CPF hammering the MSCTF.dll file

I am reinstalling WinXP SP2 - after downloading all the critical updates from Windows Update, I’ve installed: Opera, chipset drivers (NForce4), NVidia drivers (FW139), Audigy drivers from Creative (from 2006) and Comodo FP
After installing Comodo, my hard disk started to make a horrible “seek” noise - Filemon from sysinternals shows that cfp.exe is continuously hammering MSCTF.dll file - a few hundered times per minute…

02:36 cfp.exe:1740 QUERY INFORMATION C:\WINDOWS\system32\MSCTF.dll SUCCESS Attributes: A
02:36 cfp.exe:1740 OPEN C:\WINDOWS\system32\MSCTF.dll SUCCESS Options: Open Access: 00100020
02:36 cfp.exe:1740 QUERY INFORMATION C:\WINDOWS\system32\MSCTF.dll SUCCESS FileNameInformation
02:36 cfp.exe:1740 CLOSE C:\WINDOWS\system32\MSCTF.dll SUCCESS

Killing CTFMON.EXE process and/or disabling “Advanced Text Services” in Control Panel (Regional Settings) resolves the hammering problem.

something similar was already reported here
without any feedback :-\



Can you please check the following:
“All applications group” of defense+ has default “allow” action for msctf.dll. To verify this go to d+ >advanced>computer security policy>all applications>access rights>windows/winevent hooks>modify>allowed hooks: %windir%\system32\msctf.dll.

If msctf.dll is allowed for “all applications”, make sure you experience described issue if this group is at its default place (see screenshot).
Does different placing (e. g. in the middle/end of list, after certain apps) of “all applications” group results in hammering MSCTF.dll?
If so, what app exactly tries to access msctf.dll (is anything related shown under d+ log)?

[attachment deleted by admin]