MS Win10 Compattelrunner

MS Compattelrunner.exe is set in Norton360 firewall settings as "Block" but the other day I noticed very slow system response times and, on checking, compattelrunner was running (again).

As usual it was hogging all the disk and reporting my stuff back to MS.

It is a bit concerning that this "malware" from MS seems to be able to disregard the Norton360 firewall settings. The process is owned by TrustedInstaller on Win10 (probably shouldn't really be trusted then should it?!) but if MS can bypass the firewall like this then I'm sure that other, less trustworthy, operators can do the same.

FWIW!! Even Windows firewall isn't designed to block a legitimate Windows process from running. Compattelrunner is designed to ensure even OLDER hardware will continue to function with Windows and the version you are using.And YES, it does indeed send data back to Microsoft. You can limit that data with the setting shown below in Windows 10 settings. If you scroll down further in this setting area you can select NEVER to send Microsoft your feedback as well. Otherwise as shown in my previous posted link, you can disable it in the Windows Task Scheduler.

limit data sent to microsoft here.png

I WOULD, conversely check the file location of the instance you are seeing to ensure it indeed isn't malware in disguise. I don't see this appear within task manager at every boot-up, it WILL load on irregular intervals as the OS has it set in system task scheduler. 

compattelrunner file location.pngFor peace of mind run a FULL system scan with Norton. DO NOT run NPE as it is seriously prone to false positives. Removing falsely flagged files can leave your system not bootable. Run a secondary scan with Malwarebytes to look for issues Norton doesn't focus on as well. Please let us know what is found if anything so we can assist further.

Cheers

It is still possible for the process to be running but the Norton firewall may still be blocking its access to the internet. The firewall does not block apps and processes from running.

 

Hello PA Stoker. I have asked your thread be moved to the Norton 360 board where it will get the proper exposure for an answer. 

The process you reference is a legitimate process and NOT malware. On most systems it is related to the level of telemetry you have set to send to Microsoft and is found within your Windows 10 settings. Please have a look at this article as a reference.

Cheers