Computing.Net - File safe or not

Subject: File safe or not

Original Message

Name: kam
Date: March 31, 2008 at 14:29:51 Pacific
Subject: File safe or not
OS: XP PROF
CPU/Ram: 256Mb
Model/Manufacturer: AMD

Comment:

Can anyone help me out on this file pls.
I keep getting this file back in my HJT log.
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
I searched google for this and some of the sites says its a varient pest. If it is a bad file can you pls tell me how to delet it.
Any help would be greatful.
Thanks in advance.
Can nayone pls tell if my computer is infected. Log from Hijackthis as follows
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:59:19, on 26/01/2008
Platform: Windows XP SP2 WinNT 5.

Report Offensive Message For Removal

Response Number 1

Name: Cuffy
Date: March 31, 2008 at 14:36:15 Pacific
Subject: File safe or not

Reply: (edit)

ctfmon.exe Windows process - What is it?When you run a Microsoft Office XP program, the file Ctfmon.exe (Ctfmon) runs in the background, even after you quit all Office programs. ...
www.neuber.com/taskmanager/process/ctfmon.exe.html - 105k - Cached - Similar pages
I suggest you leave it alone!

Report Offensive Follow Up For Removal

Response Number 2

Name: btk1w1
Date: March 31, 2008 at 22:22:08 Pacific
Subject: File safe or not

Reply: (edit)

Hi kam,
Cuffy is correct, if you aren't 100% sure the file flagged is malware it is best left alone. Especially if it appears as system file which it does.
You obviously do have something amiss with your pc or you wouldn't be here.
There are a couple of ways you can determine if the file is malware or not.
1) Submit the entire HJT log for analysis here:
Click me to go to automated logfile analysis www.hijackthis.de
2) If there are suspect entries in the analysis you can upload the individual files for analysis here:
Malware file scanner provided by jotti.org
There are alot of malware out there that disguise themselves as legitimate operating system files but it pays to be 100% positive about tampering with them.
If you find that there is an infection, note down the name of it and post back and let us know.
You can also try a couple of free scanners to try and clean them out. One of my favourites is superantispyware, it is very efficient.
Also could you let us know what AV program you use and what you have tried.

Report Offensive Follow Up For Removal

Response Number 3

Name: kam
Date: April 1, 2008 at 11:46:54 Pacific
Subject: File safe or not

Reply: (edit)

Hi Cuffy and btk1w1
Thank you for your reply guys.
I am using nod32 and done scan with SuperAntiSpywre.
Also done scan with HJT log all came back as clear.
I will leave the file alone for now and see how things workout.
Thanks for the help once again.
Can nayone pls tell if my computer is infected. Log from Hijackthis as follows
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:59:19, on 26/01/2008
Platform: Windows XP SP2 WinNT 5.

Report Offensive Follow Up For Removal