Please register or login. There are 1 registered and 1056 anonymous users currently online. Current bandwidth usage: 234.02 kbit/s July 05 - 09:38am EDT 
Hardware Analysis
      
Forums Product Prices
  Contents 
 
 

  Latest Topics 
 

More >>
 

    
 
 

  You Are Here: 
 
/ Forums / Software /
 

  Real Suspicious possibility from, Mirosoft!!!!(CTFMON.EXE as an example). 
 
 Author 
 Date Written 
 Tools 
Continue Reading on Page: 1, 2, Next >>
Ketan S Apr 12, 2003, 02:45am EDT Reply - Quote - Report Abuse
Send Message - Add to Buddy List Replies: 26 - Views: 494
Hallo people :)
I want to tell you something that I suspect. About the CTFMON.EXE that comes along with the office xp. Removing from the start-up ctfmon.exe puts itself back onto the startup again. When you do end-task to it, it closes temporarily. Whenever you start any program and internet explorer, it runs again. Searching ctfmon.exe and deleting it along with a .pf file related to it, never works. Immediately when you run Internet explorer or any program, it regenerates itself very quickly and runs. If this kind of sophisticated facility was there for the operating systems files, the system would never have crashed (and we would have been happy forever). Try deleting some important files from system32 and system folder. What will happen is they wont regenerate themselves like this(adopting martial law), and the system will crash or malfunction with errors.
Secondly, why does ctfmon.exe have to work so hard along with such trickfull operations? If it really works so hard for the Office program, it is suppose to have develloped an awesome several MBs and GBs of artificial inteligence databace on our Hard drive!! Where is it??
The procedure of removing the CTFMON.EXE is kept far away from us on the website of microsoft. Unless we knew about it and go there, we would have not known the procedure.
Good people, I hope you understood my language, that I wanted to explain. I wanted to ask you that, havent you thought of this and been suspicious about that ctfmon.exe? Dont you suspect a foolproof spy running around in your pc who arives at its own will? Dont you think its an UGLY piece of secret program write-up by microsoft??
I think there are some more such kind of buggy insects, which might have arrived(pooped) out of Microsoft's 'excreta Gates'(ass-holes). :))
Sorry for some few disturbing words. But they were necessary.
Thanks with regards, and, best wishes for whatever you do in your life,
with sincerity from,
Ketan.


Want to enjoy less advertisements and more features? Click here to become a Hardware Analysis registered user.
Wildwood Apr 12, 2003, 04:29am EDT Reply - Quote - Report Abuse
Send Message - Add to Buddy List  
>> Re: Real Suspicious possibility from, Mirosoft!!!!(CTFMON.EXE as an example).
How about LOADQM.EXE in W98? It's a spyware for microsoft. It enables them to track where their OS's are. If you are on the internet.





...........................ssshhhhhhhhhhhhh...................I think Bill Gates is under my bed......................listen....................do you hear him? ......................He breaths real heavy when he's excited about catching a software pirate.


ROFLMAO!!!!!!!!!!



Rhort Apr 12, 2003, 05:20am EDT Reply - Quote - Report Abuse
Send Message - Add to Buddy List  
>> [No Subject]
Ketan, CTFMON.EXE is the ‘Alternative User Input Service’, and is actually an auxiliary system process. Basically, what it does is, it sorts out all the text input support for handwriting and speech recognition, multi-language keyboards, translation, and other alternative user input sources. If you’re running any non-English language support on your machine, then this file will automatically activate itself, just as you describe. There’s nothing sinister, or underhand about it; it’s supposed to be there to help you.

Post Edited On: Oct 19, 2078, 00:27 AM
_________________________________________________________________________________
~ The manual said "Requires Windows '95 or better" ...so I installed Linux!
1001000 1100101 1111000 0100000 1010010 1110101
Ketan S Apr 12, 2003, 04:08pm EDT Reply - Quote - Report Abuse
Send Message - Add to Buddy List  
>> ooo hmmm
Hallo
Thanks about it. But I am thinking about the regenerating fascility. Why is it not given for other system files and program folder?
see you, thanks.

Sailor Bob May 25, 2003, 05:38am EDT Reply - Quote - Report Abuse
Send Message - Add to Buddy List  
>> Re: Real Suspicious possibility from, Mirosoft!!!!(CTFMON.EXE as an example).
If you are using Microsoft Office XP and you have its utility
CTFMON.EXE running, it'll stop DVD Station - the Hollywood Plus-
DVD player from playing encrypted movies. This utility injects
MSCTF.DLL in the memory space given by Windows to hardware and
software manufacturers. A workaround is under investigation to
avoid this conflict. A temporary solution is to disable this
utility before the playback of movies : press CTRL+ALT+DEL,
click on CTFMON.EXE, and click "End Task". After the movie
playback, restart CTFMON.exe from Start-Run : ctfmon.exe & OK.

software-analysis Jun 06, 2003, 03:50pm EDT Reply - Quote - Report Abuse
Send Message - Add to Buddy List  
>> Re: Real Suspicious possibility from, Mirosoft!!!!(CTFMON.EXE as an example).
you can turn this and other obnoxious programs off on Windows
XP (and maybe 2000?) by going into the local Software security
policy page. There is a page where you can specify paths that
contain allowed executables and/or denied executables.
You can put programs that you want the Operating System to deny execution of on that list.

Works great. One of my problems was MOBSYNC.EXE. I don't have anything I need to Sync with. I don't have a handheld and my
laptop doens't have to sync with anything -- but XP would always
try to start it regardless -- according to the "MVP" (Most Valuable Patsy's**) I had to let it run. I put it on the list of banned EXE's, and Voila! No more MOBSYNC. Works for any problematic
program -- since it is builtin to the OS...the only way to get around it is if they rename or move the program -- which if it is an MS program, they aren't likely to do.

-enjoy

ROY G Jun 06, 2003, 04:03pm EDT Reply - Quote - Report Abuse
Send Message - Add to Buddy List  
>> Re: Real Suspicious possibility from, Mirosoft!!!!(CTFMON.EXE as an example).
Computers without OS,what good are they ?Instead of selling xp or 2000 they should give it to you hoping you use their OS .GATE`s some things are not as though they appear.

ken hutchinson Jun 09, 2003, 05:10pm EDT Reply - Quote - Report Abuse
Send Message - Add to Buddy List  
>> Re: Real Suspicious possibility from, Mirosoft!!!!(CTFMON.EXE as an example).
http://support.microsoft.com/?kbid=282599

tells you what it is and how to remove it

ROY G Jun 09, 2003, 05:51pm EDT Reply - Quote - Report Abuse
Send Message - Add to Buddy List  
>> Re: Real Suspicious possibility from, Mirosoft!!!!(CTFMON.EXE as an example).
Good post Ken.

Jeff Miller Aug 12, 2003, 07:53pm EDT Reply - Quote - Report Abuse
Send Message - Add to Buddy List  
>> Re: Real Suspicious possibility from, Mirosoft!!!!(CTFMON.EXE as an example).
Well, honestly, I think all of these regenerative programs are BS...

CTFMON seems to come with the new msblast virus... i dont have Office XP or any other language software but hey, its on my computer...

And where is this block exe file page thing that was mentioned?

jmerc Aug 12, 2003, 08:16pm EDT Reply - Quote - Report Abuse
Send Message - Add to Buddy List  
>> Re: Real Suspicious possibility from, Mirosoft!!!!(CTFMON.EXE as an example).
Check this information out on CTFMON.EXE

Status: This file is a part of Microsoft Office XP. It is used for speech recognition. Recommendation: if you do have a problem with playing media you may stop running of cftmon.

Go here to see other Startup Programs - At Your Option

http://greatis.com/regrun3atyouroption.htm

Life is too short, make the best of it!
jmerc Aug 12, 2003, 08:19pm EDT Reply - Quote - Report Abuse
Send Message - Add to Buddy List  
>> Re: Real Suspicious possibility from, Mirosoft!!!!(CTFMON.EXE as an example).
In this page they tell you which are necessary and which you can or have an option to disable.

http://greatis.com/regrun3startupprograms.htm

Life is too short, make the best of it!
software-analysis Aug 12, 2003, 08:41pm EDT Reply - Quote - Report Abuse
Send Message - Add to Buddy List  
>> Re: Real Suspicious possibility from, Mirosoft!!!!(CTFMON.EXE as an example).
Got to run a program (windows-R), type "secpol.msc"
to modify local security policy.

Select Software Restriction Policies, Additional Rules, then in right panel, right click (menu), and
Add new path rule. Type in the path of the
executable you want to disable.

Choose the disable option.

It takes effect when anything tries to load the program using that path. It won't stop a currently
running copy (use task manager and kill process for
that).

Learn to take control of you computer....learn how to pull the plug! :-)

Of course the new MS updates have disabled my ability to use font smoothing or clear type...and haven't figured out how to fix that one yet....have a feeling it's another MS bug in directX, since it's the onlything I've installed recently that should be affecting the display. But text displays at the speed of drying mud...:-(

If someone has any ideas there, that'd be cool!

SA

Harris Walktin Aug 12, 2003, 09:45pm EDT Reply - Quote - Report Abuse
Send Message - Add to Buddy List  
>> Re: Real Suspicious possibility from, Mirosoft!!!!(CTFMON.EXE as an example).
CTFMon.exe

(Microsoft) CTFMon comes with Microsoft Office XP and Windows XP – it activates the Alternative User Input Text Input Processor (TIP) and the Microsoft Office XP Language Bar. As long as the Text Services & Speech are enabled in the Control Panel, this program will force itself back into your list of background programs.

Recommendation :
Disable "Text Services & Speech" in the Control Panel if you are not using them. Then, disable CTFMon using Startup Manager. (Note that if you use Word, Excel or PowerPoint to write in different languages, eg. English and Arabic, then you will be using "Text Services & Speech" facilities).










LoadQM.exe

(Microsoft) This task loads the MSN Queue Manager and is installed when you install MSN Explorer or MSN Messenger. LOADQM gobbles up system resources and appears on most end-users’ Task Lists who come to us complaining of low System & User Resources or very slow, "crawling", PCs. In January 2003 this is still one of the worst behaved Microsoft programs !

Recommendation :
Disable immediately, or Delete using Starter. Next, reboot your PC and find LOADQM in the C:\WINDOWS folder. Rename it to LOADQM.EXE.OLD as if you do not it will otherwise get put back in your Task List at some stage or other (on some PCs you may need to boot into Safe Mode before you are able to rename LOADQM).










MobSync.exe

(Microsoft)
Microsoft Synchronization Manager. This program, which is part of Internet Explorer 5.x/6, runs in the background when you are using the "View pages offline" feature of Internet Explorer, and you have set parameters for when your pages should be automatically synchronised, or you decide to manually synchronise your offline content with the web through the "Start \ Programs \ Accessories \ Synchronize" function. This program will also run if you are doing development using Microsoft SQL 7 and using SQL 7 replication.

Recommendation :
Harmless. If you never use the "Synchronize" function, then disable it with Startup Manager.











- Harris W. -AMD Employee
AMD cannot be held responsible for any damage done to your PC by my advice. My advice is valid.
software-analysis Aug 12, 2003, 10:08pm EDT Reply - Quote - Report Abuse
Send Message - Add to Buddy List  
>> Re: Real Suspicious possibility from, Mirosoft!!!!(CTFMON.EXE as an example).
Harris Walktin writes...
CTFMon...
yes, you can disable it, but various programs will reinstall and re-enable it -- like if you run any of the 'repair' options or reinstall options. In find it more permanent to disable the program's execution -- then if it is releaded and reneabled later on, it still won't run.,

Same goes for LoadQM -- but this one is in 98 and such. Best advice there is to create a directory in the same location. Standard open/delete calls won't delete a directory so it's not so easy for
a program to recreate /reinstall/re-enable the file.
The programs have to know enough to examine the error code and risk removing an unexpected directory. Most programs just give up when they can't create the file. To be extra obstinate, you can set the hidden, system and read-only bits on the dir. So any program that might delete might at least check permissions before just upping and deleting the name entry.

Mobsync...Well...Again -- you can *try* to disable Mobsync, but I found it kept getting reinstalled.

Ups and downs to every technique and often many ways to do the same thing.

SA

software-analysis Aug 12, 2003, 10:08pm EDT Reply - Quote - Report Abuse
Send Message - Add to Buddy List  
>> Re: Real Suspicious possibility from, Mirosoft!!!!(CTFMON.EXE as an example).
Harris Walktin writes...
CTFMon...
yes, you can disable it, but various programs will reinstall and re-enable it -- like if you run any of the 'repair' options or reinstall options. In find it more permanent to disable the program's execution -- then if it is releaded and reneabled later on, it still won't run.,

Same goes for LoadQM -- but this one is in 98 and such. Best advice there is to create a directory in the same location. Standard open/delete calls won't delete a directory so it's not so easy for
a program to recreate /reinstall/re-enable the file.
The programs have to know enough to examine the error code and risk removing an unexpected directory. Most programs just give up when they can't create the file. To be extra obstinate, you can set the hidden, system and read-only bits on the dir. So any program that might delete might at least check permissions before just upping and deleting the name entry.

Mobsync...Well...Again -- you can *try* to disable Mobsync, but I found it kept getting reinstalled.

Ups and downs to every technique and often many ways to do the same thing.

SA

Andy Parker Aug 13, 2003, 02:47am EDT Reply - Quote - Report Abuse
Send Message - Add to Buddy List  
>> Re: Real Suspicious possibility from, Mirosoft!!!!(CTFMON.EXE as an example).
Damn, have we all taken a paranoid pill today?




Andy

"Nobody expects the Spanish Inquisition!!!!"
Wildwood Aug 13, 2003, 10:44am EDT Reply - Quote - Report Abuse
Send Message - Add to Buddy List  
>> Re: Real Suspicious possibility from, Mirosoft!!!!(CTFMON.EXE as an example).
Mine was bitterness.

I save paranoia for holidays and family gatherings.


Corvus Raven Aug 13, 2003, 01:30pm EDT Reply - Quote - Report Abuse
Send Message - Add to Buddy List  
>> Re: Real Suspicious possibility from, Mirosoft!!!!(CTFMON.EXE as an example).
:) try ..umm how to say..

"http://www.puckmicrosopt.com"

..You know what letter to reflace the p's with?
I am sure you can Pigure it out. ;)

humm.. seems that my tyfing has been misconstrued.. some letters are being re fositioned. :) hehe

--------------------------
ASUS A7N8X Deluxe PCB 2.00 w/ BIOS 1005 (cause? Dunno.. ATM)
AMD XP 2800+ @ 0.0 GHz 0MHz FSB (overheating for no appearent reason)
(2) - Corsair XMS512-3500C2 (5-2-2-2T) @ 0MHz
ATI Radeon 9700 Pro @0
Enermax 500W p/s (ok.
software-analysis Aug 13, 2003, 02:12pm EDT Reply - Quote - Report Abuse
Send Message - Add to Buddy List  
>> Disabling unneeded programs.
Nothing to do with paranoia for me. It has everything to do with memory and resource consumption. This was especially true on Win98/ME, but bottom line is why do I want to run processes that I don't use? Same goes for Linux -- fully open source...no "paranoia" involved. Simple common sense dictates one shouldn't run processes that one doesn't need. It reduces the complexity of the overall system and lowers the risk of software failures (or security holes). If I am not hosting a web site, why would I want to run MS personal web-site server or apache?

Would you vote for everyone running apache on their system if it was included and turned on by default?
Why or why not? Does the choice have paranoia as a motivating factor (other than paranoia about unfound security holes). Besides -- it's often said that the best security experts are always at least a bit paranoid. Good security is based on the premise that something will go wrong -- and when it does, how will you detect and/or mitigate the damage? How can you lessen _risk_? Disabling
unnecessary processes should, in general, lower potential causes for failure. It's just good sense.
If that = paranoia...well, so be it.

SA

Corvus Raven Aug 13, 2003, 04:07pm EDT Reply - Quote - Report Abuse
Send Message - Add to Buddy List  
>> Re: Real Suspicious possibility from, Mirosoft!!!!(CTFMON.EXE as an example).
I am a self proclaimed paranoid schizophrinac..and so am I :)

(I never said anything about spelunz)

--------------------------
ASUS A7N8X Deluxe PCB 2.00 w/ BIOS 1005 (cause? Dunno.. ATM)
AMD XP 2800+ @ 0.0 GHz 0MHz FSB (overheating for no appearent reason)
(2) - Corsair XMS512-3500C2 (5-2-2-2T) @ 0MHz
ATI Radeon 9700 Pro @0
Enermax 500W p/s (ok.

Write a Reply >>

Continue Reading on Page: 1, 2, Next >>

 

    
 
 

  Topic Tools 
 
RSS UpdatesRSS Updates
 

  Related Articles 
 
 

  Newsletter 
 
A weekly newsletter featuring an editorial and a roundup of the latest articles, news and other interesting topics.

Please enter your email address below and click Subscribe.