CPF 3.0.21.329 hammering the MSCTF.dll file

[Guest]

[mtab]

I am reinstalling WinXP SP2 - after downloading all the critical updates from Windows Update, I've installed: Opera, chipset drivers (NForce4), NVidia drivers (FW139), Audigy drivers from Creative (from 2006) and Comodo FP 3.0.21.329.
After installing Comodo, my hard disk started to make a horrible "seek" noise - Filemon from sysinternals shows that cfp.exe is continuously hammering MSCTF.dll file - a few hundered times per minute...

02:36   cfp.exe:1740   QUERY INFORMATION   C:\WINDOWS\system32\MSCTF.dll   SUCCESS   Attributes: A   
02:36   cfp.exe:1740   OPEN   C:\WINDOWS\system32\MSCTF.dll   SUCCESS   Options: Open  Access: 00100020   
02:36   cfp.exe:1740   QUERY INFORMATION   C:\WINDOWS\system32\MSCTF.dll   SUCCESS   FileNameInformation   
02:36   cfp.exe:1740   CLOSE   C:\WINDOWS\system32\MSCTF.dll   SUCCESS

   

[mtab]

Killing CTFMON.EXE process and/or disabling "Advanced Text Services" in Control Panel (Regional Settings) resolves the hammering problem.

[jerry18]

Hi,
   something similar was already reported here
http://forums.comodo.com/bug_reports/slow_gui_reason_maybe_found-t20585.0.html
without any feedback 

Jerry

[SS26]

Hi,

Can you please check the following:
"All applications group" of defense+ has default "allow" action for msctf.dll. To verify this go to d+ >advanced>computer security policy>all applications>access rights>windows/winevent hooks>modify>allowed hooks: %windir%\system32\msctf.dll.

If msctf.dll is allowed for "all applications", make sure you experience described issue if this group is at its default place (see screenshot).
Does different placing (e. g. in the middle/end of list, after certain apps) of "all applications" group results in hammering MSCTF.dll?
If so, what app exactly tries to access msctf.dll (is anything related shown under d+ log)?

[Tags:]