What is CTFMON.EXE

If you have opened the Windows Task Manager or used Hijackthis to track down a problem, you have probably run across a file called CTFMON.EXE. Disabling it from MSCONFIG doesn't make it go away and it definitely feels like a virus, so what exactly is this file?

It turns out that CTFMON.EXE is a file that is installed with Office XP applications. It activates the Alternative User Input Text Input Processor and the Language Bar. The program monitors the active windows and provides text input service support for speech recognition, handwriting recognition, keyboard, translation, and other alternative user input technologies. It also starts the language bar that appears next to the system tray.

A Hijackthis log will show CTFMON in this way

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

How to Disable the Language Bar and Remove CTFMON.EXE
Follow the directions below to disable the Advanced Text Services to remove the Language Bar

1) Open the Control Panel

2) Double-click on Regional and Language Options (if you are in Classic View) or Double-click on Date, Time, Language, and Regional Options in Category View

3) Click on the Languages tab, then click on Details

4) Click on the Advanced Tab

5) Finally, place a checkmark in the box "Turn off advanced text services" and Click Ok

The language bar next to the System Tray should disappear, and CTFMON.EXE will unload from memory.

If you wish to bring back the language bar, simply follow the procedure above and UNCHECK the box to turn off advanced text services.

Therefore, CTFMON.EXE is not a virus or a piece of malware, but its also not a program that you NEED running, expecially if you don't use Microsoft Office XP applications.