Highlighted in green

G

Gamekid

New member
When using spybot search and destory in advanced mode, if I go to the system startup section, there are several items highlighted in green. How come?
 
My other question is this. In the list under system startup, I have ctfmon.exe listed twice, but not under the same registry key. I have microsoft office so I would have ctfmon.exe. Should I disable both or just one or the other?
 
Hello,

I recommend not to delete anything, as it is probably a microsoft file.
There can be more than one of it in a system startup.
Ctfmon.exe is part of Microsoft Office XP. It monitors the active windows and provides text input service support for speech recognition,
handwriting recognition, keyboard, translation, and other alternative user input technologies. It should be located here:

* C:\Windows\System32

If not it can be virus, spyware, trojan or worm! Examples:
PWSteal.Raidys
http://securityresponse.symantec.com...al.raidys.html
http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.raidys.html
Trojan.Satiloler
http://securityresponse.symantec.com...satiloler.html
http://securityresponse.symantec.com/avcenter/venc/data/trojan.satiloler.html
Spyware.FamilyKeylog
http://securityresponse.symantec.com...ilykeylog.html
http://securityresponse.symantec.com/avcenter/venc/data/spyware.familykeylog.html
Further you can see it on the filesize. The legal version is something like 10 to 15 KB.

Best regards
Sandra
Team Spybot
 
spybotsandra said:
Hello,

I recommend not to delete anything, as it is probably a microsoft file.
There can be more than one of it in a system startup.
Ctfmon.exe is part of Microsoft Office XP. It monitors the active windows and provides text input service support for speech recognition,
handwriting recognition, keyboard, translation, and other alternative user input technologies. It should be located here:

* C:\Windows\System32

If not it can be virus, spyware, trojan or worm! Examples:
PWSteal.Raidys
http://securityresponse.symantec.com...al.raidys.html
http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.raidys.html
Trojan.Satiloler
http://securityresponse.symantec.com...satiloler.html
http://securityresponse.symantec.com/avcenter/venc/data/trojan.satiloler.html
Spyware.FamilyKeylog
http://securityresponse.symantec.com...ilykeylog.html
http://securityresponse.symantec.com/avcenter/venc/data/spyware.familykeylog.html
Further you can see it on the filesize. The legal version is something like 10 to 15 KB.

Best regards
Sandra
Team Spybot
Click to expand...

I'm not deleting anything, I'm just wondering which one I should disable?
 
If you are referring to the "ctfmon.exe" process, it will startup regardless if you disable it via Startup Manager.

The process starts up when you execute Internet Explorer and Microsoft Office, so it would be no point if ctfmon is started 10 minutes after bootup. It will start regardless (you get the point).

What you can do is disable ctfmon (because primarily English is the main language that you are using), via Control Panel. Data, Time, Language, and Regional Options>Regional and Language Options>Languages>Details>Advanced> Turn off Advanced Text Services.

ctfmon.exe will not start in future boots.
 
drragostea said:
If you are referring to the "ctfmon.exe" process, it will startup regardless if you disable it via Startup Manager.

The process starts up when you execute Internet Explorer and Microsoft Office, so it would be no point if ctfmon is started 10 minutes after bootup. It will start regardless (you get the point).

What you can do is disable ctfmon (because primarily English is the main language that you are using), via Control Panel. Data, Time, Language, and Regional Options>Regional and Language Options>Languages>Details>Advanced> Turn off Advanced Text Services.

ctfmon.exe will not start in future boots.
Click to expand...

I have turned off ctfmon.exe.
 
You must log in or register to reply here.
Back
Top