English | Deutsch

How to remove ctfmon error


The free file information forum can help you find out if ctfmon.exe is a virus, trojan, spyware, adware which you can remove, or a file belonging to a Windows system or an application you can trust.

Software  Click to Run a Free Scan for ctfmon.exe related errors


ctfmon.exe file information

The process CTF Loader or Userinit Logon Application or Cicero Loader or Sun Java update scheduler or CTFMON or eMule or Microsoft Office Word or ctfmon MFC ?? ???? belongs to the software Microsoft Windows Operating System or MicrosoftR WindowsR Operating System or ctfmon.exe or Microsoft¢ç Windows¢ç Operating System or Microsoft(R) Windows NT(R) Operating System or jusched.exe or Microsoft Office Professional Edition or eMule or Microsoft@ Windows@ Operating System or Family Keylogger v or wsgta or ctfmon.exe or ctfmon ? ??? by Microsoft Corporation (www.microsoft.com) or Sun MicroSystems, Inc or http://www.emule-project.net (www.emule-project.net).

Description: File ctfmon.exe is located in the folder C:\Windows\System32. Known file sizes on Windows XP are 15,360 bytes (92% of all occurrence), 13,312 bytes, 30,208 bytes, 8,192 bytes, 40,448 bytes, 13,824 bytes, 25,088 bytes, 14,336 bytes, 156,635 bytes, 192,990 bytes, 92,160 bytes, 69,632 bytes, 38,924 bytes, 44,032 bytes, 15,361 bytes, 20,992 bytes, 23,552 bytes, 356,864 bytes, 365,056 bytes, 22,528 bytes, 192,978 bytes, 91,648 bytes, 192,992 bytes, 26,112 bytes, 36,628 bytes, 129,536 bytes, 16,897 bytes, 8,704 bytes, 25,600 bytes, 24,080 bytes.
The program is not visible. File ctfmon.exe is a Microsoft signed file. The program starts upon Windows startup (see Registry key: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders). Therefore the technical security rating is 17% dangerous, however also read the users reviews.

Recommended: Identify ctfmon.exe related errors

If ctfmon.exe is located in a subfolder of C:\Windows\System32 then the security rating is 69% dangerous. File size is 4,952,064 bytes (51% of all occurrence), 80,896 bytes, 80,384 bytes, 15,360 bytes, 291,908 bytes, 43,520 bytes, 76,800 bytes, 82,036 bytes, 6,212 bytes, 598,528 bytes. ctfmon.exe is not a Windows core file. There is no file information. File ctfmon.exe is an unknown file in the Windows folder. The program has no visible window. Program starts when Windows starts (see Registry key: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders). ctfmon.exe is able to record inputs, connect to Internet, hide itself.

If ctfmon.exe is located in the folder C:\Windows then the security rating is 62% dangerous. File size is 95,744 bytes (31% of all occurrence), 33,280 bytes, 2,811,732 bytes, 20,062 bytes, 17,211 bytes, 74,950 bytes, 23,552 bytes, 18,353 bytes, 50,670 bytes, 94,208 bytes. It is not a Windows system file. The program has no visible window. It is located in the Windows folder, but it is not a Windows core file. Program is loaded during the Windows boot process (see Registry key: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders). ctfmon.exe is able to monitor applications, hide itself.

If ctfmon.exe is located in a subfolder of C:\Windows then the security rating is 26% dangerous. File size is 15,360 bytes (71% of all occurrence), 13,312 bytes, 180,224 bytes.

If ctfmon.exe is located in a subfolder of "C:\Program Files" then the security rating is 66% dangerous. File size is 80,896 bytes (18% of all occurrence), 13,312 bytes, 20,480 bytes, 291,908 bytes, 8,192 bytes, 13,824 bytes, 892,928 bytes.

If ctfmon.exe is located in a subfolder of "C:\Documents and Settings" then the security rating is 48% dangerous. File size is 20,480 bytes (63% of all occurrence), 49,152 bytes, 90,112 bytes.

If ctfmon.exe is located in the folder C:\Windows\System32\drivers then the security rating is 100% dangerous. File size is 49,762 bytes (66% of all occurrence), 39,273 bytes.

If ctfmon.exe is located in a subfolder of C:\ then the security rating is 100% dangerous. File size is 45,568 bytes.

If ctfmon.exe is located in a subfolder of the "My Files" folder then the security rating is 56% dangerous. File size is 7,680 bytes.

External information from Paul Collins:

  • "ctfmon" can run at start up. CTFMon is involved with the language/alternative input services in Office XP. CTFMON.exe will continue to put itself back into MSConfig when you run the Office XP apps as long as the Text Services and Speech applets in the Control Panel are enabled. Not required if you don't need these features. For more info on ctfmon see here

Important: Some malware camouflage themselves as ctfmon.exe, particularly if they are located in c:\windows or c:\windows\system32 folder. Thus check the ctfmon.exe process on your pc whether it is pest. We recommend Security Task Manager for verifying your computer's security. It is one of the Top Download Picks of 2005 of The Washington Post and PC World.

Links: ,

Score

User Comments

Rate
I know there are way to many stupid notions posted about this file on here. If your ctfmon.exe was a virus then it got infected because your system was infected, the file itself is not a virus. If you think it is then you have a lot to learn. As for what it does specifically I suggest a trip to http://support.microsoft.com/kb/282599 and it discusses exactly what it does. As for bloatware, well if you don't need this then maybe it is however the process uses only 5MB of memory and there are a multitude of other unneeded TSRs that use far more. Disable it if you don't need it.
  RCM   (further information)
Rate
This file slows down almost everything you do on your PC. Try to delete most recent files on the start meny for example. Do it with ctfmon.exe running, than try it again when you have shut down the process in event manager.. The experiece differ pretty much between the to variants
  Bruskens Tid  
Rate
This file (the legitimate Office one) is installed with IE7. Maybe Microsoft think we all want to browse the internet with handwriting recognition???
  iffy  
Rate
Can be infected by Trojans - CiD adware for example.
  Rob  
Rate
After starting Windows, this file is responsible for freezing my PC for like 5 mins. It also shows error message when I try to take it off startup
  Benjamin  
Rate
The file is indeed a part of Microsoft Office. Was present in my startup user entry, deleted it, but then re-registered itself when I opened Word. Seems to cause no problem on my computer, so I am going to leave it as-is.
  Ben  
Rate
It always shows up in my flashdrive, so I guess I have the virus type
  AnonyDESU  
Rate
I could switch off this service (which is into system32 folder, and only in this case) by following steps. Go to Regional and Language Options in Control Panel, then Languages, Ditail, Advanced and there tick off Turn off Advanced text services.
  Paul Se  
Rate
It is s necessary file and used by ms-office programs knowing that,
   
Rate
It is Run from C:\\Windows its Harmless it is run from another directory its a Virus etc
  Unknow  
Rate
It is required for Alternative Input Text and whenever an Office program is run.
  ferrari  
Rate
If you have your doubts over this process you can stop it running on startup by downloading and running Autoruns from the Microsoft website. You can then uncheck the box for ctfmon.exe
  Chris  
Rate
The file CTFMON.exe constantly appears inside the hidden folders RECYCLED. The only problem is that it seems to have corrupted some of my programs.
  Chris Murray  
Rate
If the file is causing your computer not to run correctly, then its a file acting as ctfmon that is really a virus. If It is the real one, it is a 1 mb program, if its giving your performance issues, then your computer is so old that it belongs in the dumpster.
  Robert  
Rate
More comments can be found here:
    (further information)

Summary: 135 users think ctfmon.exe is essential for Windows or an installed application. 18 users think it's probably harmless. 114 users think it's neither essential nor dangerous. 66 users suspect danger. 72 users think ctfmon.exe is dangerous and recommend to remove it.. 23 users doesn't grade ctfmon.exe ("not sure about it").

Do you have additional information?
What do you know about ctfmon.exe:
How do you rate it:
Link for more info's:
Your Name:

ctfmon scanner


image

Security Task Manager shows all running Windows tasks including embedded hidden functions (e.g. keyboard or browser monitoring, autostart entry). A unique security risk rating indicates the likelihood of the process being potential spyware, malware, keylogger or a Trojan.

Spyware Doctor detects and removes sleeping spyware, adware, trojans, keyloggers, malware and tracking threats from your hard disk. Ideal supplement to Security Task Manager.

Registry Booster free scans, cleans, repairs and optimizes your system.

Other processes


ctfmon.exe [all]