Hello!
Windows XP SP3
CIS 5.3.176757.1236, Antivirus isn’t installed.
Firewall Custom Policy
Defense Paranoid Policy
cfp.exe very often opens and closes C:\Windows\system32\msctf.dll.
Process Monitor Logs:
Date & Time: 29.01.2011 23:42:32
Event Class: File System
Operation: QueryOpen
Result: SUCCESS
Path: C:\WINDOWS\system32\MSCTF.dll
TID: 1968
Duration: 0.0000134
CreationTime: 15.04.2008 15:00:00
LastAccessTime: 29.01.2011 23:42:32
LastWriteTime: 15.04.2008 15:00:00
ChangeTime: 16.01.2011 1:31:54
AllocationSize: 299 008
EndOfFile: 297 984
FileAttributes: A
Date & Time: 29.01.2011 23:42:32
Event Class: File System
Operation: CreateFile
Result: SUCCESS
Path: C:\WINDOWS\system32\MSCTF.dll
TID: 1968
Duration: 0.0000173
Desired Access: Execute/Traverse, Synchronize
Disposition: Open
Options: Synchronous IO Non-Alert, Non-Directory File
Attributes: n/a
ShareMode: Read, Delete
AllocationSize: n/a
OpenResult: Opened
Date & Time: 29.01.2011 23:42:32
Event Class: File System
Operation: CreateFileMapping
Result: ACCESS DENIED
Path: C:\WINDOWS\system32\MSCTF.dll
TID: 1968
Duration: 0.0001341
SyncType: SyncTypeCreateSection
PageProtection: PAGE_EXECUTE
Date & Time: 29.01.2011 23:42:32
Event Class: File System
Operation: CloseFile
Result: SUCCESS
Path: C:\WINDOWS\system32\MSCTF.dll
TID: 1968
Duration: 0.0000165
This occurs very often and “i\o other” counter grows fast - about 5 million by an hour.
What is the reason?
P.S.
There was an advice to turn off Microsoft Text Services - https://forums.comodo.com/help-for-v3/msctfdll-t17367.0.html, but it isn’t acceptable in my case, as I’m not an English user.
Best regards, SE
