What is the Ctfmon.exe process? What is the role of Ctfmon.exe?

What is the Ctfmon.exe process?

Ctfmon.exe is part of the Microsoft Office product suite and is an executable program for input methods. It can select a user text entry program, and Microsoft Office XP Language bar. This is not a pure system program, but if you terminate it, it may cause an unknown problem. In addition, Ctfmon.exe may be infected with the Trojan and become a virus program.

Process information

Process Name: Alternative User Input Services
Produced by: Microsoft Corp.
belonging to: Microsoft Office Suite
System process: Yes
Background program: Yes
Use Network: No
Hardware Related: No
Common error: unknown n/A
Common error: unknown n/A
Security Level (0-5): 0
Spyware: No
Memory Size: 3664k
Advertising software: No
Virus: No
Trojan: No

What is the role of Ctfmon.exe?

Ctfmon.exe monitors the active window and provides text input service support for speech recognition, handwriting recognition, keyboard, translation, and other Chinese optional user input techniques.

Text services, is the Input method icon, if you choose not to let it start, the Input method icon will not see, but can still pass Ctrl+shift and CTRL + SPACEBAR to switch Input method (I do this, because the text service than the original 98 input method icon difficult to operate, mainly is not accustomed to)

May I delete the Ctfmon.exe file?

Ctfmon. EXE is office automatically loaded text services, after the installation of Office XP, some of the input methods become very difficult to use, uninstall Office XP, it generated in the Control Panel text services still exist, the input method in the taskbar is not restored. Currently, there are three commonly used methods to prohibit the automatic loading of text services:

1. Removing CTFMON.EXE from the System Configuration Utility (Msconfig.exe) does not really disable text services because text services are automatically loaded when you start an Office program.

2. Type "Regedit.exe" in "Start → run", open Registry Editor, expand Branch HKEY_USERS. Defaultsoftware microsoftwindowscurrentversionrun ", rename CTFMON.EXE to" Internat. EXE "can be. However, this method also fails after you start office.

3. Take Windows XP as an example to explain the steps of the third method: first quit all Office programs, go to control Panel → add/Remove Programs, select Microsoft Office XP, click Change, and select Add or Remove features in the Maintenance Mode dialog box , and then click Next; expand Office Sharing features. Click "Chinese Optional User Input Method", select "Do not install", click "Update"; then go to "control Panel → regional and Language Options", enter the "Language" tab, click "Details", in the list of installed services, except English ( The United States) outside the other input method one by one delete, and finally click "Start → run", type "regsvr32.exe/u msimtf.dll" logout Msimtf.dll, and then type "regsvr32.exe/u Msctf.dll" logoff Msctf.dll. This works fine, but the operation is too cumbersome.

In fact, the author also has a simple and practical method, is renamed. When Office automatically loads CTFMON.EXE, it can only rely on the filename to determine which program is what it needs, so we simply rename the CTFMON.EXE under the system directory (such as the system letter Windows System32) to INTERNAT.EXE ( Or we want the system to automatically load other programs) can be.

The second method

If your Win2000 system installed OfficeXP or above, it will leave a ctfmon.exe in you and the system, this is really a demon, once troubled countless netizens. Today, I am determined to hold the sword of righteousness, chop demon to remove demons, but also a net friend a pure Chinese and English input space!

Before I execute it, let me read his guilt:
1. No matter what window you open, always pops up an input method tool body, and the default is Chinese input, very annoying.
2. It replaces the original locale and input method settings, replacing it with the settings of a text service, and cannot set the default input method.
3. End the original Input method tool process Internat.exe, and so he can not start on the boot.
4. Put yourself on the boot on the list of programs, unless you modify the registry, otherwise can not be removed.
5. Like a virus with the ability to regenerate, when you delete the Ctfmon.exe, he will be rebuilt with Office startup.
6. When you end the Ctfmon.exe, often appear in the input method switch shortcut keys out of chaos.

OK, after the Supreme Programmer's Trial Chamber approval, now executes the dead line to the Ctfmon.exe, executes immediately!

The first step: right click on the taskbar space, point to Task Manager.
Step two: Find the Ctfmon.exe and terminate it.
Step three: In the system directory under the System32 directory to find Ctfmon.exe, delete.
The fourth step: Write a simplest API program (code see appendix), compile and put it in the Ctfmon.exe directory, and renamed to Ctfmon.exe.

Fifth step: Click "Start" menu, click "Run", enter Internat.exe after click OK.
Sixth step: Restart the computer.

Execution Complete!

Report:
If you find that Word's Input method does not work correctly after execution, the solution is as follows:
First step: Open Word (nonsense)
Step Two: Click on the "Options" submenu on the "Tools" menu. Click on the "Edit" tab.
Step three: Clear the "Input method control is active" check. Click "OK"
Fourth step: Click the "Set Language" item in the Language submenu on the Tools menu.
Fifth step: Select "English-American" in the list, click OK.
Step Sixth: Close Word and restart the computer.
Solve.

Method Two:

The first step: delete the Chinese optional user input method
For Windows 2000 systems, remove this feature:
1. Quit all Office programs.
2. Click Start, click Settings, and then click Control Panel.
3. In the Control Panel, double-click Add/Remove Programs.
4. In the list of currently installed programs, select the Microsoft Office XP product. Click Change.
5. In the Maintenance Mode dialog box, select Add or Remove components, and then click Next. The dialog box for selecting the installation option is displayed.
6. Click the plus sign before the Office share feature.
7. Click on the Chinese optional user Input Method icon, choose not to install.
8. Click Update.

Step two: Delete the optional user input from the text service:

1. Click Start, click Settings, and then click Control Panel.
2. In the Control Panel, double-click the text service.
3. In the list of installed services, delete the remaining input methods, except English (United States).

Step three: Run regsvr32/u logoff Msimtf.dll and Msctf.dll files.

1. Click Start-> Run.
2. In the Run dialog box, typing the following command:
"Regsvr32.exe/u Msimtf.dll" (excluding double quotes)
3. Click OK.
4. Repeat 1 to 3 steps for the Msctf.dll file.

When text services are blocked, you can add additional input methods as before.

Another way to delete a

Hand Clear Ctfmon.exe

A few days ago suffered from this guy's swindle, so came here to send an inquiry post, but soon can not find. Alas ~ ~ ~ ~ Everybody is inferior to beg oneself! I had to find a way to do it myself. After several days of efforts, today finally the King of the eight bastard to destroy. The whole process is described briefly below.

1, found. I'm checking the registry for a running item. Found Ctfmon.exe this suspicious file

2, preliminary clearance. I am Safe mode, will ctfmon.exe renamed as CTFMON.TNT, and then build an empty file, named Ctfmon.exe, the property changed to read-only, and then normal to start XP, after a short time, I found that the original empty file into the size of more than 100 K files- This guy can actually automatically go to the property, overwrite. I faint, so delete it, but not too long to appear again, open the registry, the same, every time the machine, it was added. Initial clear and complete failure!!! Distress!!!

3, to seek help. Come to this site post, no results.

4, the ultimate removal. I am full-text search in DOS, the command is as follows:

C:DIR/S C:ctfmon*.*
A total of 3 files were found, one of which was in the Dllcache folder, and I later learned that this folder is a backup folder for system files to be automatically recovered. Another is Windows, file ctfmon-234a23se8.pf (small horizontal after the part of memory, casually written), now manually delete these 3 files, and then to Safe mode, with KV2006 killing, a total of 3 viruses, a trojan. Finally in the back to XP, the whole world from the pure!!

Virus and security

Because the Ctfmon.exe process in Windows XP system runs automatically as the computer starts, and this is Microsoft's system process, many viruses and Trojans use the same name process to get more trust from users, and there are already security vendor results to the associated virus. If you suspect this process is somewhat abnormal, then we use some of the following methods to quickly detect the Ctfmon.exe-related virus, if found that the latest anti-virus software update virus database and scan the computer overall.

1. If you find that Ctfmon.exe is not in the System32 directory, it could be a virus
2. If this process finds too much resources, it could be a virus
3. If the Win7 system runs Ctfmon.exe, it's probably a virus
In addition, I found that some user reaction in Task Manager saw two Ctfmon.exe, which is also a very dangerous signal should immediately scan to confirm security, if you also encounter such a situation want to be able to respond. OK, Introduction to here believe that we have to Ctfmon.exe is what the process of understanding, if the article has any questions and suggestions welcome message.