Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

ctfmon


  • Please log in to reply
2 replies to this topic

#1 wgssr

wgssr

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:05:07 PM

Posted 22 April 2005 - 11:00 AM

A seach for ctfmon pulll up 2 identical possible seneiros. How can you know which one is really in your strat up.


ctfmon cftmon.exe X Added by the Troj/Delbot-B TROJAN/IRC backdoor!


ctfmon ctfmon.exe U CTFMon is involved with the language/alternative input services in Office XP. CTFMON.exe will continue to put itself back into MSConfig when you run the Office XP apps as long as the Text Services and Speech applets in the Control Panel are enabled. Not required if you don't need these features. For more info on ctfmon see here

BC AdBot (Login to Remove)

 


#2 Enthusiast

Enthusiast

  • Members
  • 5,898 posts
  • OFFLINE
  •  
  • Location:Florida, USA
  • Local time:05:07 PM

Posted 22 April 2005 - 11:42 AM

CTFMON.exe will continue to put itself back into MSConfig when you run the Office XP apps as long as the Text Services and Speech applets in the Control Panel are enabled. Not required if you don't need these features. For more info on ctfmon see here


Uncheck it from msconfig. If windows needs it it says it will be restored.

#3 jgweed

jgweed

  • Staff Emeritus
  • 28,473 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Chicago, Il.
  • Local time:05:07 PM

Posted 22 April 2005 - 01:22 PM

The question goes away if you do not have Office installed on your computer.
If you do, see this article:
http://support.microsoft.com/default.aspx?...kb;en-us;282599

If it still persists after following that article's steps, then it is a trojan. I also suspect, 'though I have not had time to verify this, that the location of the two .exe files are different, one being in the Office folders, the other in the Windows System folder.

Regards,
John
Whereof one cannot speak, thereof one should be silent.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users