ctpmon??? ***

fred381 · 02-05-2007, 10:29 PM

I have this process called ctpmon.exe, and a little redshield with a white cross appearing on my task bar. Each time i try to terminate the process, more shields appear. i've tried running avg and avast and it still appears. I am new to this stuff and any help would be greatly appreciated.

Thanks a lot.

Cricket57 · 02-06-2007, 02:49 AM

CTPMON.EXE is part of an infection known as "Registry Cleaner". This is another one of those "fake" security solutions (e.g. Virus Burst, AntiVermins, Pest Capture, etc) which attempt to fool users into downloading a fix to clean their computer, which in fact is a further malware payload.

I'm not sure if any free programs are capable of removing this yet (from my testing with this infection I haven't seen one succeed yet), but Prevx1 is definitely capable of removing this. Info on the malware file here:
http://spywarefiles.prevx.com/RRHEAH...n%252Eexe.html

If you decide to use Prevx, please be aware this is a pay-for product - ALTHOUGH they do offer a fully functional 30 day free trial which will remove all infections during this period. If you do not wish to keep it after clean-up then simply uninstall it.

Hope this helps :o)

**Glaswegian** · 02-06-2007, 06:17 AM

fred381

That file, and it's associated friends are covered by one of our specialised tools. Please follow the 5 Steps link in my signature and post a HijackThis Log for review.

02-05-2007, 10:29 PM	#1 (permalink)
fred381 Registered User Join Date: Feb 2007 Posts: 5 OS: xp	ctpmon??? *** I have this process called ctpmon.exe, and a little redshield with a white cross appearing on my task bar. Each time i try to terminate the process, more shields appear. i've tried running avg and avast and it still appears. I am new to this stuff and any help would be greatly appreciated. Thanks a lot.

02-06-2007, 02:49 AM	#2 (permalink)
Cricket57 Registered User Join Date: May 2006 Posts: 19 OS: Win XP	CTPMON.EXE is part of an infection known as "Registry Cleaner". This is another one of those "fake" security solutions (e.g. Virus Burst, AntiVermins, Pest Capture, etc) which attempt to fool users into downloading a fix to clean their computer, which in fact is a further malware payload. I'm not sure if any free programs are capable of removing this yet (from my testing with this infection I haven't seen one succeed yet), but Prevx1 is definitely capable of removing this. Info on the malware file here: http://spywarefiles.prevx.com/RRHEAH...n%252Eexe.html If you decide to use Prevx, please be aware this is a pay-for product - ALTHOUGH they do offer a fully functional 30 day free trial which will remove all infections during this period. If you do not wish to keep it after clean-up then simply uninstall it. Hope this helps :o) Last edited by Cricket57; 02-06-2007 at 02:50 AM.

02-06-2007, 06:17 AM	#3 (permalink)
Glaswegian Moderator/ Rangemaster TSF Academy; Analyst, Security Team; Oor Wullie; TSF Surgeon and Resident Comic Join Date: Sep 2005 Location: Glasgow Posts: 25,512 OS: Win XP Pro SP3 / Win 7 Pro My System Blog Entries: 10	fred381 That file, and it's associated friends are covered by one of our specialised tools. Please follow the 5 Steps link in my signature and post a HijackThis Log for review. __________________ Iain - Defender of the Haggis and all things Scottish. I don't help by PM - post in the Forums. PC Safety & Security::PC running a bit slow?::Donate::Photographers Corner