System Startup identifies this as a parasite "Current filename: C:\WINDOWS\System32\ctfmon.exe
Database status: Not required - virus, spyware, malware or other resource hog
Value: CTFMON.EXE
Filename: ctfmon32.exe
Description
_CoolWebSearch_ parasite related - hijacking to Slawsearch.com
Source: Paul Collins Startup list"
Microsoft say its part of MSOffice - http://support.microsoft.com/kb/q282599/