The My Opera forums have been replaced with forums.opera.com. Please head over there to discuss Opera's products and features

See the new Forums

strange problem: ctfmon.exe always starts opera.exe *32

Forums » Opera for Windows/Mac/Linux » Opera browser

You need to be logged in to post in the forums. If you do not have an account, please sign up first.

Go to last post

20. September 2011, 05:22:56

dfn

Posts: 53

strange problem: ctfmon.exe always starts opera.exe *32

I was checking out my background processes (via Task Manager) and services, and saw I had a copy of opera (opera.exe *32) open even though I closed opera a few minutes ago. I killed the process. It showed up again. I opened up Process Explorer, and killed the opera process once again. This time, I saw ctfmon.exe startup (in Process Explorer) and launch opera.exe *32. I killed it again, but ctfmon.exe came back and started it again.

I'm not quick enough to kill the ctfmon.exe process, but I was able to locate the executable for it: it is in my Roaming directory in a folder called "1085." I deleted the folder, but it appeared again. I deleted ctfmon.exe inside the folder, but that appeared again as well. I suspect that even if I was quick enough to kill the ctfmon.exe process, it would just pop up again. Anyone have any clue why?

What's going on and why is ctfmon.exe always launching opera.exe *32?

20. September 2011, 06:18:30

Moderator

sgunhouse

Volunteer

Posts: 66788

http://support.microsoft.com/kb/282599

Nothing there suggesting ctfmon.exe would start Opera, maybe something else is starting both of them?

20. September 2011, 06:31:05 (edited)

Do a virus scan of your computer. There is no thing named ctfmon.exe IN THE ROAMING directory. ctfmon.exe is only and only located in
C:\Windows\system32 directory.

Originally posted by sgunhouse:

maybe something else is starting both of them?


As written by dfn, in his case ctfmon.exe is located in his Roaming folder. ctfmon.exe is never located in Roaming directory, as for Windows XP/Vista/7 (doesn't matter if it's 32-bit system or 64-bit system). ctfmon.exe is a system process and activates the Alternative User Input Text Input Processor (TIP) so it's located in the system32 directory only; if it's located anywhere else it's fake and most probably a dangerous malware.
Windows 7 SP1 x86 edition and Windows XP Service Pack 3.
If you need any help from me with regards to Opera, please make a comment on any of my blog posts.
Support Opera wishes

20. September 2011, 06:33:22

dfn

Posts: 53

Thank you for the replies.
Guess it is time to go clean it.

Forums » Opera for Windows/Mac/Linux » Opera browser