Other processes


ctfmon.exe [all]