Is "cfmon" a virus of some sort....or what?

[lanni]

I googled for info on "cfmon" but nothing clear was displayed as to what it really is.. I also run hijackthis and it was unclear of this service.. if it is normal then I will leave it of course . Any feedback willl be appreciated ....this is what hijackthis produced

O23 - Service: Sound Sservice Driver (Sound Service) - Unknown owner - C:\WINDOWS\System32\cfmon.exe
Lanni

[{I}{K}{E}]

ctfmon.exe is for Microsoft Office


cfmon.exe seems to be for your soundcard

[lanni]

thanks for the qick reply IKE - it was strang as i never noticed it before thanks again

[99%]

no IKE it cant be right
it just also turned up on my pc recently
it must be bogus or something
cftmon.exe is for languages
cfmon.exe is not on the list of standard processes
spyscanners and intivirus dont pull up anything
but hijack this log does.....
it keeps trying to axess the web....

i will find out what its for but later
me no like

[tesco]

Description:
ctfmon.exe is a part of the Microsoft Office suite. It activates the Alternative User Input Text Input Processor (TIP) and the Microsoft Office XP Language Bar. This program is a non-essential system process, but should not be terminated unless suspected to be causing problems.

You sure you typed it right? never heard of cfmon.exe before...it could be a virus.

edit: it does look like some sort of virus or spyware: http://www.google.ca/search?q=cfmon.exe&sourceid=mozilla-search&start=0&start=0&ie=utf-8&oe=utf-8&client=firefox-a&rls=org.mozilla:en-US:official

[99%]

it is typed cfmon.exe

[Peerzy]

Fits the profile, after all we've all seen the virus that are named after important Windows files like Explorer1.exe insted of Explorer.exe. It makes people scared of deleting the file and thus the virus is kept on the pc.

[nostalgia]

upload the file on this site: http://virusscan.jotti.org/de/
for an on-line malware scan.

[99%]

upload the file on this site: http://virusscan.jotti.org/de/
for an on-line malware scan.
Brilliant site - thanks
and here we have the winners (and the loosers who dont know what it is :dry: )

http://img268.echo.cx/img268/1486/virus1li.jpg

[{I}{K}{E}]

I have that file twice on my pc

C:\WINDOWS\system32
C:\WINDOWS\ServicePackFiles\i386

mine says its a microsoft file :unsure:

and with 'http://virusscan.jotti.org/de/' no virus is found

[99%]

I have that file twice on my pc

C:\WINDOWS\system32
C:\WINDOWS\ServicePackFiles\i386

mine says its a microsoft file :unsure:

and with 'http://virusscan.jotti.org/de/' no virus is found

umm...all i know is that the one on my machine is a virus.
if you look on google for cfmon.exe - you only get 71 hits - most asking wtf it is and no mention by mscrft.com.....
ofcourse if you lok up cftmon.exe you get 1 910 hits

your call...

[nostalgia]

I have that file twice on my pc

C:\WINDOWS\system32
C:\WINDOWS\ServicePackFiles\i386

mine says its a microsoft file :unsure:

and with 'http://virusscan.jotti.org/de/' no virus is found

I don't have it, nor in the system32 folder nor in the Servicepackfiles\i386. Makes you wonder doens't it? You're sure that you scanned the "right" file on the mentioned site?

Another strange find: http://www.liutilities.com/products/wintaskspro/processlibrary/
This is the site form the vendor of Wintasks 5 Pro. The site contains al sort of information about processes and .dll. If you search for cfmon.exe either through the search option or in the lists at the site, it is unknown. Wouldn't you agree that if cfmon.exe was indeed Microsoft's that it would be known over there?

[99%]

agreed....we have a "special" virus
i deleted it with killbox - and am waiting till virus progs catch upto date to total fix

[lanni]

(I thought I would give an update on this mysterious "cfmon.exe) - After updating AVG Antivirus a few secs ago it quickly identified that "cfmon.exe" is a virus and gave the option to delete it(which i did of course) it is still popping up on hijackthis list as "Sound Sservice"(file missing)

[orcutt989]

[QUOTE=nostalgia]
and here we have the winners (and the loosers who dont know what it is :dry: )


Hmm... so this certain group of people is sexually promiscuous or unrestrained or unfastened?


:lol: Just kidding, I make that mistake too. Damn the English language. I just needed some fun in my dull day.

[Akumara]

my old ctfmon.exe process was infested with viruses before i reformatted. I think viruses can effect the process, even it is used for Microsoft Office.

[Chica_]

i have the same damn problem!
is there a way to remove this crap, without having to pay a alot to get a program??

[peat moss]

i have the same damn problem!
is there a way to remove this crap, without having to pay a alot to get a program??


Old problem, you do have an updated Antivirus ? Try an online scan like Trend Micro ?

http://housecall60.trendmicro.com/en/start_corp.asp