C:\WINDOWS\system32\ctfmon.exe...

Okay, I use Spybot S%26amp;D and I found it pretty helpful in the past... But, okay, it detects important changes in the registry, and I've been getting a notice that says...


Current filename: C:\WINDOWS\system32\ctfmon.exe


Value: ctfmon.exe


Filename: ctfmon32.exe


Description: CoolWebSearch _Ctfmon32_ parasite variant


Database status: Not required - virus, spyware, malware or other resource hog


Value: ctfmon.exe


I'm pretty worried about this.. The internet says that this can be a microsoft function, for the language or it can be spyware/virus/trojan. But the description Spybot gives is 'parasite variant' which can't be good.


Well, also, when I shut down my computer, I get an alert from Spybot, something like error 00000, but it keeps on coming up, even if I keep clicking okay, until finally, an end task window comes up and I have to end it. Please help me! Can you tell me if this is a virus, and if it is, how can I remove it from my computer?

C:\WINDOWS\system32\ctfmon.exe...
Ctfmon.exe is a background service for text input support; true, spyware sometimes hijacks such a process but your pc would indicate something was wrong - browser redirects, pop-ups etc. It might be a false positive and the fact that Spybot is crashing may suggest this is the case. Make sure you have the latest version of Spybot (1.5) with up-to-date definitions


http://www.filehippo.com/download_spybot...





you could run CWShredder for peace of mind - free here


http://www.filehippo.com/download_cwshre...
Reply:Do a scan with Spybot, and when it detects it, delete it. If Spybot can't delete it, go to Start%26gt;Run%26gt;type regedit%26gt;edit%26gt;search%26gt;type in value name%26gt;delete