When you run a Microsoft Office XP or Microsoft Office 2003 program, the file Ctfmon.exe (Ctfmon) runs in the background, even after you quit all Office programs.
"Ctfmon.exe activates the Alternative User Input Text Input Processor (TIP) and the Microsoft Office Language Bar. Ctfmon.exe monitors the active windows and provides text input service support for speech recognition, handwriting recognition, keyboard, translation, and other alternative user input technologies."
ctfmon.exe is located in "C:\WINDOWS\System32\" when running Windows XP.
IMPORTANT: do not mix CTFMON.EXE file with the CTFMON32.EXE file.
CTFMON32.EXE file is related to such parasites as the
CoolWebSearch hijacker,
Raidys, and
Family Key Logger. Its primary purpose is to start a parasite or launch some of its components. Once executed, the ctfmon.exe file runs a process that is responsible for the parasite's payload. ctfmon.exe is a significant part of a dangerous threat, but it can also work on its own. DO NOT execute it!
ctfmon.exe file is also installed and used by parasites
Satiloler,
Satiloler.d,
Satiloler.c,
Satiloler.e,
Snow. You are highly advised to scan the system, delete executable ctfmon.exe and terminate all the processes it started.
Post Comment: