Highlighted in green

[Gamekid]

When using spybot search and destory in advanced mode, if I go to the system startup section, there are several items highlighted in green. How come?

[md usa spybot fan]

Gamekid:

Click the Help button on the System Startup screen, it will explain.

[Gamekid]

My other question is this. In the list under system startup, I have ctfmon.exe listed twice, but not under the same registry key. I have microsoft office so I would have ctfmon.exe. Should I disable both or just one or the other?

[spybotsandra]

Hello,

I recommend not to delete anything, as it is probably a microsoft file.
There can be more than one of it in a system startup.
Ctfmon.exe is part of Microsoft Office XP. It monitors the active windows and provides text input service support for speech recognition,
handwriting recognition, keyboard, translation, and other alternative user input technologies. It should be located here:

* C:\Windows\System32

If not it can be virus, spyware, trojan or worm! Examples:
PWSteal.Raidys
http://securityresponse.symantec.com...al.raidys.html
http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.raidys.html
Trojan.Satiloler
http://securityresponse.symantec.com...satiloler.html
http://securityresponse.symantec.com/avcenter/venc/data/trojan.satiloler.html
Spyware.FamilyKeylog
http://securityresponse.symantec.com...ilykeylog.html
http://securityresponse.symantec.com/avcenter/venc/data/spyware.familykeylog.html
Further you can see it on the filesize. The legal version is something like 10 to 15 KB.

Best regards
Sandra
Team Spybot

[Gamekid]

Hello,

I recommend not to delete anything, as it is probably a microsoft file.
There can be more than one of it in a system startup.
Ctfmon.exe is part of Microsoft Office XP. It monitors the active windows and provides text input service support for speech recognition,
handwriting recognition, keyboard, translation, and other alternative user input technologies. It should be located here:

* C:\Windows\System32

If not it can be virus, spyware, trojan or worm! Examples:
PWSteal.Raidys
http://securityresponse.symantec.com...al.raidys.html
http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.raidys.html
Trojan.Satiloler
http://securityresponse.symantec.com...satiloler.html
http://securityresponse.symantec.com/avcenter/venc/data/trojan.satiloler.html
Spyware.FamilyKeylog
http://securityresponse.symantec.com...ilykeylog.html
http://securityresponse.symantec.com/avcenter/venc/data/spyware.familykeylog.html
Further you can see it on the filesize. The legal version is something like 10 to 15 KB.

Best regards
Sandra
Team Spybot

I'm not deleting anything, I'm just wondering which one I should disable?

[spybotsandra]

Hello,

Non of them.

Best regards
Sandra
Team Spybot

[Gamekid]

Hello,

Non of them.

Best regards
Sandra
Team Spybot

My point is that I don't need the item on.

[drragostea]

If you are referring to the "ctfmon.exe" process, it will startup regardless if you disable it via Startup Manager.

The process starts up when you execute Internet Explorer and Microsoft Office, so it would be no point if ctfmon is started 10 minutes after bootup. It will start regardless (you get the point).

What you can do is disable ctfmon (because primarily English is the main language that you are using), via Control Panel. Data, Time, Language, and Regional Options>Regional and Language Options>Languages>Details>Advanced> Turn off Advanced Text Services.

ctfmon.exe will not start in future boots.

[Gamekid]

If you are referring to the "ctfmon.exe" process, it will startup regardless if you disable it via Startup Manager.

The process starts up when you execute Internet Explorer and Microsoft Office, so it would be no point if ctfmon is started 10 minutes after bootup. It will start regardless (you get the point).

What you can do is disable ctfmon (because primarily English is the main language that you are using), via Control Panel. Data, Time, Language, and Regional Options>Regional and Language Options>Languages>Details>Advanced> Turn off Advanced Text Services.

ctfmon.exe will not start in future boots.

I have turned off ctfmon.exe.

[drragostea]

Well does that resolve your query?

[Gamekid]

Yes it does. Thank you for your help.

[drragostea]

Glad to have helped, GameKid.

Safe surfing :cowboy:.