ctfmon.exe (ctfmon.exe - threat)

PC Pitstop Analysis

ctfmon.exe is the name of a regular process from Windows. It has Vendor and Product information.
However this is not the case. We have detected that this process has no Vendor or Product information. Check the Information URL and see the list of threat that uses this same name.

Recommendation

ctfmon.exe is a VIRUS. Stop all work until the virus is removed or you run the risk of spreading the virus to other people. Worse yet, the virus may be doing harm to your computer and your information.

ctfmon.exe is a virus and should be removed immediately to avoid doing further harm. PC Pitstop recommends CA Antivirus in these types of situations.

Identification

The file name alone identifies this program.

PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. ctfmon.exe (ctfmon.exe - threat) has been seen on 0.00% of systems tested at PC Pitstop. As a point of comparison, it is rare for a particular malicious program (virus or spyware) to be seen on more than one or two percent of all systems tested.

PCs running this program did not have a high average CPU load during testing, which indicates it does not consume a great deal of CPU time on most systems.

Detailed Description and/or Removal Instructions

http://search.ca.com/search/ca?style=en&qt=ctfmon.exe&col=

Match #2

ctfmon.exe (Read !!!Keylog-Family)

PC Pitstop Analysis

ctfmon.exe file name has been used by some malware.
You can get more information from Mcafee

http://vil.nai.com/vil/content/v_131046.htm

According to CA

"Key Logger: (Keystroke Logger). A program that runs in the background, recording all the keystrokes. Once keystrokes are logged, they are hidden in the machine for later retrieval, or shipped raw to the attacker. The attacker then peruses them carefully in the hopes of either finding passwords, or possibly other useful information that could be used to compromise the system or be used in a social engineering attack. For example, a key logger will reveal the contents of all e-mail composed by the user. Keylog programs are commonly included in rootkits and RATs (remote administration trojans)."

Recommendation

ctfmon.exe uses excessive system and memory resources with no corresponding benefit. Applications such as these should be disabled to improve overall system performance.

ctfmon.exe is a virus and should be removed immediately to avoid doing further harm. PC Pitstop recommends CA Antivirus in these types of situations.

Identification

In addition to the file name, ctfmon.exe, the following version information is used to identify the file. If the file does not match this information, it may be a different file. To ensure the file is absolutely correct, run a free and comprehensive scan.

File name contains:	\system32\ctf

To view version information with Windows Explorer, right-click the file and click Properties, Version.

PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. This program has not been seen on any systems tested at PC Pitstop in the past week.

Vendor or Distributor's Web Site

http://www.kmint21.com/

Detailed Description and/or Removal Instructions

http://ca.com/us/securityadvisor/pest/pest.aspx?id=453090753

Match #3

ctfmon.exe (Speech)

PC Pitstop Analysis

ctfmon.exe supports speech input in Windows/Office.
In Office this process has been known to consume significant resources, especially processor time, if it is not configured correctly or is turned on by accident.
If you are not using this, is safe to disable it.

Recommendation

ctfmon.exe is a user invoked program and a normal part of PC operations. No action required.

ctfmon.exe is a virus and should be removed immediately to avoid doing further harm. PC Pitstop recommends CA Antivirus in these types of situations.

Identification

Vendor contains:	Microsoft
Product contains:	Windows

To view version information with Windows Explorer, right-click the file and click Properties, Version.

PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. ctfmon.exe (Speech) has been seen on 64.44% of systems tested at PC Pitstop. As a point of comparison, it is rare for a particular malicious program (virus or spyware) to be seen on more than one or two percent of all systems tested.

PCs running this program did not have a high average CPU load during testing, which indicates it does not consume a great deal of CPU time on most systems.

Detailed Description and/or Removal Instructions

http://support.microsoft.com/kb/282599

Important note: A file name alone may not be enough for positive identification. PC Pitstop's full tests and spyware scan use information such as the company name, product name, or install directory. If you are unable to identify a file, ask about it in our forums after running our full tests.