Quote from Vlk:
ctfmon.exe is a helper process used in Windows to support input in multiple languages. Your observation is right, Windows injects it into the SafeZone as soon as an interactive process is started there, but I don't think it's a problem.
Call it a feature. Wink
Not only a proud geek, but a proud AVAST! Free owner.
Netbook LG X11: XP Home Edition SP3, Avast Free! Malwarebytes Anti-Malware Free, Mozilla Firefox, NoScript, AdBlock Plus, Windows Firewall
Linux Ubuntu, 34 bit, Mozilla Firefox, NoScript, AdBlock Plus, Foxy Proxy, myWOT