CTFMON.EXE dll injection? Normal or virus?

system · 2007-05-01T18:32:38.000Z

I have a cool firewall that detects dll injections and applications attempting to edit other apps memory, etc. Anyways, I got this pop up:

CTFMON.EXE is attempting to inject its components into another process (which is MSCTF.DLL)

Maybie, I should be posting this in the website that made my firewall, but I figure that you guys might now if this behavior is normal or not since you deal with viruses alot.

FreewheelinFrank · 2007-05-01T18:43:34.000Z

What Does the Ctfmon.exe File Do? Ctfmon.exe monitors the active windows and provides text input service support for speech recognition, handwriting recognition, keyboard, translation, and other alternative user input technologies.

http://support.microsoft.com/kb/282599

msctf.dll is a module which belongs to the Microsoft Text Service Module.

http://www.processlibrary.com/directory/files/msctf/

Considering the DLL is a text service module and the EXE monitors active windows and provides text input service support, the behaviour doesn’t sound particularly suspicious.

Announcements