
| Added by the RAIDYS TROJAN! Note - this should not be confused with the valid Office XP file, see here
|

| CTFMon is involved with the language/alternative input services in Office XP. Ctfmon.exe will continue to put itself back into MSConfig when you run the Office XP apps as long as the Text Services and Speech applets in the Control Panel are enabled. Not required if you don't need these features. For more info on ctfmon see CIADOOR-Jhere. Ctfmon can be disabled from Control Panel, Text & Speech Services. Note - the file will always be located in the System32 folder, if it is located elsewhere it will likely be a worm or trojan! Can cause problems with some other programs if left enabled - see CIADOOR-Jhere for such an example
|
 CLAUDIA HONIGSZTEJN
| SAFE
|
 Jeremy Buff
| It's safe.
|
 David Gonzalez
| It sure would help to know whether this System 32 item is necessary or not. Some people say it is, others say it isn't.
|
 appel
| safe
|
 Taylor
| A process connected to the microsoft office suite. As long as it is in the windows system 32 folder it is safe and should not be disabled. If it is in another folder it is most likely a trojan and should be deleted immediately. More information
|
 stef@n
| totaly safe_
|
 stef@N
| safe
|
 p-g-c
| Whether this is safe or not is still very unclear
|
 SuperFreak
| SAFE! Needed for some East-European language keyboard layout.
|
 gaga
| Ctfmon.exe activates the Alternative User Input Text Input Processor (TIP) and the Microsoft Office Language Bar.
This program is a non-essential system process, but should not be terminated unless suspected to be causing problems.
Note: ctfmon.execould also be a process which is registered as a trojan. This Trojan allows attackers to access your computer from remote locations, stealing passwords, Internet banking and personal data. This process is a security risk and should be removed from your system.
The ctfmon.exe file is located in the C:\Windows\System32 folder. In other cases, ctfmon.exe is a virus, spyware, trojan or worm!
More information
|
 db49
| Doesn't hurt anything that i can see, but mine is in the right folder, so who knows?
|
 Dianne Jenkins
| Activates when downloading IE7
|
 dbt
| Safe but can be off.
|

| required for language toolbar?
|
 Peter Verstegen
| As long as it listed in system 32 there is no cause for alarm.
Thus...leave it.
|
 DKByars
| I didn't recognize it and have been wondering what it was, not being a techie.
|
 Marcellus
| Ctfmon.exe is part of Microsoft Office XP monitors the active windows and provides text input service support for speech recognition, handwriting recognition, keyboard, translation, and other alternative user input technologies. It should be located here:
C:\Windows\System32
If not it can be virus, spyware, trojan or worm!
|
 arrie
| its cool
|
 Steve
| Never use it. So it was turned off and things run better. A waste of space, and time if not used all the time
|
 Felix
| Alternative User Input Text Input Processor for Office.
When you run a Microsoft Office XP program, the file Ctfmon.exe (Ctfmon) runs in the background, even after you quit all Office programs.
Ctfmon.exe monitors the active windows and provides text input service support for speech recognition, handwriting recognition, keyboard, translation, and other alternative user input technologies. More information
|
 kürşat
| I haven' got any office programs on my pc without openofficeorg. But it seems coming with when windows should be restart
|
 Hélio
| It`s not a virus, but it is dangerous for the performance of yor PC. Programs May Start, Quit, Lose, and Gain Focus Randomly.
"Step 1: Uninstall Alternative User Input"- MS Office,was sufficient for me. Maybe you don't need to remove this file. Because it`s not recommended if you want language options like me.
More information
|
 Eyes_and_Teeth
| Cyberlion's Startup Optimizer calls this program mal-ware. Text as follows:
Added by the RAIDYS Trojan! Note - this should not be confused with the valid Office XP file, see here (with a [link] to Microsoft.com product info site for ctfmon.exe )
For the record, I am *still* in the process of trying to eliminate this. I have "wiped" it repeatedly, but it still re-appears on start-up...
Wish me luck! More information
|
 DAVID FLAMEE
| i dont know what it is its a ctf loader but, what does that mean quick startup describes it as dangerous but does not explain why its a nuisance because it is constantly trying to startup so you need to be looking at your startup prog all the time and your taskmanager processes so you can disable it . I would like more detailed info regarding ctfmon.
|
 Shamble
| An essential component of windows XP operating system
|
 Foxylady559
| Ctfmon.exe is a vital part of Microsoft Windows XP. It should not be disabled as it is part of the setup needed by Microsoft for various programs.
|
 gaz
| not sure!! since finding this on my system, i have had problems with my dvd-rom, and scanner, driver path i.e registry have been corupted, not sure if this is the problem however. If anyone knows please let me know thanx.
|
 bigt1
| Spybot S&D says virus,spyware,malware or other resource hog. CoolWebSearch parasite related-hijacking to SlawSearch.com
|
 James
| system
|
 Minijit
| Toss up between those who say dangerous and safe.Have had it in C;\Windows\ sys.32 for a very long time and haven't had a problem yet. Just lucky ?
|
 qwe
| Alternative User Input Text Input Processor for Office
|
 Tim Warin
| This is an ebay sniper service and as such it usually needs to be running all the time.
|
 fourtyinches
| Go here: http://support.microsoft.com/kb/282599 More information
|
 Kat
| Its strange..I have 2 in my computer...I should only have one...
|
 Scalopus
| Ctfmon.exe es el archivo encargado de controlar las tecnologías de Entrada de usuario alternativa. Este archivo inicia el componente Barra de idiomas (en la bandeja del sistema) y sigue ejecutándose incluso después de cerrar un programa de Office XP. También se inicia cada vez que se inicia Windows y permanece en segundo plano, independientemente de si se inicia o no un programa de Office XP.
Ctfmon.exe está diseñado para continuar ejecutándose en segundo plano durante las sesiones de Windows después de haberse instalado los componentes de Entrada de usuario alternativa de Office XP. More information
|
 Chris Laurence
| will automatically reinstate itself if deleted
|
 Cameron Motes
| it's cool, but you need to know it's not a virus, because virus makers try to encrypt viruses into this file, it's one of the most easiest. and you should only have 1, delete both and restart your computer, and it will come back the one you need. I had the same problem or having 2 on one of my computers in my basement (I have like 60)
|
 lumpyjoe
| Ctfmon.exe monitors the active windows and provides text input service support for speech recognition, handwriting recognition, keyboard, translation, and other alternative user input technologies.
Removing the Ctfmon.exe might cause problematic behavior in your Office XP programs, so removing it is not recommended More information
|
 jimmy
| yea i have 2 also one in lower case and one in capps with both in sys 32 folder ?????????
|
 Jakab
| yeah, as stated above, definitely look at this site http://support.microsoft.com/kb/282599 More information
|

| System sound
|
 Kev
| If it is legitimate it should start up with the program it's attached to.
If you want to stop it (them) in your start up list, do the following :
START, Run, type in regsvr32 /u msimtf.dll and then regsvr32 /u msctf.dll
If you hit problems and need to replace them, change the /u to a /i (remember the spaces).
|
 Coop69
| I just completely crashed and reinstalled WinXP. I do not have any Office software installed or for that matter any software at all except Avast AV, ZoneAlarm, CCleaner, GlaryUtilities, Grisoft AVG Anti Rootkit/Spyware, Eraser, RegSeeker, Rootkit Hook Analyzer, Windows Defender, Foxit Reader, 7zip. And, I have installed IE7 and some other critical and not so critical updates from Microsoft. I have notest I do have the Text Services and Input languages on my taskbar which, must of come with the updates (probably IE7). Anyhow, the file is safe if it is in system32 folder and (I believe) in lower caps because, mine is (Not capitalized) and when right clicked/properties should read it is a Microsoft file. Remember, I just did an intire clean install of XP and installed Avast AV scanner before anything else. Never even surf the web until after.
|
 Coop69
| If your not using this service and would like to disable it. Go to Control Panel/Regional and Language Options/ click on the Language tab and then the -Details- button then at the bottom you'll see a Language Bar... button under the preferences title.
|

| Ok, is a valid Startup, run a full system scan in safe mode if your woried, For more help on Safe mode booting, www.google.com and type in how to - safe mode
|
 JAVIER
| IT IS HELPFULL WHEN USED SEVERAL LENGUAGES IN THE COMPUTER AS IT IS MY CASE. ONLY WE HAVE TO SURVEY THE CORRECT FUNCTION AND LOCATION TO AVOID THE SIMILAR TROJAN
|
 Bow Lisha
| Trustworthy as long the file is located in the \WINDOWS\system32 folder. The decision as to if you need to have it starting at boot up is another issue. That is based on user preference. More information
|
 SecurityEnforcer
| Ctfmon.exe monitors the active windows and provides text input service support for speech recognition, handwriting recognition, keyboard, translation, and other alternative user input technologies for OFFICE XP. You don't need this as this can be triggered if you need these features. Most of us don't need help when we write word docs. Remove it by following this link.
More information
|
 Omar Medina
| In My PC icon I double click any external usb drive and get error messages. When I insert my USb flash the auto play tells me if I want to run an "unknown application". I opened my USB flash in a Macintosh (OSX10.4) and reads several hidden files: an autorun.inf at the root and a folder called recycled (not recycler); into the recycled folder I found CTFMON.EXE hidden. The autorun tells to run CTFMON.EXE. Then it copies itself into your system. Then runs a valid ctfmon and the fakeone at the same time. I disabled the one in capps and have not get any errors or autoplay questions. Also, if you burn a CD or DVD the autorun and recycled folder will be copied as hidden files without your permission. I have been able to find these files only with my Mac where I can delete them. No antivirus or spyware remover has ever detected CTFMON.EXE as dangerous. But MyPC icon works correctly with this one disabled at startup. On 64-bit Vista CTFMON.EXE is also running as a 32bit application. If this thing was a valid system file, then Vista64-bit would recognize it as a 64-bit application, not 32.
|
 PARADOX
| Le processus ctfmon.exe (dont le nom complet de processus est Alternative User Input Services) est un processus générique de Windows NT/2000/XP servant à gérer les entrées de saisie texte alternatives telles que les logiciels de reconnaissance de la voix (Speech recognition), les logiciels de reconnaissance d'écriture, les claviers braille ou toute alternative au clavier.
Le processus ctfmon n'est en aucun cas un Virus résident, un ver, un cheval de Troie, un spyware, ni un AdWare.
Le processus ctfmon est un processus système pouvant être arrêté.
|

| Pointless program it stops me from freeing ram and as soon as i end this process then i can free lots more suddenly
|
 Cameron
| if i disable it, i cant get microsoft updates.. can anyone tell me why, or is something else wrong??
|
 B Wiegie
| It is SOOOO safe! It is part of Office
More information
|
 Privater Nutzer
| Die CTFMON.EXE stellt die "Alternative Benutzereingabe" (Spracherkennung, Handschrifterkennung, etc.) zur Verfügung. Microsoft liefert diese Anwendung mit seinen Office-Produkten seit Office XP aus. Mit dem Erscheinen von Windows XP hat diese Anwendung auch direkt Einzug in das Betriebssystem gehalten.
Das einfache Löschen der CTFMON.EXE reicht jedoch nicht aus, da die Office-Programme dies erkennen und die Anwendung wieder installieren. Auch das Löschen des Eintrags im Autostart ist zwecklos, da sich das Programm dort von selbst wieder einträgt. Der CTFMON-Remover umgeht jedoch all diese Probleme.
http://www.gerhard-schlager.at/files/CtfmonRemoverDE-v2.2.zip
|
 PiperBright
| Safe. Rarely necessary. Takes resources. Still unexpectedly goes 100% rogue on some XP configs.
|
 Coota
| What Is the Ctfmon.exe (Ctfmon.exe) File?
Ctfmon.exe activates the Alternative User Input Text Input Processor (TIP) and the Microsoft Office Language Bar.
Back to the top
What Does the Ctfmon.exe File Do?
Ctfmon.exe monitors the active windows and provides text input service support for speech recognition, handwriting recognition, keyboard, translation, and other alternative user input technologies.
More information
|
 joshank
| I'm turning it off
|
 geena
| As long as it's in system32 it's fine! I also have 2 of them but they seem to be the same exact copy and theyve been on mine since 2004 which is when i got my pc so i know its cool!
|
 Jota
| Unnecessary most of the time. I have 2 running on my machine (one is ctfmon.exe and the other is CTFMOM.EXE). I'm turning the one in capital letters off.
|
 Niko
| not needed
|
 ilhan
| ofis belgelerinin acýlmasý için gereklidir fakat baslangýcta calýsmasý zorunlu degildir
|
 euro
| It is part of Office More information E 'parte di Office
|
 wndwanderer
| If you follow "gaga"'s excellent research.
Thanx gaga!
|
 d_lin
| Agreeable with comments of 'gaga'. Safe to leave on, but can be shutdown to increase mem.
|
 papafoghorn
| To turn on or turn off Windows XP text services:
1. Click Start, and then click Control Panel.
2. Click Date, Time, Language, and Regional Options.
3. Click Regional and Language Options.
4. Click the Languages tab, and then click Details in the Text services and input languages box.
5. Click Language Bar in the Preferences box.
6. To turn off text services, click to select the Turn off advanced text services check box. To turn on text services, click to clear the Turn off advanced text services check box.
7. Click Yes if you are prompted to confirm your selection.
|
 Sandrion
| Safe ^^
|
 a
| Fichier systeme More information
|
 BSD
| I absolutely recommend deleting/disabling of ctfmon... Usually you don't need it, so why bother at all if it the real file or not... Even when it's the real file and you disable it, you'll at least save some free RAM :-)
|
 vito gram
| need help. there are listed ctfmon.exe twice and CTFMON.EXE .WHAT DO I DO.I apreciate an explanation. THANKYOU More information
|
 Malik
| go to control panel, open laungauge option, click language bar & uncheck show on desktop
|
 L
| I have it in my startup... I think that makes it trojan-- I'm shutting it off, and will let you know if I miss anything. Is there a way to trace who/how is logging me with a trojan?
|
 Computer Rookie
| Pls help,
Firstly, is it safe? Secondly, Is it normal that I have two of this, one is ctfmon.exe and the other CTFMON.EXE?
|

| I KEEP TRYING TO REMOVE THIS PIECE OF &^%$#!, BUT IT KEEP COMMING BACK!!!, NAY TIPS PLEASE.
THANKS
|
 Randy Reynolds
| safe
|
 EFVB
| It is necssary??
|
 Asussss
| It seems there is no concensus from people as to whether it is essential or not???
|
 Zorroar55
| Trend Micro OfficeScan Antivirus real-time scan monitor More information
|
 Dave Hillier
| The two instances of this are ran, one for Current User & one for Default user. I've disabled both because they arn't required in my current setup. I suggest disabling them & if later it appears that you need them, you ca re-enable them.
|
 Glaryhelper
| You don't need this to run at startup as it will run automaticlly if needed. If there are two and one of them is in caps (CTFMON.EXE),immeadiatly remove as it is a TROJAN!
|
 twelve string
| I have one in system 32 and one in prefetch what does that mean ?
|
 Puppetmaster
| Save but not necessary for everybody. Some (older) versions have a tendency to freeze.
|
 ilex
| No es peligroso. Es un proceso normal de office, por lo que debe manternerse marcado.
Si tienen dudas que sea un virus, hagan un escaneo con su antivirus preferido, pero no lo es en condiciones normales.
|
 evgeny
| ctfmon.exe is only a ctf loader from microsoft so keep him in startup ctfmon.exe will never harm your comutor it is a billd-in windows app
zorroar55 you don't know what you say
and to Glaryhelper ctfmon.exe is not a torjan!!!!!!!!!!!
|
 p7tms
| If you have a language toolbar in XP, right click it and then disable it. This will remove ctfmon.exe from startup. This is how I had to get rid of it. Hopefully that will help others.
|
 Victor from Russia
| It's a program operating the language panel of Winsows and switching between keyboard symbols. If you use only latinic symbols, you don't need it. But if you are permanently using more than one symbolic set (i.e. latinic and cyrillic, as in Russia), it's necessary for your work.
|
 Makhesh TG
| i can't disable this entry, it's showing its a microsoft product. help me...
|
 Techman
| well do not have MS office installed I use Openoffice could this be also part of outlook?
|
 susima
| estoy cansada de que quite recursos
|
 RUSHIK MANKAD
| if it is in windows/system32 folder leave it.
but if it is in windows/ folder cut & paste it to your desktop and delete it next time you reboot.
|
 niki
| It's ok leave it alone ;)
|
 Chafic from lebanon
| I have CTFMON.exe two times (one capital letters and the other normal letters) but they are both in system 32. Is it normal?
|
 Thalon
| Office 2002: Alternative Userinput More information
|
 gareth
| i've got 2 what does that mean
|
 tavo
| me tiene harto
|
 john hurren
| I'm gonna turn it off and see. Watch this space
|
 cyberbellee
| This is necessary if you are using non-English alternative services because it monitors and provides text input service support for speech recognition, handwriting recognition, keyboard, translation, and other alternative user input technologies as stated in the "Regional and Language Option" in the Control Panel. However, Glary's Utilities always reported at least two instances if you have more than one account in the same PC. Other utilities will report only one. Just wonder why. I can't also determine if it consume twice as much memory compared to one instance.
|
 lenny
| I am working on a friends computer, he has 2 copies of ctfmon.exe one in capitals, Norton Internet Security said nothing was wrong after a full scan. I put his harddrive into my pc and scanned it as a slave drive. AVG found 40 trojans!!! CTFMON.EXE was one of those set to start with Windows. This is why i have been telling others for years NOT to use Norton!!!
|
 brunouL
| só gasta memória do sistema. pertence ao windows mas não faz falta se retirar.
|
 Com5
| tam olarak anlayamadım :) More information
|
 Thal
| I don´t think this is a part of MsOffice.
I do not have Office install on my pc and l have this ctnotify running so healthy, that l can't get rid of him.
|

| Not much important to have it around.
|
 Luiggi
| What if there are two files with the same?
|
 Gerardo
| no se exactamente que es pero por lo que entiendo es para algo de servicios avanzados de texto que utiliza windows xp se descativa asi inicio,panel de control,click en pociones regionales de idiomas,click en configuracion reginal y de idioma sale una ventana click en idiomas y luego en detalles click en opciones avanzadas donde dice configuracion del sistema dar clik en desactivar todos los servicios de texto avanzados aceptar y reiniciar el equipo y con esto todo solucionado
|
 One American
| This is one of the most commented exe's, LoL... It isnt required unless you are using text-to-speach for the MS Office suite. Good luck getting rid of it, it is a very persistent bastard, turn it off and it re-enables itself. XP-AntiSpy has a function for removing the file, but you are prompted for your XP CD so it can reinstall it, just cancel out of the prompt and good luck (P.S. it is kinda odd that if you wish to disable this it recreates the run entry. The Control Panel applet "Speech" does NOT have an option do 'opt-out' of using this, so other than renaming the file manually or using XP-AntiSpy to disable it and then disreguarding the 'Windows File Verification' prompt, there isnt much you can do about disabling this)
|
 Too dumb to learn.
| I have disabled it at start up 3 times. Using Glaryutilities. This is the third time it's come up. All listed as c:windowssystem32ctfmon.exe same dates same details so guess I'll wait again.
|
 jigolo
| anlamadım More information
|
 alain
| sans danger fait partie des programe microsoft
|
 João
| seguro ou inseguro?
|

| Microsoft speech or handwriting recognition. Usually unnecessary
|
 delpi
| safe - this is a writing (txt,rtf,doc,etc...) process of system
|
 rocketmouse
| Simply annoying! I really don't need it, but over the years I've found that it can't be removed, or even delayed.
|
 U know
| cftmon.exe is harmless and legitimate when in system 32. CFTMON.EXE (in caps) is a virus, posing as the legitimate file. Delete the one in caps.
|
 Night_Crawler
| I really don't know what to think of it I know usually its installed with Windows Office and stuff none of which I have on my system but for some reason its popped up on my system and keeps starting when I try to use Internet Explorer and I have to go in and kill it in order for IE to run Ive tried blocking it with Glary but that doesn't keep it from popping up when I open IE I've even deleted it and it was reinstalled when my computer updated I think. I'm running Windows XP Pro Service Pack 3.
Any help would be appreciated.
Thanks
|
 bla bla bla
| but i turned it of no problems so far good luck
|
 gégé
| programme utile au démarrage ?
|
 Prat
| this is a microsoft process running on computers with ms office installed.
|
 pikatoit
| Il fait partie de la suite Microsoft Office. Il active l'Alternative User Input Text Input Processor (TIP) et la barre de language Microsoft Office. Il gère les entrées de saisie texte alternatives telles que les logiciels de reconnaissance de la voix, les logiciels de reconnaissance d'écriture, les claviers braille ou toute alternative au clavier. Ce programme est un processus système non essentiel, mais ne devrait pas être terminé à moins que vous ne soupçonniez des problèmes.
Le dossier cible est bien System32 donc pas de probleme.
|
 Hans
| three are 2 ctfmon in the list - why?
|
 FUZE
| This is something to keep a eye on. so far not harmfull
|
 travesti
| sans danger fait partie des programe microsoft More information
|
 travesti
| three are 2 ctfmon in the list - why? More information
|
 Mark
| Well I don't have office installed on this pc, and never have, so I'm gonna say it's not what a lot of people say it is, and I'm gonna delete
|