Results 1 to 4 of 4

Thread: Help with ctfmon.exe please!

Hybrid View

Previous Post Previous Post   Next Post Next Post
  1. #1
    Junior Member
    Join Date
    Aug 2006
    Posts
    2

    Default Help with ctfmon.exe please!

    Hello everyone. I must say Spybot S&D is truly a great tool to get rid of annoying and dangerous malware. I have used it with great effect.

    However, I still don't know how to get rid of ctfmon.exe from running on my desktop PC. My PC is Windows XP Home Edition, SP2, and it is Korean Windows.

    After I run Spybot, in Tools -> System Startup, I uncheck ctfmon.exe which is located in C:\WINDOWS\System32. And when the pop-up dialog shows up, I tick "Remember decision" and click on "Allow Change."

    When I restart my computer, it displays the notification pop-up saying that the registry has been changed. And when I check Task Manager, there is no ctfmon.exe running. However, when I open an Internet Explorer window, the notification pop-up shows up saying that ctfmon.exe has been added to my startup list. And when I check the Task Manager, the ctfmon.exe is running.

    It would be great if I can get help getting rid of ctfmon.exe from running on my computer at all times. It worked for my notebook (which is English Windows), but doesn't work for my desktop. I thank you all in advance.

  2. #2
    Spybot Advisor Team [Retired] md usa spybot fan's Avatar
    Join Date
    Oct 2005
    Posts
    5,859

    Default

    The following article may help you understand what causes Ctfmon.exe to run:

    Getting an answer is one thing, learning is another.


    Microsoft Windows XP Home Edition running on a 2.40GHz IntelŪ PentiumŪ 4 Processor with 512 MB of RAM and a 533 MHz System Bus.

  3. #3
    Junior Member
    Join Date
    Aug 2006
    Posts
    2

    Default

    Hey, thanks for the quick reply, usa spybot fan.

    I should have researched this matter more thoroughly, but thanks for the great link. It has everything I ever wanted to know about ctfmon.exe and how I can get rid of it.

    Just to be sure.. If ctfmon.exe is in C:\WINDOWS\System32, it is not a malware, right?

    Once again, thanks for your swift help and advice.

    Peter.

  4. #4
    Spybot Advisor Team [Retired] md usa spybot fan's Avatar
    Join Date
    Oct 2005
    Posts
    5,859

    Default

    Right.

    Ctfmon.exe can also be associated with viruses, spyware, Trojans or worms usually when executed from a directory other than C:\WINDOWS\system32\.

    This is why scanning for malware is not done just by names alone but usually done by what are referred to as signatures which can include content, hash values, etc. so that a valid copy of Ctfmon.exe can distinguish from a malignant copy of Ctfmon.exe.

    Getting an answer is one thing, learning is another.


    Microsoft Windows XP Home Edition running on a 2.40GHz IntelŪ PentiumŪ 4 Processor with 512 MB of RAM and a 533 MHz System Bus.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •