Results 1 to 10 of 10

Thread: ctfmon.exe

  1. #1
    Member
    Join Date
    Feb 2007
    Location
    Belgium
    Posts
    61

    Default ctfmon.exe

    Hello,

    in "start programs" you say that ctfmon.exe is a virus or a spyware

    are you sure ?

    it seem that it is a windows program for office ??!!

  2. #2
    Junior Member
    Join Date
    Aug 2007
    Posts
    15

    Default

    It can go either way. See here.

  3. #3
    Spybot Advisor Team Zenobia's Avatar
    Join Date
    Oct 2005
    Posts
    5,247

    Default

    It will show current file name at the top,which you can use to compare to what it says below.
    Here's mine:

    Current filename: C:\WINDOWS\system32\ctfmon.exe

    Database status: Not required - virus, spyware, malware or other resource hog
    Value: ctfmon.exe
    Filename: ctfmon32.exe

    Description
    _CoolWebSearch_ parasite related - hijacking to Slawsearch.com

    Source: Paul Collins Startup list

    See,mine is ctfmon.exe,not ctfmon32.exe.Spybot used to show two descriptions for ctfmon.exe,the one above,and then the description for the Users choice one,I think it was,but now it's showing only the one.

    Or this,for Teatimer:
    Current filename: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

    Database status: Necessity depends on users preferences
    Value: SpybotSD TeaTimer
    Filename: TeaTimer.exe

    Description
    TeaTimer is a new tool of _Spybot S&D_ - malware filter which perpetually monitors the processes called/initiated. It immediately detects known malicious processes wanting to start and terminates them giving you some options, how to deal with this process in the future

    Source: Safer Networking Ltd.

  4. #4
    Member
    Join Date
    Feb 2007
    Location
    Belgium
    Posts
    61

    Default

    Hello,

    ok spybot talk about ctfmon32.exe but i see in c/windows/system32/ctfmon.exe !

    wich is current file name ?
    wich is value ?
    wich is filename ?

    are you sure it is not the microsoft program ?

  5. #5
    Spybot Advisor Team Zenobia's Avatar
    Join Date
    Oct 2005
    Posts
    5,247

    Default

    This part Spybot is reading from my own registry:
    Current filename: C:\WINDOWS\system32\ctfmon.exe

    This part is just the description from the startup list,and is not anything from my computer:
    Database status: Not required - virus, spyware, malware or other resource hog
    Value: ctfmon.exe
    Filename: ctfmon32.exe

    Description
    _CoolWebSearch_ parasite related - hijacking to Slawsearch.com

    Source: Paul Collins Startup list

    So,I'd compare Current filename to the Filename in the description:
    Current filename: C:\WINDOWS\system32\ctfmon.exe---->Filename: ctfmon32.exe

    So,mine is not ctfmon32.exe,so in a lot of cases,it would be okay.
    http://www.castlecops.com/s795-ctfmon_exe.html
    If I'm remembering this correctly,if my current filename were this:
    Current filename: C:\WINDOWS\system32\ctfmon32.exe
    Spybot would show it as red on the startup section,not yellow or white.

    So,does your Current Filename look like this?
    Current filename: C:\WINDOWS\system32\ctfmon.exe

    Since I can't speak french,and I saw in another post you were saying you cannot speak English well,I thought I'd put this up translated,though I know translated stuff doesn't always come out right.

    ....

    La présente partie Spybot lit de mon propre enregistrement :
    Nom de fichier courant : C:\WINDOWS\system32\ctfmon.exe

    La présente partie est juste la description de la liste de démarrage, et n'est pas quelque chose à partir de mon ordinateur :
    Statut de base de données : Non requis - virus, spyware, malware ou tout autre porc de ressource
    Valeur : ctfmon.exe
    Nom de fichier : ctfmon32.exe

    Description
    parasite de _CoolWebSearch_ relié - détournant à Slawsearch.com

    Source : Liste de démarrage de Paul Collins

    Ainsi, je comparerais le nom de fichier courant au nom de fichier dans la description :
    Nom de fichier courant : C:\WINDOWS\system32\ctfmon.exe - >Filename : ctfmon32.exe

    Ainsi, la mine n'est pas ctfmon32.exe, ainsi dans beaucoup de cas, elle serait correcte.
    http://www.castlecops.com/s795-ctfmon_exe.html
    Si je me rappelle ceci correctement, si mon nom de fichier courant étaient ceci :
    Nom de fichier courant : C:\WINDOWS\system32\ctfmon32.exe
    Spybot le montrerait en tant que le rouge sur la section de démarrage, pas le jaune ou blanc.

    Ainsi, votre regard courant de nom de fichier aime-t-il ceci ?
    Nom de fichier courant : C:\WINDOWS\system32\ctfmon.exe

    Puisque je ne peux pas parler français, et j'ai vu dans un autre poteau que vous disiez vous ne pouvez pas parler anglais bien, j'ai pensé je mettrais ceci vers le haut traduit, bien que je sache que la substance traduite ne sort pas toujours bien.
    Last edited by Zenobia; 2007-08-21 at 11:34.

  6. #6
    Member
    Join Date
    Feb 2007
    Location
    Belgium
    Posts
    61

    Default

    Hello,

    thanks for the help

    ok i think i have understand the way spybot work

    the current file name is the file spybot found (here my filename c/windows/system32/ctfmon.exe
    and spybot say
    if the file name is ctfmon32.exe it is a spyware and the color is red in this case

    thus all is ok for me

    thanks to you

  7. #7
    Spybot Advisor Team Zenobia's Avatar
    Join Date
    Oct 2005
    Posts
    5,247

    Default

    You're welcome.

  8. #8
    In Memoriam -Always in our heart nickW's Avatar
    Join Date
    Oct 2005
    Location
    France
    Posts
    538

    Default

    Bonjour,


    Il existe une version française officielle de la liste de Pacman (alias Paul Collins):

    http://assiste.com.free.fr/p/pacman/...rtup_list.html

    Salut,
    nickW, traductrice de Spybot-S&D en français
    ASAP & UNITE member
    Forum d'Assiste.com

  9. #9
    Member
    Join Date
    Feb 2007
    Location
    Belgium
    Posts
    61

    Default

    Bonjour,

    parfait, merci bien.

  10. #10
    Esteemed Member
    Join Date
    Oct 2005
    Posts
    211

    Default

    This confusion would not arise if only Spybot put both of Pacman's entries (ctfmon.exe and ctfmon32.exe) in the info side bar: something I've suggested/requested off and on for the past year (or two).

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •