Well, mine for the Dutch version of Windows XP, says in it's properties
- it's the CTF loader from Microsoft
- it's 15 kB
- it came with XP SP3 in May 2008
And I find references on Google that say:
CTFMON.EXE (CTF Loader). Supports speech recognition, handwriting
recognition, and other Alternative User Input services.
Now check yours. When in doubt, send it to virustotal.com and let them have a second look.
It could be a false positive.
I am currently testing webroot internet security 2010 and after a full scan of my computer it found trojan-downloader-popwin C:\Windows\system32\ctfmon.exe and some of its registry keys... I am pretty sure this file is a component of MS office but i could really need some help because i really don't know what to do with the scan results.... Thanks in advance