Extension: exe



ctfmon.exe is a Microsoft process which runs in a background when you run a Microsoft Office XP or Microsoft Office 2003 programs. This file controlls Alternative User Input and the Office Language bar but it can also be seen running even when you close all Microsoft Office programs. Ctfmon.exe process is only necessary when dealing with other languages or when information in inputted using a device other than a standard keyboard, so it's not an essential process. If you don't need it, you can safely terminate it. Typically, ctfmon.exe can be found in subfolder "C:\WINDOWS\System32\" when running Windows XP.


ctfmon.exe file can sometimes be used by malware to hide its presense on the system, so pay attention to the location of the file. If it is located not in C:\WINDOWS\System32, these is a huge possibility that this file belongs to virus, spyware, trojan or worm. Note that ctfmon.exe is mostly used by parasites Satiloler, Satiloler.d, Satiloler.c, Satiloler.e and Snow, so you are highly advised to scan the system, delete executable ctfmon.exe and terminate all the processes it started. 

Do NOT mix ctfmon.exe with ctfmon32.exe file because this file is related to such parasites as the CoolWebSearch hijacker, Raidys and Family Key Logger. The primary purpose of this file is to start a parasite or launch some of its components. Once executed, the ctfmon32.exe file runs a process that is responsible for the parasite's payload. ctfmon32.exe is a significant part of a dangerous threat, but it can also work on its own. DO NOT execute it! 

If you suspect that ctfmon.exe is malicious and causing various problems on your computer, you should not only terminate this process but run a full system scan with  SpyHunter or other problems listed below to find and eliminate errors related to ctfmon.exe 

verdict - status of the file:

safe file
2-spyware.com research center gathers and checks all information related to ctfmon.exe. We ask ourselves the questions like: Do this file pose a threat? Does the filename is exploited by Malware? and other. The final status of the file is purely our opinion.
SAFE FILE status means that this file is completely safe and does not pose any threat.


If your Computer seems Sluggish, or you see some unwanted Advertisements, redirects to the strange websites, then we recommend you to scan the system with reputable anti-spyware program. Do some FREE scan tests and you will see if there are some unwanted applications, whitch might be responsible for the tab stability of the system.
We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.
By Downloading any provided Anti-spyware software you agree to our privacy policy and agreement of use.
SpyHunter is a recommended tool to scan your system for possible threats and crappy software. The trial version of the product will find harmfull applications in your system
Malwarebytes Anti Malware
XoftSpySE Anti Spyware
Defender Pro Ultimate
AV Installation
Phone Support
Help Line to install AntiVirus software
Information added: 2012-11-26 04:59:33
Information updated: 2013-12-30 00:22:11

Removal guides in other languages

Additional resources related to ctfmon.exe:

Attention: If you know or you have a website or page about ctfmon.exe file, feel free to add a link to this list: add url

Post Comment:

Attention: Use this form only if you have additional information about ctfmon.exe parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.
Home page Name


* All field required

Spreading the knowledge:

It is very hard to fight against computer parasites on the Internet alone. If you have a website, we would be more than happy if you would like to cooperate and help us spread the information about latest threats. Remember, knowledge is the most powerful weapon. Help your visitors protect their computers!
add text box
rss feed
help other
Like us on Facebook
Latest spyware news:
Subscribe to spyware news
Please enter your e-mail address:
If you do not want to receive our spyware
newsletter please unsubscribe here
48644 Subscribers
Ask us