What is ctfmon.exe And Why Is It Running?

You are no doubt reading this article because you are frustrated with the ctfmon.exe

process that just won’t stop opening no matter what you do. You remove it from the startup

items and it just magically reappears. So what is it?

Ctfmon is the Microsoft process that controls Alternative User Input and the Office

Language bar. It’s how you can control the computer via speech or a pen tablet, or using the onscreen keyboard inputs for asian languages.

If you are using any of the above, you should leave it enabled. For everybody else, we’ll get to the job of disabling this annoying service.

Depending on your system configuration, there are a number of different steps to disable it. I’ve tried to list all the methods below.

Step 1: Disabling in Microsoft Office 2003

We can remove the alternative text input from Microsoft Office 2003 by just removing

that feature in the setup.

Note: I haven’t figured out where the equivalent setting is for Office 2007 (if there is one),

but we can also disable it a different way below.

Go to Add/Remove programs, choose to Change your installation of Microsoft Office and

make sure you check the box for “Choose advanced customization of applications”

before you hit next.

Find “Alternative User Input” in the list and change the dropdown to “Not available” so it

looks like this:

Step 2a: Disabling in Windows XP

There’s an additional step we can take to make sure it gets turned off in Windows XP, which

really seems to be the best answer for XP users.

Open up Control Panel and choose Regional and Language Options.

Choose the Languages tab and then click on Details in the top section.

Now on the Advanced tab you can choose to “Turn off advanced text services”, which should immediately close ctfmon.

You’ll also want to take a look at the first Settings tab, and make sure that your “Installed Services” box looks similar to this one:

If you have more than one Installed service then ctfmon might come back… For instance

on my system there was an input for my drawing tablet so I could use it as a text input…

which I don’t care about, so I clicked Remove on it.

Step 2b: Disabling in Windows Vista

The setting above for completely disabling text services doesn’t seem to exist in Windows Vista

as far as I can tell, but we can remove the additional input services using a similar method.

Open Control Panel, choose Regional and Language Options and then find “Change keyboards or

other input methods”.

On the Keyboards and Languages tab, you can select Change keyboards.

Now you’ll finally be at the same screen as in Windows XP. You’ll again want to remove the extra

installed services in the list other than your default keyboard language.

Step 3: Remove From Startup

You won’t want to perform this step before doing the others, because it will just be overwritten again. Open up msconfig.exe through the start menu run or search box, and then find the Startup tab.

Find ctfmon in the list and disable it by unchecking the box. Just remember that if you haven’t

disabled ctfmon through one of the other settings this won’t help you a lot.

Step 4: If all else fails

You can just completely unregister the dlls that run the alternative input services by running these two commands from the run box (one at a time)

Command:


Regsvr32.exe /u msimtf.dll
Regsvr32.exe /u msctf.dll

If you perform this step, you should also use Step 3 to get rid of the startup entries.

Step 5: Reboot

Reboot your computer and then open a Microsoft Office application if you do have that installed.

Verify that ctfmon.exe is not running.

For more information you can read the Microsoft article on the subject.

Comments

Hacking via Cloning Site Using Kali Linux

Hacking via Cloning Site Using Kali Linux Hacking via Cloning Site Using Kali Linux SET Attack Method : SET stands for Social Engineering Toolkist , primarily written by David Kennedy . The Social-Engineer Toolkit (SET) is specifically designed to perform advanced attacks against the human element. SET was designed to be released with the http://www.social-engineer.org launch and has quickly became a standard tool in a penetration testers arsenal. The attacks built into the toolkit are designed to be targeted and focused attacks against a person or organization used during a penetration test. Actually this hacking method will works perfectly with DNS spoofing or Man in the Middle Attack method. Here in this tutorial I’m only writing how-to and step-by-step to perform the basic attack , but for the rest you can modified it with your own imagination. In this tutorial we will see how this attack methods can owned your com...

Defacing Sites via HTML Injections (XSS)

Defacing Sites via HTML Injections Defacing Sites via HTML Injections What Is HTML Injection: "HTML Injection" is called as the Virtual Defacement Technique and also known as the "XSS" Cross Site Scripting. It is a very common vulnerability found when searched for most of the domains. This kind of a Vulnerability allows an "Attacker" to Inject some code into the applications affected in order to bypass access to the "Website" or to Infect any particular Page in that "Website". HTML injections = Cross Site Scripting, It is a Security Vulnerability in most of the sites, that allows an Attacker to Inject HTML Code into the Web Pages that are viewed by other users. XSS Attacks are essentially code injection attacks into the various interpreters in the browser. These attacks can be carried out using HTML, JavaScript, VBScript, ActiveX, Flash and other clinet side Languages. Well crafted Malicious Code can even hep the ...

Hacking DNN Based Web Sites

Hacking DNN Based Web Sites Hacking DNN Based Web Sites Hacking DNN (Dot Net Nuke) CMS based websites is based on the Security Loop Hole in the CMS. For using that exploit we will see the few mentioned points which illustrates us on how to hack any live site based on Dot Net Nuke CMS. Vulnerability : This is the know Vulnerability in Dot Net Nuke (DNN) CMS. This allows aone user to Upload a File/Shell Remotely to hack that Site which is running on Dot Net Nuke CMS. The Link's for more Information regarding this Vulnerability is mentioned below - http://www.exploit-db.com/exploits/12700/ Getting Started : Here we will use the Google Dork to trace the sites that are using DNN (Dot Net Nuke) CMS and are vulnerable to Remote File Upload. How To Do It : Here, I an mentioning the few points on how to Search for the existing Vulnerability in DNN. Let'...

Excellent tricks and techniques of Google Hacks

Frontpage.. very nice clean search results listing !! I magine with me that you can steal or know the password of any web site designed by "Frontpage". But the file containing the password might be encrypted; to decrypt the file download the program " john the ripper". To see results; just write in the ( http://www.google.com/ ) search engine the code: "# -FrontPage-" inurl:service.pwd ============================================== This searches the password for "Website Access Analyzer", a Japanese software that creates webstatistics. To see results; just write in the ( http://www.google.com/ ) search engine the code: "AutoCreate=TRUE password=*" ============================================== This is a query to get inline passwords from search engines (not just Google), you must type in the query followed with the the domain name without the .com or .net. To see results; just write in the ( http://www.google.co...

Hacking via BackTrack using SET Attack Method

Hacking via BackTrack using SET Attack Method Hacking via BackTrack using SET Attack 1. Click on Applications, BackTrack, Exploit Tools, Social Engineering Tools, Social Engineering Toolkit then select set.

ROHIT PATEL

Search This Blog