CTF Loader

[Loveembirds]

I'm getting a very annoying window popping up as follows :
Data Execution Prevention Microsoft windows CTF loader that's says to
help protect computer windows has closed this program.
What the heck and how do I fix this ?

this is after downloading IE 8 , if that makes a difference?

 

[Tim Meddick]

First, make sure the file is not infected by a virus / malware by scanning it with
your anti-virus software.

After becoming confident the file is not infected - Make DEP (Data Execution
Prevention) ignore the file CTFMON.EXE.

Go to "My Computer" and right-click on it and choose 'Properties' to bring up the
'System' control panel.

Then, click on the 'Advanced' tab and click on the 'Settings' button in the
'Performance' section (top).

When the 'Performance Options' box opens, click on the "Data Execution Prevention"
tab along the top.

Change the 'radio' button from "Turn on DEP for all" programs..." to "Turn on DEP
for all" programs and services except for those I select" (the lower option).

Then, click on the "ADD" button to 'browse' to the program :

C:\WINDOWS\system32\ctfmon.exe

....click on [ok] to confirm you want to add this program to the list.

Then, click on [ok] on all dialog boxes to save and exit.

This will disable Data Execution Prevention from reporting errors on this program.

==

Cheers, Tim Meddick, Peckham, London.

 

[PA Bear [MS MVP]]

Uninstall that older version of Google Toolbar or Desktop.
--
IE-specific newsgroup:
news://msnews.microsoft.com/microsoft.public.internetexplorer.general

~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Client - since 2002

 

[Loveembirds]

Robear,
I don't have google toolbar and wasn't quite sure what you meant by
unistalling the older version of the dekstop, dunno how to go about that.
Tim, I didn't know how to scan the file specifically for a virus but I ran
my AVAST scanner and it didn't pick up on anything.
However, just checking around, I went to msconfig and found ctfmon in my
start up stuff. I unchecked it and the problem seems gone, for now.
I also went to bleeping computer and checked out " ctfmon" and seems most
choices led to it possibly being a trojan.
I'm now downloading DrWebCureIT and will go from there, " IF" it will
finish downloading, that is. I had tried it earlier before unchecking that
ctfmon in start up and it would not finish. My computer had slowed to a
crawl, I seriously suspect a virus here .
If you guys have any futher input, I'll be glad to listen.

Thanks much !

First, make sure the file is not infected by a virus / malware by scanning it with
your anti-virus software.

After becoming confident the file is not infected - Make DEP (Data Execution
Prevention) ignore the file CTFMON.EXE.

Go to "My Computer" and right-click on it and choose 'Properties' to bring up the
'System' control panel.

Then, click on the 'Advanced' tab and click on the 'Settings' button in the
'Performance' section (top).

When the 'Performance Options' box opens, click on the "Data Execution Prevention"
tab along the top.

Change the 'radio' button from "Turn on DEP for all" programs..." to "Turn on DEP
for all" programs and services except for those I select" (the lower option).

Then, click on the "ADD" button to 'browse' to the program :

C:\WINDOWS\system32\ctfmon.exe

....click on [ok] to confirm you want to add this program to the list.

Then, click on [ok] on all dialog boxes to save and exit.

This will disable Data Execution Prevention from reporting errors on this program.

==

Cheers, Tim Meddick, Peckham, London.

I'm getting a very annoying window popping up as follows :
Data Execution Prevention Microsoft windows CTF loader that's says to
help protect computer windows has closed this program.
What the heck and how do I fix this ?

this is after downloading IE 8 , if that makes a difference?

 

[Tim Meddick]

Unfortunately it's gone because you have decided to stop your CTF Loader.

*The CTF Loader [ctfmon.exe] activates the Alternative User Input Text Input
Processor (TIP) and the Microsoft Office Language Bar.

*Ctfmon.exe monitors the active windows and provides text input service support for
speech recognition, handwriting recognition, keyboard, translation, and other
alternative user input technologies.

Stopping ctfmon.exe from loading could possible cause problems in some office
applications and especially if you use alternative input, text recognition or
speech-to-text software.

Again, until you find the real reason for the cause (which you may never do) I advise
you to simply add it to the DEP ignore list as I described in my earlier post, and
re-enable it in msconfig.exe



*Quoted from Microsoft Help and Support pages "Frequently asked questions about
Ctfmon.exe"
http://support.microsoft.com/kb/282599

==

Cheers, Tim Meddick, Peckham, London.

Robear,
I don't have google toolbar and wasn't quite sure what you meant by
unistalling the older version of the dekstop, dunno how to go about that.
Tim, I didn't know how to scan the file specifically for a virus but I ran
my AVAST scanner and it didn't pick up on anything.
However, just checking around, I went to msconfig and found ctfmon in my
start up stuff. I unchecked it and the problem seems gone, for now.
I also went to bleeping computer and checked out " ctfmon" and seems most
choices led to it possibly being a trojan.
I'm now downloading DrWebCureIT and will go from there, " IF" it will
finish downloading, that is. I had tried it earlier before unchecking that
ctfmon in start up and it would not finish. My computer had slowed to a
crawl, I seriously suspect a virus here .
If you guys have any futher input, I'll be glad to listen.

Thanks much !

First, make sure the file is not infected by a virus / malware by scanning it with
your anti-virus software.

After becoming confident the file is not infected - Make DEP (Data Execution
Prevention) ignore the file CTFMON.EXE.

Go to "My Computer" and right-click on it and choose 'Properties' to bring up the
'System' control panel.

Then, click on the 'Advanced' tab and click on the 'Settings' button in the
'Performance' section (top).

When the 'Performance Options' box opens, click on the "Data Execution Prevention"
tab along the top.

Change the 'radio' button from "Turn on DEP for all" programs..." to "Turn on
DEP
for all" programs and services except for those I select" (the lower option).

Then, click on the "ADD" button to 'browse' to the program :

C:\WINDOWS\system32\ctfmon.exe

....click on [ok] to confirm you want to add this program to the list.

Then, click on [ok] on all dialog boxes to save and exit.

This will disable Data Execution Prevention from reporting errors on this program.

==

Cheers, Tim Meddick, Peckham, London.

I'm getting a very annoying window popping up as follows :
Data Execution Prevention Microsoft windows CTF loader that's says to
help protect computer windows has closed this program.
What the heck and how do I fix this ?

this is after downloading IE 8 , if that makes a difference?

 

[Loveembirds]

ok, thanks again Tim. I've re-enabled it in misconfig then went to do what
you said per adding it to the DEP ignore list.
I never got an actual " browse" window but after "Add" I got an "open "
window where I copied and pasted C:\WINDOWS\system32\ctfmon.exe into the "
file name" area , is this correct ?
I got a but leary when I got a warning that if I proceeded that "
disabling may expose my system to unauthorized access " .
Is this a normal not to worry about warning ?

Per virus checking :

I'm still trying and still can't get DrWebCureIt to download yet-dial up
issues I suppose but would like to get it to work to be sure there's not a
virus , trojan or whatever lurking in this machine that perhaps Avast is not
picking up on.

Unfortunately it's gone because you have decided to stop your CTF Loader.

*The CTF Loader [ctfmon.exe] activates the Alternative User Input Text Input
Processor (TIP) and the Microsoft Office Language Bar.

*Ctfmon.exe monitors the active windows and provides text input service support for
speech recognition, handwriting recognition, keyboard, translation, and other
alternative user input technologies.

Stopping ctfmon.exe from loading could possible cause problems in some office
applications and especially if you use alternative input, text recognition or
speech-to-text software.

Again, until you find the real reason for the cause (which you may never do) I advise
you to simply add it to the DEP ignore list as I described in my earlier post, and
re-enable it in msconfig.exe



*Quoted from Microsoft Help and Support pages "Frequently asked questions about
Ctfmon.exe"
http://support.microsoft.com/kb/282599

==

Cheers, Tim Meddick, Peckham, London.

Robear,
I don't have google toolbar and wasn't quite sure what you meant by
unistalling the older version of the dekstop, dunno how to go about that.
Tim, I didn't know how to scan the file specifically for a virus but I ran
my AVAST scanner and it didn't pick up on anything.
However, just checking around, I went to msconfig and found ctfmon in my
start up stuff. I unchecked it and the problem seems gone, for now.
I also went to bleeping computer and checked out " ctfmon" and seems most
choices led to it possibly being a trojan.
I'm now downloading DrWebCureIT and will go from there, " IF" it will
finish downloading, that is. I had tried it earlier before unchecking that
ctfmon in start up and it would not finish. My computer had slowed to a
crawl, I seriously suspect a virus here .
If you guys have any futher input, I'll be glad to listen.

Thanks much !

First, make sure the file is not infected by a virus / malware by scanning it with
your anti-virus software.

After becoming confident the file is not infected - Make DEP (Data Execution
Prevention) ignore the file CTFMON.EXE.

Go to "My Computer" and right-click on it and choose 'Properties' to bring up the
'System' control panel.

Then, click on the 'Advanced' tab and click on the 'Settings' button in the
'Performance' section (top).

When the 'Performance Options' box opens, click on the "Data Execution Prevention"
tab along the top.

Change the 'radio' button from "Turn on DEP for all" programs..." to "Turn on
DEP
for all" programs and services except for those I select" (the lower option).

Then, click on the "ADD" button to 'browse' to the program :

C:\WINDOWS\system32\ctfmon.exe

....click on [ok] to confirm you want to add this program to the list.

Then, click on [ok] on all dialog boxes to save and exit.

This will disable Data Execution Prevention from reporting errors on this program.

==

Cheers, Tim Meddick, Peckham, London.




I'm getting a very annoying window popping up as follows :
Data Execution Prevention Microsoft windows CTF loader that's says to
help protect computer windows has closed this program.
What the heck and how do I fix this ?

this is after downloading IE 8 , if that makes a difference?

 

[Jim]

Just looked at DrWeb - I wouldn`t use it .

ok, thanks again Tim. I've re-enabled it in misconfig then went to do what
you said per adding it to the DEP ignore list.
I never got an actual " browse" window but after "Add" I got an "open "
window where I copied and pasted C:\WINDOWS\system32\ctfmon.exe into the "
file name" area , is this correct ?
I got a but leary when I got a warning that if I proceeded that "
disabling may expose my system to unauthorized access " .
Is this a normal not to worry about warning ?

Per virus checking :

I'm still trying and still can't get DrWebCureIt to download yet-dial up
issues I suppose but would like to get it to work to be sure there's not a
virus , trojan or whatever lurking in this machine that perhaps Avast is not
picking up on.

Unfortunately it's gone because you have decided to stop your CTF Loader.

*The CTF Loader [ctfmon.exe] activates the Alternative User Input Text Input
Processor (TIP) and the Microsoft Office Language Bar.

*Ctfmon.exe monitors the active windows and provides text input service support for
speech recognition, handwriting recognition, keyboard, translation, and other
alternative user input technologies.

Stopping ctfmon.exe from loading could possible cause problems in some office
applications and especially if you use alternative input, text recognition or
speech-to-text software.

Again, until you find the real reason for the cause (which you may never do) I advise
you to simply add it to the DEP ignore list as I described in my earlier post, and
re-enable it in msconfig.exe



*Quoted from Microsoft Help and Support pages "Frequently asked questions about
Ctfmon.exe"
http://support.microsoft.com/kb/282599

==

Cheers, Tim Meddick, Peckham, London.

Robear,
I don't have google toolbar and wasn't quite sure what you meant by
unistalling the older version of the dekstop, dunno how to go about that.
Tim, I didn't know how to scan the file specifically for a virus but I ran
my AVAST scanner and it didn't pick up on anything.
However, just checking around, I went to msconfig and found ctfmon in my
start up stuff. I unchecked it and the problem seems gone, for now.
I also went to bleeping computer and checked out " ctfmon" and seems most
choices led to it possibly being a trojan.
I'm now downloading DrWebCureIT and will go from there, " IF" it will
finish downloading, that is. I had tried it earlier before unchecking that
ctfmon in start up and it would not finish. My computer had slowed to a
crawl, I seriously suspect a virus here .
If you guys have any futher input, I'll be glad to listen.

Thanks much !

:

First, make sure the file is not infected by a virus / malware by scanning it with
your anti-virus software.

After becoming confident the file is not infected - Make DEP (Data Execution
Prevention) ignore the file CTFMON.EXE.

Go to "My Computer" and right-click on it and choose 'Properties' to bring up the
'System' control panel.

Then, click on the 'Advanced' tab and click on the 'Settings' button in the
'Performance' section (top).

When the 'Performance Options' box opens, click on the "Data Execution Prevention"
tab along the top.

Change the 'radio' button from "Turn on DEP for all" programs..." to "Turn on
DEP
for all" programs and services except for those I select" (the lower option).

Then, click on the "ADD" button to 'browse' to the program :

C:\WINDOWS\system32\ctfmon.exe

....click on [ok] to confirm you want to add this program to the list.

Then, click on [ok] on all dialog boxes to save and exit.

This will disable Data Execution Prevention from reporting errors on this program.

==

Cheers, Tim Meddick, Peckham, London.




I'm getting a very annoying window popping up as follows :
Data Execution Prevention Microsoft windows CTF loader that's says to
help protect computer windows has closed this program.
What the heck and how do I fix this ?

this is after downloading IE 8 , if that makes a difference?

 

[Tim Meddick]

As long as it's now displayed in the 'white space' next to the 'Add' button under
'Data Execution Prevention' with a 'checked' box next to it's name, then yes, that's
all fine.

The message telling you of possible "may expose my system to unauthorized access " IS
normal.

All that it means is that "'Data Execution Prevention" is no longer "watching" the
'ctfmon.exe' program (as you have now added it to an 'ignore' list).

If it were a virus that you had done this to - it could theoretically, get away with
murder...

But as 'ctfmon.exe' is a trusted Microsoft executable, integral to the Windows OS,
then there is not too much worry.

BTW - The 'open' window IS the 'browse' window as all the term 'browse' indicates is
that you are presented with a small utility within a program or service, that enables
you to 'browse' through a list of files and / or folders on your drive to specify
either a file or a folder to that program or service.

Although there is a 'Browse for folder' & a 'Browse for file' dialogue (with those
titles), I still include the "Open..." and "Save As..." dialogs as 'browse' .

Finally, I would recommend that you download, install and run the [free] program -
"MalwareBytes" - on your system in addition to your "Avast" software (run the 'full
scan' - not the 'quick').

If you 'read up' on MalwareBytes, you will find time and again, that it picks up on
threats and infections that have found their way onto people's PCs - and is able to
purge their systems of them.

Download 'MalwareBytes - Anti Malware' from :

http://www.malwarebytes.org/mbam/program/mbam-setup.exe


==

Cheers, Tim Meddick, Peckham, London.

ok, thanks again Tim. I've re-enabled it in misconfig then went to do what
you said per adding it to the DEP ignore list.
I never got an actual " browse" window but after "Add" I got an "open "
window where I copied and pasted C:\WINDOWS\system32\ctfmon.exe into the "
file name" area , is this correct ?
I got a but leary when I got a warning that if I proceeded that "
disabling may expose my system to unauthorized access " .
Is this a normal not to worry about warning ?

Per virus checking :

I'm still trying and still can't get DrWebCureIt to download yet-dial up
issues I suppose but would like to get it to work to be sure there's not a
virus , trojan or whatever lurking in this machine that perhaps Avast is not
picking up on.

Unfortunately it's gone because you have decided to stop your CTF Loader.

*The CTF Loader [ctfmon.exe] activates the Alternative User Input Text Input
Processor (TIP) and the Microsoft Office Language Bar.

*Ctfmon.exe monitors the active windows and provides text input service support
for
speech recognition, handwriting recognition, keyboard, translation, and other
alternative user input technologies.

Stopping ctfmon.exe from loading could possible cause problems in some office
applications and especially if you use alternative input, text recognition or
speech-to-text software.

Again, until you find the real reason for the cause (which you may never do) I
advise
you to simply add it to the DEP ignore list as I described in my earlier post, and
re-enable it in msconfig.exe



*Quoted from Microsoft Help and Support pages "Frequently asked questions about
Ctfmon.exe"
http://support.microsoft.com/kb/282599

==

Cheers, Tim Meddick, Peckham, London.

Robear,
I don't have google toolbar and wasn't quite sure what you meant by
unistalling the older version of the dekstop, dunno how to go about that.
Tim, I didn't know how to scan the file specifically for a virus but I ran
my AVAST scanner and it didn't pick up on anything.
However, just checking around, I went to msconfig and found ctfmon in my
start up stuff. I unchecked it and the problem seems gone, for now.
I also went to bleeping computer and checked out " ctfmon" and seems most
choices led to it possibly being a trojan.
I'm now downloading DrWebCureIT and will go from there, " IF" it will
finish downloading, that is. I had tried it earlier before unchecking that
ctfmon in start up and it would not finish. My computer had slowed to a
crawl, I seriously suspect a virus here .
If you guys have any futher input, I'll be glad to listen.

Thanks much !

:

First, make sure the file is not infected by a virus / malware by scanning it
with
your anti-virus software.

After becoming confident the file is not infected - Make DEP (Data Execution
Prevention) ignore the file CTFMON.EXE.

Go to "My Computer" and right-click on it and choose 'Properties' to bring up
the
'System' control panel.

Then, click on the 'Advanced' tab and click on the 'Settings' button in the
'Performance' section (top).

When the 'Performance Options' box opens, click on the "Data Execution
Prevention"
tab along the top.

Change the 'radio' button from "Turn on DEP for all" programs..." to "Turn on
DEP
for all" programs and services except for those I select" (the lower option).

Then, click on the "ADD" button to 'browse' to the program :

C:\WINDOWS\system32\ctfmon.exe

....click on [ok] to confirm you want to add this program to the list.

Then, click on [ok] on all dialog boxes to save and exit.

This will disable Data Execution Prevention from reporting errors on this
program.

==

Cheers, Tim Meddick, Peckham, London.




I'm getting a very annoying window popping up as follows :
Data Execution Prevention Microsoft windows CTF loader that's says to
help protect computer windows has closed this program.
What the heck and how do I fix this ?

this is after downloading IE 8 , if that makes a difference?

 

[Tim Meddick]

I messed up on what I was trying to say, as I got distracted....

If you 'read up' on MalwareBytes, you will find time and again, that it picks up on
threats and infections that have found their way onto people's PCs THAT OTHER
ANTI-VIRUS SOFTWARE HAVE MISSED - and is able to purge their systems of them.

Download 'MalwareBytes - Anti Malware' from :

http://www.malwarebytes.org/mbam/program/mbam-setup.exe


==

Cheers, Tim Meddick, Peckham, London.

As long as it's now displayed in the 'white space' next to the 'Add' button under
'Data Execution Prevention' with a 'checked' box next to it's name, then yes,
that's all fine.

The message telling you of possible "may expose my system to unauthorized access "
IS normal.

All that it means is that "'Data Execution Prevention" is no longer "watching" the
'ctfmon.exe' program (as you have now added it to an 'ignore' list).

If it were a virus that you had done this to - it could theoretically, get away
with murder...

But as 'ctfmon.exe' is a trusted Microsoft executable, integral to the Windows OS,
then there is not too much worry.

BTW - The 'open' window IS the 'browse' window as all the term 'browse' indicates
is that you are presented with a small utility within a program or service, that
enables you to 'browse' through a list of files and / or folders on your drive
to specify either a file or a folder to that program or service.

Although there is a 'Browse for folder' & a 'Browse for file' dialogue (with those
titles), I still include the "Open..." and "Save As..." dialogs as 'browse' .

Finally, I would recommend that you download, install and run the [free] program -
"MalwareBytes" - on your system in addition to your "Avast" software (run the 'full
scan' - not the 'quick').

If you 'read up' on MalwareBytes, you will find time and again, that it picks up on
threats and infections that have found their way onto people's PCs - and is able to
purge their systems of them.

Download 'MalwareBytes - Anti Malware' from :

http://www.malwarebytes.org/mbam/program/mbam-setup.exe


==

Cheers, Tim Meddick, Peckham, London.

ok, thanks again Tim. I've re-enabled it in misconfig then went to do what
you said per adding it to the DEP ignore list.
I never got an actual " browse" window but after "Add" I got an "open "
window where I copied and pasted C:\WINDOWS\system32\ctfmon.exe into the "
file name" area , is this correct ?
I got a but leary when I got a warning that if I proceeded that "
disabling may expose my system to unauthorized access " .
Is this a normal not to worry about warning ?

Per virus checking :

I'm still trying and still can't get DrWebCureIt to download yet-dial up
issues I suppose but would like to get it to work to be sure there's not a
virus , trojan or whatever lurking in this machine that perhaps Avast is not
picking up on.

Unfortunately it's gone because you have decided to stop your CTF Loader.

*The CTF Loader [ctfmon.exe] activates the Alternative User Input Text Input
Processor (TIP) and the Microsoft Office Language Bar.

*Ctfmon.exe monitors the active windows and provides text input service support
for
speech recognition, handwriting recognition, keyboard, translation, and other
alternative user input technologies.

Stopping ctfmon.exe from loading could possible cause problems in some office
applications and especially if you use alternative input, text recognition or
speech-to-text software.

Again, until you find the real reason for the cause (which you may never do) I
advise
you to simply add it to the DEP ignore list as I described in my earlier post,
and
re-enable it in msconfig.exe



*Quoted from Microsoft Help and Support pages "Frequently asked questions about
Ctfmon.exe"
http://support.microsoft.com/kb/282599

==

Cheers, Tim Meddick, Peckham, London.





Robear,
I don't have google toolbar and wasn't quite sure what you meant by
unistalling the older version of the dekstop, dunno how to go about that.
Tim, I didn't know how to scan the file specifically for a virus but I ran
my AVAST scanner and it didn't pick up on anything.
However, just checking around, I went to msconfig and found ctfmon in my
start up stuff. I unchecked it and the problem seems gone, for now.
I also went to bleeping computer and checked out " ctfmon" and seems most
choices led to it possibly being a trojan.
I'm now downloading DrWebCureIT and will go from there, " IF" it will
finish downloading, that is. I had tried it earlier before unchecking that
ctfmon in start up and it would not finish. My computer had slowed to a
crawl, I seriously suspect a virus here .
If you guys have any futher input, I'll be glad to listen.

Thanks much !

:

First, make sure the file is not infected by a virus / malware by scanning it
with
your anti-virus software.

After becoming confident the file is not infected - Make DEP (Data Execution
Prevention) ignore the file CTFMON.EXE.

Go to "My Computer" and right-click on it and choose 'Properties' to bring up
the
'System' control panel.

Then, click on the 'Advanced' tab and click on the 'Settings' button in the
'Performance' section (top).

When the 'Performance Options' box opens, click on the "Data Execution
Prevention"
tab along the top.

Change the 'radio' button from "Turn on DEP for all" programs..." to "Turn
on
DEP
for all" programs and services except for those I select" (the lower option).

Then, click on the "ADD" button to 'browse' to the program :

C:\WINDOWS\system32\ctfmon.exe

....click on [ok] to confirm you want to add this program to the list.

Then, click on [ok] on all dialog boxes to save and exit.

This will disable Data Execution Prevention from reporting errors on this
program.

==

Cheers, Tim Meddick, Peckham, London.




I'm getting a very annoying window popping up as follows :
Data Execution Prevention Microsoft windows CTF loader that's says to
help protect computer windows has closed this program.
What the heck and how do I fix this ?

this is after downloading IE 8 , if that makes a difference?

 

[Loveembirds]

Thank you again Tim and for the clarification, you've been a tremendous help.
Yes, I use MBAM and also SAS .
Haven't had a problem yesterday or today with the CTF windows showing up
and I've yet to go and make the DEP ignore the file, I only went and
rechecked it back in my start up via msconfig. Maybe unchecking and
rechecking did the trick, just not sure ?

As long as it's now displayed in the 'white space' next to the 'Add' button under
'Data Execution Prevention' with a 'checked' box next to it's name, then yes, that's
all fine.

The message telling you of possible "may expose my system to unauthorized access " IS
normal.

All that it means is that "'Data Execution Prevention" is no longer "watching" the
'ctfmon.exe' program (as you have now added it to an 'ignore' list).

If it were a virus that you had done this to - it could theoretically, get away with
murder...

But as 'ctfmon.exe' is a trusted Microsoft executable, integral to the Windows OS,
then there is not too much worry.

BTW - The 'open' window IS the 'browse' window as all the term 'browse' indicates is
that you are presented with a small utility within a program or service, that enables
you to 'browse' through a list of files and / or folders on your drive to specify
either a file or a folder to that program or service.

Although there is a 'Browse for folder' & a 'Browse for file' dialogue (with those
titles), I still include the "Open..." and "Save As..." dialogs as 'browse' .

Finally, I would recommend that you download, install and run the [free] program -
"MalwareBytes" - on your system in addition to your "Avast" software (run the 'full
scan' - not the 'quick').

If you 'read up' on MalwareBytes, you will find time and again, that it picks up on
threats and infections that have found their way onto people's PCs - and is able to
purge their systems of them.

Download 'MalwareBytes - Anti Malware' from :

http://www.malwarebytes.org/mbam/program/mbam-setup.exe


==

Cheers, Tim Meddick, Peckham, London.

ok, thanks again Tim. I've re-enabled it in misconfig then went to do what
you said per adding it to the DEP ignore list.
I never got an actual " browse" window but after "Add" I got an "open "
window where I copied and pasted C:\WINDOWS\system32\ctfmon.exe into the "
file name" area , is this correct ?
I got a but leary when I got a warning that if I proceeded that "
disabling may expose my system to unauthorized access " .
Is this a normal not to worry about warning ?

Per virus checking :

I'm still trying and still can't get DrWebCureIt to download yet-dial up
issues I suppose but would like to get it to work to be sure there's not a
virus , trojan or whatever lurking in this machine that perhaps Avast is not
picking up on.

Unfortunately it's gone because you have decided to stop your CTF Loader.

*The CTF Loader [ctfmon.exe] activates the Alternative User Input Text Input
Processor (TIP) and the Microsoft Office Language Bar.

*Ctfmon.exe monitors the active windows and provides text input service support
for
speech recognition, handwriting recognition, keyboard, translation, and other
alternative user input technologies.

Stopping ctfmon.exe from loading could possible cause problems in some office
applications and especially if you use alternative input, text recognition or
speech-to-text software.

Again, until you find the real reason for the cause (which you may never do) I
advise
you to simply add it to the DEP ignore list as I described in my earlier post, and
re-enable it in msconfig.exe



*Quoted from Microsoft Help and Support pages "Frequently asked questions about
Ctfmon.exe"
http://support.microsoft.com/kb/282599

==

Cheers, Tim Meddick, Peckham, London.





Robear,
I don't have google toolbar and wasn't quite sure what you meant by
unistalling the older version of the dekstop, dunno how to go about that.
Tim, I didn't know how to scan the file specifically for a virus but I ran
my AVAST scanner and it didn't pick up on anything.
However, just checking around, I went to msconfig and found ctfmon in my
start up stuff. I unchecked it and the problem seems gone, for now.
I also went to bleeping computer and checked out " ctfmon" and seems most
choices led to it possibly being a trojan.
I'm now downloading DrWebCureIT and will go from there, " IF" it will
finish downloading, that is. I had tried it earlier before unchecking that
ctfmon in start up and it would not finish. My computer had slowed to a
crawl, I seriously suspect a virus here .
If you guys have any futher input, I'll be glad to listen.

Thanks much !

:

First, make sure the file is not infected by a virus / malware by scanning it
with
your anti-virus software.

After becoming confident the file is not infected - Make DEP (Data Execution
Prevention) ignore the file CTFMON.EXE.

Go to "My Computer" and right-click on it and choose 'Properties' to bring up
the
'System' control panel.

Then, click on the 'Advanced' tab and click on the 'Settings' button in the
'Performance' section (top).

When the 'Performance Options' box opens, click on the "Data Execution
Prevention"
tab along the top.

Change the 'radio' button from "Turn on DEP for all" programs..." to "Turn on
DEP
for all" programs and services except for those I select" (the lower option).

Then, click on the "ADD" button to 'browse' to the program :

C:\WINDOWS\system32\ctfmon.exe

....click on [ok] to confirm you want to add this program to the list.

Then, click on [ok] on all dialog boxes to save and exit.

This will disable Data Execution Prevention from reporting errors on this
program.

==

Cheers, Tim Meddick, Peckham, London.




I'm getting a very annoying window popping up as follows :
Data Execution Prevention Microsoft windows CTF loader that's says to
help protect computer windows has closed this program.
What the heck and how do I fix this ?

this is after downloading IE 8 , if that makes a difference?

 

[Tim Meddick]

I have found, time and time again, that XP is like that - just starting to make
changes towards finding a solution, and suddenly you find it's fixed itself!

But, at least you know now what you should do to stop the error messages, should they
start again.

Forgive me if I have another theory (point of fact I didn't actually have an idea of
what was causing the error in the first place - only how to stop the messages while
you investigated further, however-) about this.

It may have been something as simple as the load-order, and 'unchecking' and
're-checking' ctfmon.exe in msconfig caused it to be loaded a bit later on - as maybe
before - it was causing a bottleneck where read-errors occurred.

This seems the most likely explanation to me, as I see this from time to time, on my
own PC.

==

As some parting advice, you should also run a chkdsk scan of the system drive, either
from the windows interface:-

Right-click on drive [c:] and choose 'Properties', then click on the 'Tools' tab and
then on the 'Error-checking' - 'Check Now...' button. Check the top box
'Automatically fix file-system errors' then click on [yes] when asked if you want the
scan to run on the next boot.

Or, from the 'Command Prompt': -

Choose 'Start Menu' > 'All Programs' > 'Accessories' > 'Command Prompt' then type at
the prompt :

chkdsk c: /f

....then, on being asked if you want the check to be run on the next boot, type [y]
and then press [enter].

....either way, chkdsk will run on the next boot to check the file-system for any
errors and fix them.

This should be done on a regular basis, as file-system errors crop up regularly and,
if left to build up, can cause data corruption that can stop windows in it's tracks.

==

Cheers, Tim Meddick, Peckham, London.

Thank you again Tim and for the clarification, you've been a tremendous help.
Yes, I use MBAM and also SAS .
Haven't had a problem yesterday or today with the CTF windows showing up
and I've yet to go and make the DEP ignore the file, I only went and
rechecked it back in my start up via msconfig. Maybe unchecking and
rechecking did the trick, just not sure ?

As long as it's now displayed in the 'white space' next to the 'Add' button under
'Data Execution Prevention' with a 'checked' box next to it's name, then yes,
that's
all fine.

The message telling you of possible "may expose my system to unauthorized access "
IS
normal.

All that it means is that "'Data Execution Prevention" is no longer "watching" the
'ctfmon.exe' program (as you have now added it to an 'ignore' list).

If it were a virus that you had done this to - it could theoretically, get away
with
murder...

But as 'ctfmon.exe' is a trusted Microsoft executable, integral to the Windows OS,
then there is not too much worry.

BTW - The 'open' window IS the 'browse' window as all the term 'browse' indicates
is
that you are presented with a small utility within a program or service, that
enables
you to 'browse' through a list of files and / or folders on your drive to
specify
either a file or a folder to that program or service.

Although there is a 'Browse for folder' & a 'Browse for file' dialogue (with those
titles), I still include the "Open..." and "Save As..." dialogs as 'browse' .

Finally, I would recommend that you download, install and run the [free] program -
"MalwareBytes" - on your system in addition to your "Avast" software (run the
'full
scan' - not the 'quick').

If you 'read up' on MalwareBytes, you will find time and again, that it picks up
on
threats and infections that have found their way onto people's PCs - and is able
to
purge their systems of them.

Download 'MalwareBytes - Anti Malware' from :

http://www.malwarebytes.org/mbam/program/mbam-setup.exe


==

Cheers, Tim Meddick, Peckham, London.

ok, thanks again Tim. I've re-enabled it in misconfig then went to do what
you said per adding it to the DEP ignore list.
I never got an actual " browse" window but after "Add" I got an "open "
window where I copied and pasted C:\WINDOWS\system32\ctfmon.exe into the "
file name" area , is this correct ?
I got a but leary when I got a warning that if I proceeded that "
disabling may expose my system to unauthorized access " .
Is this a normal not to worry about warning ?

Per virus checking :

I'm still trying and still can't get DrWebCureIt to download yet-dial up
issues I suppose but would like to get it to work to be sure there's not a
virus , trojan or whatever lurking in this machine that perhaps Avast is not
picking up on.

:

Unfortunately it's gone because you have decided to stop your CTF Loader.

*The CTF Loader [ctfmon.exe] activates the Alternative User Input Text Input
Processor (TIP) and the Microsoft Office Language Bar.

*Ctfmon.exe monitors the active windows and provides text input service support
for
speech recognition, handwriting recognition, keyboard, translation, and other
alternative user input technologies.

Stopping ctfmon.exe from loading could possible cause problems in some office
applications and especially if you use alternative input, text recognition or
speech-to-text software.

Again, until you find the real reason for the cause (which you may never do) I
advise
you to simply add it to the DEP ignore list as I described in my earlier post,
and
re-enable it in msconfig.exe



*Quoted from Microsoft Help and Support pages "Frequently asked questions
about
Ctfmon.exe"
http://support.microsoft.com/kb/282599

==

Cheers, Tim Meddick, Peckham, London.





Robear,
I don't have google toolbar and wasn't quite sure what you meant by
unistalling the older version of the dekstop, dunno how to go about that.
Tim, I didn't know how to scan the file specifically for a virus but I ran
my AVAST scanner and it didn't pick up on anything.
However, just checking around, I went to msconfig and found ctfmon in my
start up stuff. I unchecked it and the problem seems gone, for now.
I also went to bleeping computer and checked out " ctfmon" and seems most
choices led to it possibly being a trojan.
I'm now downloading DrWebCureIT and will go from there, " IF" it will
finish downloading, that is. I had tried it earlier before unchecking that
ctfmon in start up and it would not finish. My computer had slowed to a
crawl, I seriously suspect a virus here .
If you guys have any futher input, I'll be glad to listen.

Thanks much !

:

First, make sure the file is not infected by a virus / malware by scanning
it
with
your anti-virus software.

After becoming confident the file is not infected - Make DEP (Data Execution
Prevention) ignore the file CTFMON.EXE.

Go to "My Computer" and right-click on it and choose 'Properties' to bring
up
the
'System' control panel.

Then, click on the 'Advanced' tab and click on the 'Settings' button in the
'Performance' section (top).

When the 'Performance Options' box opens, click on the "Data Execution
Prevention"
tab along the top.

Change the 'radio' button from "Turn on DEP for all" programs..." to "Turn
on
DEP
for all" programs and services except for those I select" (the lower
option).

Then, click on the "ADD" button to 'browse' to the program :

C:\WINDOWS\system32\ctfmon.exe

....click on [ok] to confirm you want to add this program to the list.

Then, click on [ok] on all dialog boxes to save and exit.

This will disable Data Execution Prevention from reporting errors on this
program.

==

Cheers, Tim Meddick, Peckham, London.




I'm getting a very annoying window popping up as follows :
Data Execution Prevention Microsoft windows CTF loader that's says to
help protect computer windows has closed this program.
What the heck and how do I fix this ?

this is after downloading IE 8 , if that makes a difference?