Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Found ctfmon.exe on my computer, now what?


  • Please log in to reply
5 replies to this topic

#1 stellium

stellium

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:01:54 AM

Posted 18 March 2013 - 06:07 PM

Hi

 

I have been struggling with high CPU and memory usage for a while now. Slow browsing and general sluggishness of my computyer. I have tried a variety of things to speed things up. I have an XP box and am running Mozilla Firefox 5. An older version of Java was on board and was updated.

 

I looked at msconfig to see what was running at startup which might be slowing me down.  I was able to remove a couple of unneccesary programs (updaters, mostly) and checked each one online before turning them off (disable).

 

One was ctfmon.exe, which was found at the C:\windows\system32\ctfmon.exe. I disabled it and a second version of the path installed itself on my computer. I'm thinking malware or exploit at this point. Can anyone help me get to the root (yeah, I know) of this business so I can deal with what seems to be an intruder?

 

Thanks for your help.

 

Jacques



BC AdBot (Login to Remove)

 


#2 Animal

Animal

    Bleepin' Animinion


  • Site Admin
  • 34,756 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Where You Least Expect Me To Be
  • Local time:10:54 PM

Posted 18 March 2013 - 06:23 PM

What you need to know about ctfmon.exe.

http://support.microsoft.com/kb/282599

The Internet is so big, so powerful and pointless that for some people it is a complete substitute for life.
Andrew Brown (1938-1994)


A learning experience is one of those things that say, "You know that thing you just did? Don't do that." Douglas Adams (1952-2001)


"Imagination is more important than knowledge. Knowledge is limited. Imagination circles the world." Albert Einstein (1879-1955)


Follow BleepingComputer on: Facebook | Twitter | Google+

#3 stellium

stellium
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:01:54 AM

Posted 18 March 2013 - 06:38 PM

Ok,

 

I got that part, am unable to do step 1 although I did disable it through the Regional andlanguages options from the control panel. I was wondering how it could be determined if it actually was an exploit, or just an annoyance. Any ideas?



#4 Dolby

Dolby

  • Members
  • 86 posts
  • OFFLINE
  •  
  • Local time:12:54 AM

Posted 18 March 2013 - 06:48 PM

in "Regional & Language Settings" you checked "turn off advanced text services" right?

you may also have to uncheck the ctfmon (clear type font monitor) box in your msconfig one more time too, & it shouldn't come back after reboot



#5 Animal

Animal

    Bleepin' Animinion


  • Site Admin
  • 34,756 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Where You Least Expect Me To Be
  • Local time:10:54 PM

Posted 18 March 2013 - 07:08 PM

The location of the file is usually the key to if it's malicious or not. The ctfmon.exe file is located in the folder C:\Windows\System32. Which yours is. If the path is anything other than that it is likely, ctfmon.exe is a virus, spyware, trojan or worm.

The Internet is so big, so powerful and pointless that for some people it is a complete substitute for life.
Andrew Brown (1938-1994)


A learning experience is one of those things that say, "You know that thing you just did? Don't do that." Douglas Adams (1952-2001)


"Imagination is more important than knowledge. Knowledge is limited. Imagination circles the world." Albert Einstein (1879-1955)


Follow BleepingComputer on: Facebook | Twitter | Google+

#6 stellium

stellium
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:01:54 AM

Posted 18 March 2013 - 09:59 PM

Animal,

 

Ok, then I'll have to keep digging for the source of my slowdown elsewhere, thanks for your time






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users