Is ctfmon.exe a trojan or a legitmate process?

Question

There is a filed called "ctfmon.exe" in the startup tab of the System Configuration Utility. Everytime I uncheck it, it will show up as 'checked' again after a reboot. I know it activates the Alternative User Input Text Input Processor (TIP) and the Microsoft Office Language Bar, however I don't have Microsoft Office installed - I only have MS Word installed from a MS Works disc. I have read that this 'ctfmon.exe' file could also be a trojan. How can be sure this file is legit and not a trojan?

Answer 1

Ctfmon.exe is part of Microsoft Office XP monitors the active windows and provides text input service support for speech recognition, handwriting recognition, keyboard, translation, and other alternative user input technologies.

When you run a Microsoft Office XP program, the file Ctfmon.exe (Ctfmon) runs in the background, even after you quit all Office programs.

Location: If you have office installed XP, 2003 and the file “ctfmon.exe” file is located in the folder C:\Windows\System32.
Then it is most likely the real thing.

In most cases if it is located somewhere else on your computer then the ctfmon.exe is a virus, spy-ware, Trojan or worm!

* Mind you either way - the ctfmon.exe uses a significant amount of resources on your system. A performance gain can be yours if you disable it. Keep in mind, Microsoft does not recommend this though.

Links below is Microsoft tech support and answers regarding disable it from running.

I would also consider running a online virus scan to better verify any other possible problems with viruses, spyware, and a like.

* Try Online BitDefender to help remove your concerns... Free to use and will remove what ever it finds for free!

http://www.bitdefender.com/scan8/ie.html

Answer 2

Depends. It could be a virus.
more details from
ctfmon.exe Windows process - What is it?
Ctfmon.exe monitors the active windows and provides text input service support ... See How to uninstall CTFMON.EXE ... other cases, ctfmon.exe is a virus, ...
www.neuber.com/taskmanager/process/ctfmon.exe.html - 86
Para two : Run any antivirus progrm to be on safe side.

Answer 3

ctfmon.exe is totally legit. It is the result of running any form of Microsoft Office. The process will run during, and after running any office program.