Helping people with computers... one answer at a time.

Ctfmon.exe is simply part of Microsoft Office.

What is ctfmon.exe?

Ctfmon is a part of Microsoft Office. From the Microsoft Knowledgebase:

"What Is the Ctfmon.exe (Ctfmon.exe) File?

Ctfmon.exe activates the Alternative User Input Text Input Processor (TIP) and the Microsoft Office Language Bar.

What Does the Ctfmon.exe File Do?

Ctfmon.exe monitors the active windows and provides text input service support for speech recognition, handwriting recognition, keyboard, translation, and other alternative user input technologies."

You can read the entire knowledgebase article, which includes instructions on disabling Ctfmon: What Is CTFMON and What Does It Do?

Article C2136 - July 24, 2004 « »

Share this article with your friends:

Share this article on Facebook Tweet this article Email a link to this article
Leo Leo A. Notenboom has been playing with computers since he was required to take a programming class in 1976. An 18 year career as a programmer at Microsoft soon followed. After "retiring" in 2001, Leo started Ask Leo! in 2003 as a place for answers to common computer and technical questions. More about Leo.

Not what you needed?

August 18, 2004 6:37 PM

When I shut down windows XP Pro, CTFMON.exe doesn't close and hangs shutdown. just started doing this.

August 21, 2004 9:41 AM

If you don't need it, I'd suggest following the link in the article and disabling it.

August 27, 2004 1:13 AM

First I want to thank you for your really suitable article. I was interested to the "ctfmon.exe" file because it causes me some troubles using a specific application... I tried to uninstall it using the Microsoft procedure (I just have Office XP installed with Windows ME), but It seems I guessed wrong... The file is already installed and starts on Windows inizializing. How can I definitively uninstall and delete this file? Does exist a possibility that this file may be used by another application (i.e. Norton Utilities)? Thank you for your attention.

September 9, 2004 5:51 AM

I have the same problem and it started recently.
I tried deleting the actual executable file, it comes back, took it out of registry, it comes back, disabled in MSCONFIG and took the entry off the startup list. It came back. Ran 3 different spyware removal programs, it just keeps coming back. Since this recently started happening, and I never had this problem before, I do believe something in my machine is using it, something my machine picked up recently.

September 10, 2004 10:56 PM

Same thing, and yes it does seem to be causing a lot of problems. So far unable to find any explanation for the nonremoval issue, system unstable since this started running.

October 4, 2004 4:17 PM

Really, its easy to get rid of.

Control Panel -> Regional and Language Options -> Languages TAB -> Details BUTTON -> Language Bar BUTTON (under "Preferences")

Select the "Turn off advanced text services" check box.

Parul Arora
October 16, 2004 11:49 PM

I tried to delete the ctfmon.exe by uninstalling the shared office components from the office installed on my mellinium but the ctfmon.exe keeps coming back

October 17, 2004 8:48 AM

Did you look at the knowledgebase article referenced in my article above? It has several answers to scenarios such as you describe.

November 2, 2004 11:09 PM

Thanks for the info Leo. I have finally been able to disable ctfmon.exe which was causing Adwatch to report it as a new registry change every time XP booted. The problem only started after installing SP2, so I guess Bill Gates and Co. decided we need it turned on. I'm not using Office XP or the language bar, so I'm sure I don't need it turned on.

spineless coward
April 16, 2005 12:11 AM

one of the components ctfmon.exe uses, msctf.dll, seems to be seriously damaged since XP/SP2. because windows tries to start ctfmon.exe for every app and window opened on the system, the crash of ctfmon.exe (with what looks like an invalid address dereference) causes applications to get confused and fail. it's a major nuisance.

Ottima Kapoor
May 10, 2005 8:03 AM

Hi friends go to this link, and you would find several ways to keep the file from running at the background.

June 10, 2005 6:55 AM

I'm also having problems with Ctfmon.exe. And for those who tendd to take a lax standpoint here, I must protest. I, for 1, scrutinize anything Corp. America claims merely for the fact that their sole motive is to take my wallet.

RE Ctfmon.exe. If the thing isn't needed then it should be there. It does take up resources, it may be exploitable and the fact the it keeps coming back is annoying. I found freeware prgm that's suppose to work. It's called CTFMON_Kill.exe.

I've tried to microsoft to no avail and I think it's my design. I'm running W2K and my control panel does not have a "region and language" selection. But when I tried disabling the office xp features it also disabled other features I do want. So as usual when things like this arise with ne. I'll burry into it, my girlfriend will leave me...again and and finally emerge victorious with some rediculous tail of how I accidentally figured it out. GOOD LUCK OT THERE!


June 10, 2005 7:00 AM

Ahh... found another spot that's good disabling info.

June 10, 2005 9:30 AM

SUCCESS!! and my girlfriend didn't leave me!!

Ok to remove / disable / kill to death Ctfmon.exe is a multi step process. Warning..Geez the boilerplate warning. This process involves regedit and if you jack it up neither I nor "Leo" are responsible. Seriously though folks, it’s not rocket science BUT if you have no experience editing a windows registry then hold off till you do or find a pro. K this is win2k specific but similar to the rest, but you can go to
where instructions for all Windows are listed. However please finish this read because there are a few minor corrections to the above site’s instructions.

1. Use Task Manger to kill the Ctfmon.exe process if it's running.
2. Regedit #1: Click START, RUN, type REGEDIT then select OK. At this point I had to deviate from the Scansoft link. Navigate to HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run- Please notice the “-“ on the end of the second Hkey. In those two keys, delete the entire entry with Cftmon.exe in it.
3. Lets be thorough with this next step. Stay in Regedit and close up all the keys to where it’s nice and neat. Then in the REGEDIT tree single click on “My Computer”. In the menu bar select EDIT then FIND… Type in Ctfmon (no extension) then click FIND NEXT. FYI: if the search stops cuz of a finding F3 resumes the search. Ok now I came across several more instances. Most were MRU logs of my search queries and harmless. But I did come across 2 more entries that were scandalous. Whatever you find delete every instance.
4. Once complete close out the Registry editor but DO NOT REBOOT YET!

Alteration of Office XP. I’m running Office 2002 and Word XP which was my Ctfmon problem.

1. CONTROL PANEL, ADD-REMOVE PRGMS, find your most senior source of XP’s office suite. Mine was Word XP. Then select CHANGE. After a bit of prep by your system you’ll get a window with 3 options. select ADD / REMOVE FEATURES click NEXT. Click the + next to “Office Shared Features”. Menu will expand and click on the HDD lookin’ icon designated “Alternate User Input”. Click “NOT AVAILABLE” then below select “UPDATE” Ok., close all that out.

LAST disabling of two related DLL’s Msctf.dll / Msimtf.dll.

1. Click START, RUN and type the following verbatim: regsvr32 /u msimtf.dll then click OK. 2. START, RUN, type : regsvr32 /u msctf.dll. Click OK then close it all up and reboot.

NOTE on SYNTAX: In this stage, for each entry, there is a single space between the “2” and “/”. No space B/T “/” and “u” and a single space B/T “u” and “m”

Do a reboot and once back up and running test it out. Ctfmon.exe should be gone/ I really hope this helped, there’s no sign of the Ctfmon ilk on my system. Good luck

1. Tired of Norton AntiVirus's 200+ meg grip on your system but returing the poorest results? Try AVG free addition, AntiVir or Avast. All are 100% free and consistantly beat Macaffe and Norton in performance tests.

2. Adware?? Spybot S&D and AdwareSE are the best of the best and totally free.
3. Registry cleaning and maintenance? Try CCleaner and/or RegSeeker (the latter is a bit more potent so use that one with care). Both are free.


February 16, 2006 2:27 PM

Don't have any xp office programs period. And I see the ctfmon on my start up in Miscong. How do I get rid of it? Not in my add/remove program either.. It doesn't show up in adware

April 6, 2006 6:04 AM

My Webroot spyware asks me if I want to install ctfmon.exe every time I boot up. I always click on no, but it is running in Task Manager anyway. When I run a search for ctfmon.exe on my c: drive I get 2 locations, i386 and system 32, but when I add hidden files to the search I also get 2 temporary internet files as well. Are the temporary internet files adware? One is titled ctfmon.exe and the other is titled: ads?client=ca-pub01708...followed by an unending (I can't find the end without opening the file) string of numbers, letters and characters.

I think the temp internet files are adware. Have you seen this since the last post of 2/16?

Will deleting these files be sufficient? Why is the Webroot program not protecting against this? This program is not my choice - this is my work computer. I am also not allowed any administrative tasks on this computer.

Thanks very much.

July 14, 2006 4:03 PM

Ctfmon.exe showed up in my task manager as well all of a sudden for the first time ever. The only new things I've done on this computer was 1. I had to reactive windows after a reformat and 2. I installed the new IE7. I'm thinking it's related to one of those... please don't send me a link to Microsoft's explanation on it.... I've read it and they merely state it is part of Office XP which I have never owned, used, tried anything, and they also suggest not removing it...??? hmmm... because it might damage my Office XP??? hmmmm... yeah right.... but they show you how to disable it... whatever... Since I've never had Office XP on this system...ever... I searched my computer and registry for ctfmon.exe... found one in the prefetch folder and one in the system/32 folder... deleted ever little one I found.... what do I care if it messes up a program I never had???? We'll see what happens. I know someone said it seemed safe and they would leave it alone for now... I tend to be a little more on the safe side or paranoid if you prefer and would rather get rid of it knowing I don't even have the program it's suppose to be associated with and deal with any issues that may occur from the removal than find out later it was a keylogger or worm or something. After reading this forum I did follow further advice from amwhoam and unregister the other 2 dll's.

It seems to me this really needs to be investigated since several people are reporting seeing it show up out of the blue that don't have or never have had the program it is supposedly associated installed on the computer in question.

September 23, 2006 1:06 AM

CTFMON.EXE >What Does the Ctfmon.exe File Do?

Ctfmon.exe monitors

October 25, 2006 10:34 PM

Disable it by going to start/control panel/regional and Language options.
Click the language tab/details/ advanced...
here check: turn off advanced text service!!!
Thats it! No registry editing or spyware program..

enjoy! Frank

October 29, 2006 4:45 PM

Frank, your disable instructions worked great. I saw this language window come up after installing IE7, checked it to make sure english was the setting and that was it. Should have went further. Thanks again. Dan

October 29, 2006 9:18 PM

Hi Dan
Yes..this feature gets loaded by default after you install ie7. I think also when you install windows for the first time..can be useful if you travel a lot, but also can be accesed manually whenever you need a keyboard or language change. Frank

November 1, 2006 4:56 AM

Dear Frank, thanks so much for your instrs. Have been trying a long time to get rid of that cftmon, but was scared to because of the vague warning given at the Microsoft co. site. And also because monkeying around with the registry, as described above, is not for me. Here all along was your simple fix! Rgds.

November 18, 2006 11:13 PM

Great information Frank - thank you. I have been trying to rid my computer of ctfmon for several days now. (Since installing IE7)

BTW turning it off in task manager does NO good as it simply turns itself back on repeatedly.

Disabling it from language options was genious. Thanks again.

November 22, 2006 5:41 AM

I just installed ie7 yesterday and noticed ctfmon.exe running in background. when the language icon for ie7 was at the bottom near the clock, ctfmon.exe was now in the msconfig file. i closed the icon and ctfmon.exe was removed from msconfig but remained running in background in task manager. i noticed that the system was hanging a bit when i logged users off also.

December 1, 2006 1:07 AM

My system is slow and is hanging. am looking for viruses and worm to delete.some say ctfmon.exe is a virus, some say is not harmful.i saw it in msconfig.i want to know if i should delete it or not.

Adrian Dando
December 12, 2006 1:57 PM

Tried your suggestion, of disabling advanced text services, i'm afraid it made no difference at all ! ctfmon exe is a heavy user of memory and appears to serve no purpose at all, any other ideas on how to disable it? tried three things so far , no luck.
Help would be appreciated.

December 13, 2006 5:08 PM

Regardless of using Frank's method, ctfmon.exe is still run on System startup. In order to disable it from startup, type "msconfig" at the Start Menu/Run prompt, go to the Startup tab and unselect ctfmon.exe as a Startup item. This option may only be available to WinXP.

December 14, 2006 8:08 PM

Start. Control Panel. Regional and Language Options. Languages TAB. Details BUTTON. Advanced TAB. "Turn off advanced text services" CHECK BOX.

December 28, 2006 12:32 AM

Thanks Kris!! That worked great!

That Darn Republican
January 9, 2007 11:18 AM

1) Just asking... does CTFMON.exe does it enable
keystroke recorders or register entries?

2) You wouldn't be related to a Chris Noteboom
from Grand Rapids would you? lol just curious.

Leo Notenboom
January 9, 2007 1:17 PM

1) I don't understand your question. CTFMON has nothing to do with keystroke records. If you mean "registrY entries", then I'm sure that CTFMON probably has/creates a few.

2) Nope. At least not without going back MANY generations, to whenever the change in spelling happened. :-)

January 23, 2007 12:05 PM

"Start. Control Panel. Regional and Language Options. Languages TAB. Details BUTTON. Advanced TAB. "Turn off advanced text services" CHECK BOX."

That turned it off for me. No problem

April 11, 2007 9:29 AM

Spybot identifies ctfmon as a possible parasite. Some websites say if it is anywhere but in C:\windows\system32 then it is a threat. I ran a search and have the following 3:
ctfmon Application in C:\windows\system32
ctfmon Stuffit Encoded file in C:\windows\prefetch
ctfmon EX_File in C:\windows\I386

are any of these threats?

April 14, 2007 1:23 PM

the three locations are acceptable locations.

September 26, 2007 5:37 PM

go in there... search for "ctfmon"
Delete it, you should never see from it again, if you do... just delete it, new text document inside System32, save as "ctfmon.exe" then whenever it tries to start, it wont start ;)

Michael V
October 24, 2007 3:05 PM

ctfmon."txt" is a file included in "Family Keylogger" a program that is considered a virus I think that is what the gentleman below was refering too.

November 9, 2007 3:34 PM

Thanks for the info I disabled it in language bar advanced settings and at the same time always wanted to know how to shut it off since it overides startup configs and readds itself as enabled if already disabled or even not disabled, I personaly have not needed to use this process as of yet and have already shut down numerous services I dont need unless I was on a network which should give me a couple frams per second more in my applications or so I hope.

November 27, 2007 6:50 AM

Using XPpro, the Advanced tab in Language Settings only gives me the option of selecting which languages non-Unicode programs can display. I can then check a box to apply these settings to the currect user and all new users. The box is unchecked. Using CrapCleaner (brilliant!) I can look at the Start up progs and CTFMON is there. Can I simply delete it from the Startup prog list?

Bill Ratz
December 15, 2007 10:36 AM

I will chance not being erased and hopefully you will answer. I am configuring a System clean up and repair utility and I am not planning on using the anti-virus portion in the suite of utilities. It's Fixit 8. I was going thru start up programs and services when I was alerted by some portion of the new program to not believe that the ctfmon in services was the real ctfmon. If that is true then is has survived 2 versions of Panda, MS One Care and the Malicious Software tool that comes periodically eithe once or twice a month from MS. Would that detect such a program? It says that the ctfmon I have was installed bt RAIDYS TROGEN and refered me to a Paul Collins Startup kit, on the MS Web site. I don't know what its doing and I don't know any more after reading the Paul Collins piece or the thread on this site. It warns me to delete. I suppose this could be a story as well and don't know how to handle this if at all. Can you explain this for me please? Thanks in any case.

Michael Polidori
January 16, 2008 10:32 AM

I tried to stop ctfmon from running but when I reached step 5 of microsoft procedures...

"Microsoft Windows 2000 and Microsoft Windows XP:
1. Quit all Office...
5. In the Maint Mode Options box, select Add or Remove Features..."

...I had no option to Add or Remove Features.

I always check my task manager to stop programs from running that I don't need. On 16 Jan 08 I found ctfmon running and stopped it. It restarted repeatedly.

I went to Microsoft knowledge base and found a procedure to stop it from running but that procedure was wrong in regard to Win XP (see above). I found CTFMON.EXE-0E17969B in windows prefetch created on 16 jan 08, the day I found it running in task manager, while the ctfmon.exe and CTFMON._xe were created on 26 Aug 04 in sytem32 and I386 folders.

Spysweeper (from microsoft), Spybot S&D and AdAware all ID ctfmon as a problem. What's up?

I followed JAGUART's procedures to stop ctfmon but won't know if that worked until after restart. Right now the program is not listed in my task manager.

Michael Polidori
[email address removed]

Clay S
March 22, 2008 6:02 PM

I haven't had Spybot or any other recognize ctfmon as spyware, but I have had several times when Word would not open. "has encountered error" & others. Awhile back I found an article that said to uncheck ctfmon in start up, restart, then recheck, restart. that helped for a few days, then back to same thing. I did as Jaguar suggested, word opens for now, but I'll wait & see if it solves it in the long run.

June 12, 2008 5:58 AM

Question: What program is running CTF mon?
This buggy program complains everytime i open a tab. Office not installed so which program is running it?

April 18, 2009 1:20 AM

My computer becomes very slow and when i look in running processes there is he again ctfmon.exe. I
I remove it from running process and my computer works again. But 20 minutes later he is back and my computer becomes slow again.
I remove it from the start up and it adds it self back again.
I am sure its a virus. Help!

May 4, 2009 12:05 AM

Can you help me? Some time ago Spybot came up with a message that "CTFMON.EXE was replaced by CTFMON.exe.
I rejected the change but my laptop seems to freeze up and locks the keyboard and touch pad. I used to remove the plug and when the battery was low and the low battery message appeared the laptop un-freezed and then I could put the plug back in and work normally on electricity power.
Now my battery is completely dead and I cannot use the computer as it runs on electric power only and after boot it locks the keyboard and touch pad. It runs on safe mode without problems, but I have no idea what to do to make it run properly.
Please help.

August 30, 2009 7:08 AM

Amazing how the number of different possible configurations lead to so many different possible solutions. I am running XP Pro, SP3 and MS Office 2007. My problems from CTFMON began suddenly and not after loading anything on my system--it had been stable for months. At first, I could not use most MS applications (IE7, Office 2007). I tried the KB solution as others had suggested but I did not have those particular options/features visible in order to disable them.

Eventually I had to uninstall/reinstall Office 2007. This allowed me to use MS applications but I still had start up errors with CTFMON. I tried using the Control Panel/Regional Language options solution but kept getting an error message (some Shell and rundll errors) when I attempted to click on the Details button on the Language tab! The only thing that worked for me, at this point at least, was to disable CTFMON in startup. I know that hasn't worked for everyone, but such are the joys of computing these days! If I ever need to get into those advanced language options, I know I'll need to work on other solutions but, for now, everything is finally working again.

Best of luck to all!

January 13, 2010 9:26 AM

Thanks for the article! More about ctfmon here:

February 13, 2010 12:22 PM

I don't even have MS Office installed (I used Openoffice from the first day of install) but I still have ctfmon.exe running, how is that possible. Currently my XP sp3 runs for unspecified number of hours/days without issues, but applications suddenly start hanging one after the other, so I reboot the moment I see the first hang, and guess what, ctfmon.exe is always hanging. Not sure if it is also hanging for the same reason as the other apps, or if it is the root cause of the OS hang. I will see if uninstalling it will help with the stability and report back.

Comments on this entry are closed.

If you have a question, start by using the search box up at the top of the page - there's a very good chance that your question has already been answered on Ask Leo!.

If you don't find your answer, head out to to ask your question.