Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
I recently ran Hijackthis after a trojan infection and in the scan this came up and comes back after repeated removal and reboots. IT reads
'04-HKCU\..\Run:[ctfmon.exe]ctfmon.exe'
Thanks in advance for any help

Process File: ctfmon or ctfmon.exe
Process Name: Alternative User Input Services
Description: A service that handles the Alternative User Input Text Processor (TIP) and the Microsoft Office Language Bar. It provides text input support for speech recognition, handwriting recognition, keyboard, translation, and other alternative user input technologies.
Company: Microsoft Corp.
System Process: Yes
Security Risk ( Virus/Trojan/Worm/Adware/Spyware ): No
Common Errors: N/A
KTTDThough I walk through the valley of Microsoft, I shall fear no OS for skills are with me

This file is impossible to remove even with Microsoft's Instructions.
I just finally disabled mine this way:
Hit ctl alt delete and bring up task manager.
Find ctfmon.exe and disable it...
Then search hardrive for ctfmon.exe
I found 3, one in system 32, one in service pack files and one in prefetch.
I deleted the one in prefetch..
I renamed the other two....
You will immediately get a prompt to put the xp disk back in to reinstall altered system files. I canceled that and rebooted.
Now ctfmon is gone finally.....my system picked up some speed in exchange.
Hope that helped....but dont recommend you do it unless you know what you are doing.
>"In my next life, I am going to have more memory installed"

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |