Where does cftmon.exe come from if not from MS Office?

[Ro]

Where does ctfmon.exe come from (if not from MS Office)?

I don't have MS Office installed on my WinXP computer yet I still
constantly get requests by cftmon.exe to run at startup.

Doing a search, I find cftmon in two places:
- C:\i386\cftmon.exe
- C:\WINDOWS\System32\cftmon.exe

I read the MS article on removing cftmon.exe but it assumes MS Office is
installed.
http://support.microsoft.com/default.aspx?scid=kb;EN-US;q282599

My anti-virus never complained about ctfmon so I presume that's working.

Can ctfmon come from some other Microsoft program other than Microsoft
Office?

 

[Bob Buckland ?:-\)]

Hi Ro,

It's a part of MS Windows XP as well as provided in MS Office products. What languages and alternate input devices (microphone,
inking, etc) do you have installed?

============
Where does ctfmon.exe come from (if not from MS Office)?

I don't have MS Office installed on my WinXP computer yet I still
constantly get requests by cftmon.exe to run at startup.

Doing a search, I find cftmon in two places:
- C:\i386\cftmon.exe
- C:\WINDOWS\System32\cftmon.exe

I read the MS article on removing cftmon.exe but it assumes MS Office is
installed.
http://support.microsoft.com/default.aspx?scid=kb;EN-US;q282599

My anti-virus never complained about ctfmon so I presume that's working.

Can ctfmon come from some other Microsoft program other than Microsoft
Office?>>
--

Bob Buckland ?
MS Office System Products MVP

*Courtesy is not expensive and can pay big dividends*

 

[Tom Willett]

You say: cftmon.exe
The MS file is ctfmon.exe
Is that a typo?

Or: http://www.sophos.com/security/analyses/trojdelivea.html


| Where does ctfmon.exe come from (if not from MS Office)?
|
| I don't have MS Office installed on my WinXP computer yet I still
| constantly get requests by cftmon.exe to run at startup.
|
| Doing a search, I find cftmon in two places:
| - C:\i386\cftmon.exe
| - C:\WINDOWS\System32\cftmon.exe
|
| I read the MS article on removing cftmon.exe but it assumes MS Office is
| installed.
| http://support.microsoft.com/default.aspx?scid=kb;EN-US;q282599
|
| My anti-virus never complained about ctfmon so I presume that's working.
|
| Can ctfmon come from some other Microsoft program other than Microsoft
| Office?

 

[Wesley Vogel]

CTFMON.EX_ (the compressed version of ctfmon.exe) is in the \I386 folder on
both XP Pro and Home CDs.

ctfmon.exe
http://support.microsoft.com/dllhelp/?dlltype=file&l=55&alpha=ctfmon.exe&S=1&x=12&y=6

cFTmon.exe is added by the Troj/Delbot-B TROJAN/IRC backdoor.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In