ctfmon.exe

[nvidia]

how do i delete ctfmon.exe?
its replicating and i have 2 ctfmon.exe files running in the system process

[vijay_7287]

u cannot delete it....it is a process associated with MS Office...if u wanna get rid of it...switch back to Office-2000

[nvidia]

my problem is not with the office file the ctfmon is also a trojan!!! you scan your comp and see if the trojan is also in your comp... use avg anti spyware if its there it will tell you it is usually located in c:\documents and settings\<use r name>\starup i think not very sure....

[Zeeshan Quireshi]

then all you can do is delete that file n then repair or reinstall MS Office , that would solve it :)

[Kiran_tech_mania]

how do i delete ctfmon.exe?
its replicating and i have 2 ctfmon.exe files running in the system process

Information is not sufficient to give any suggestions. Please post the HijackThis log file report here for analysis.


1. Download HijackThis (http://download.hijackthis.eu/hijackthis_199.zip)

2. Extract the zip content to Desktop

3. Close all Open windows if any including your browser

4. Run Hijackthis

A report will be produced. Copy & paste entire report here for analysis.

[Vishal Gupta]

Goto Add/Remove Programs list and click on Microsoft Office XP Professional with front page (or something like that. Depends upon which version u hv installed), Now click on Change button and select Add/Remove Features then Next. Now expand Office Shared Features and click on Alternative User Input and select Not Available and finally click on Update.

It'll permanently remove that ctfmon.exe ;)

[Zeeshan Quireshi]

Goto Add/Remove Programs list and click on Microsoft Office XP Professional with front page (or something like that. Depends upon which version u hv installed), Now click on Change button and select Add/Remove Features then Next. Now expand Office Shared Features and click on Alternative User Input and select Not Available and finally click on Update.

It'll permanently remove that ctfmon.exe ;)
whoa Vishal i never knew it was for that , i though it was an Office Core Component.

I always discover new things by reading your posts :D

[Lucky_star]

Thanx Vishal, it helped me too...

[anandk]

its replicating and i have 2 ctfmon.exe files running in the system process

check its locations. if they r not situated in C:\Windows\System32\ they are malware.

[Vishal Gupta]

@Zeeshan & Lucky
U both r always welcome. :D

[prasad_den]

Goto Add/Remove Programs list and click on Microsoft Office XP Professional with front page (or something like that. Depends upon which version u hv installed), Now click on Change button and select Add/Remove Features then Next. Now expand Office Shared Features and click on Alternative User Input and select Not Available and finally click on Update.

It'll permanently remove that ctfmon.exe ;)
Any suggestions for the same in Office 2007..?? I don't find the entry you have mentioned under Office Shared FEatures..!!

[Vishal Gupta]

^^ Yeah, its not there and neither it runs in background. ;)

[ImAClown]

exactly. its not there and neither it runs in background. but i often see it walking slowly in the frontyard. i wonder what happened to all its speed???????? maybe it got tired of running in the background. poor guy/gal/guy-gal.

[prasad_den]

^^ Yeah, its not there and neither it runs in background. ;)
But I'm still having problems with ctfmon.exe even though office XP has been uninstalled and office 2007 installed in its place...

[Vishal Gupta]

^^ It means the file is running bcoz it was left there after uninstalling Office XP. ;)
Did u try to remove it from startup using msconfig?

[prasad_den]

^^ Yup.. tried it.. but it keeps returning.. and I found that it starts every time I start IE7..!

[Vishal Gupta]

Open IE7 and goto "Tools -> Manage Add-ons -> Enable or disable Add-ons". Now check whether an entry for "ctfmon.exe" exists there or not? If yes, then disable it. ;)

[prasad_den]

I checked it now.. I couldn't find any entry even remotely similar to ctfmon.exe...
I searched my sys and found that the file exists in two locations.. the system32 folder and the prefetch folder.. Will deleting these two files solve the problem..??

[Vishal Gupta]

The file exists in my system too and I'll not suggest u to delete it. ;)
Let it be there...

[prasad_den]

OH.. ok..!! As long as it just remains without creating much problems, I guess I'll leave it unharmed..

[nvidia]

noooooooooo dont delete ht file directly thts wat i did and the file replicated and now there are 2 ctfmons running in system process