I may have a variant of CWS, but the shredder can’t see it. Neither can Ad-Aware or Spybot. Symptoms:
Ctfmon.exe is in my startup list. If I remove it, it comes back.
Ctfmon.exe is in my system32 directory. If I delete/rename it, a new copy appears momentarily.
Now, is this normal behavior? I don’t see why a program should naturally be this persistent. I’m tempted to just nuke every registry entry to ctfmon.exe and see what happens. Is there a better way to get rid of it?
It’s normal - it’s part of MS Office. It doesn’t do anything particularly useful (assuming you don’t use weird input devices) and can be turned off. While you’re doing it, you can turn off Office Assistant if you like.
Apparently there’s a variant of CWS that uses the executable “ctfmon32.exe”, though - if that’s what you’ve got, delete the relevant file.