Welcome, Guest. Please login or register.
January 03, 2010, 10:45:41 PM

Login with username, password and session length

347298 Posts
38414 Topics
87300 Members

Latest Member: bugmenot42

Search:     Advanced search | Tag Cloud
+  Welcome to the Comodo Forum
|-+  Desktop Security Products
| |-+  Comodo Internet Security - CIS
| | |-+  Leak Testing/Attacks/Vulnerability Research
| | | |-+  Is something malicious going on?
« previous next »
Pages: [1] Go Down Print
Author Topic: Is something malicious going on?  (Read 1579 times)
James505
Comodo Family Member
***
Offline Offline

Posts: 50


« on: June 06, 2009, 10:46:44 AM »

It started yesterday, the process dfrgntfs.exe keeps running by itself, and it always seems to run the second i get off, when it runs it attempts to modify my system files, I assume the changes were blocked because in my defense+logs there was lots of modification attempts by drfgntfs.exe, it was attempting to modify some important files..
Through a google search i have discovered dfrgntfs.exe is windows disk defragmentation service, but I am not trying to defrag anything.
The process is being called at random throughout the day, should I allow it to make these modifications or should i just keep letting defense+ intercede?
Here is a screenshot.
Logged
eXPerience
Malware Researcher Virus Removal Helper Advanced Tweak Freak Crazy Little Devil
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 6629


Why not ? The choice is yours !


« Reply #1 on: June 06, 2009, 11:06:38 AM »

dfrgntfs.exe is part of Windows. It's indexing the files. AFAIK nothing malicious is happening.
If you want to disable it : go to the hard drive's properties and untick the Indexing Services box.

Xan
Logged

James505
Comodo Family Member
***
Offline Offline

Posts: 50


« Reply #2 on: June 06, 2009, 12:07:46 PM »

Thanks for the reply, I figured it had something to do with the indexing service, thank you for the clarification! Thumb Up
Logged
wj32
Comodo Loves me
****
Offline Offline

Posts: 123



WWW
« Reply #3 on: June 07, 2009, 09:16:44 PM »

dfrgntfs.exe is part of Windows. It's indexing the files. AFAIK nothing malicious is happening.
If you want to disable it : go to the hard drive's properties and untick the Indexing Services box.

Xan

Indexing Service? Sad It's the NTFS defragger, and you can configure it by running dfrgui. It runs in the background automatically by default.
Logged
eXPerience
Malware Researcher Virus Removal Helper Advanced Tweak Freak Crazy Little Devil
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 6629


Why not ? The choice is yours !


« Reply #4 on: June 08, 2009, 02:22:59 AM »

Yeah, but I heard that disabling the indexing service is 1 way to disable the autodefrag method in windows.
Is the problem still occuring ?
If so, try this :

1) XP : open start --> run --> then type : regedit
    Vista : in the searcher type regedit
2) Please navigate to :  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Dfrg\BootOptimizeFunction
doubleclick "Enable" , there should be a "Y" now, please set it to "N".

Please post back if it worked.

Xan
Logged

James505
Comodo Family Member
***
Offline Offline

Posts: 50


« Reply #5 on: June 08, 2009, 10:11:24 AM »

It wasn't really a problem to begin with, I was just curios why this was happening.
I'm pretty sure it is part of indexing service because i allowed it to run and my computer is running great.
Thanks for all the help.
Logged
wj32
Comodo Loves me
****
Offline Offline

Posts: 123



WWW
« Reply #6 on: June 10, 2009, 04:28:20 AM »

(Sorry for the late reply)

What does defragmentation have to do with file indexing? If you turn off indexing the defragger will still run when the computer is inactive, and if you turn off defrag scheduling the indexing service will still be on.
Logged
Tags:
Pages: [1] Go Up Print 
« previous next »
Jump to:  

SSL Certificate Free Virus Removal Firewall
Page created in 0.149 seconds with 17 queries.
Powered by SMF 1.1.11 | SMF © 2006, Simple Machines LLC
Seo4Smf v0.2 © Webmaster's Talks
Design by 7dana.com