COMODO Antivirus

COMODO Antivirus

by COMODO

What is COMODO Antivirus?

COMODO Antivirus is software application developed by COMODO. It is most commonly found on computers running Windows 7 with nearly 52.08% of installations running this operating system. COMODO Antivirus's installer is typically 247.00 MB in size and installs around 55 files. The most common release is 7.0.55655.4142 with 22.18% of all installations currently using this version.

COMODO Antivirus is most popular in the United States with 46.21% of installations residing in this country.

COMODO Antivirus adds 5 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times.

Software Behaviors

Services:
  • cmdvirth.exe runs as a service named 'COMODO Virtual Service Manager' (cmdvirth).
  • cmdagent.exe runs as a service named 'COMODO Internet Security Helper Service' (CmdAgent) "COMODO Internet Security Helper Service".
Scheduled tasks:
  • cfpconfg.exe is scheduled as a task named 'COMODO Scan {DBB22600-F6F5-41E4-866D-B11CBC208853}' (runs weekly on Sundays at 10:00).
  • cis.exe is scheduled as a task named 'COMODO Telemetry {18AD3DFA-30C0-4B5F-84F7-F1870B1A4921}' (Next runs on 7/26/2018 at 12:59 AM).
  • CisTray.exe is scheduled as a task with the class '{F533530B-90CD-4A0D-BE0C-5676B84616AF}' (runs on registration).
  • cmdinstall.exe is scheduled as a task with the class '{854B5144-FE2B-4F7A-96E9-764575ECB0DE}' (runs on registration).
  • virtkiosk.exe is scheduled as a task with the class '{F9C03A61-D8DF-42BC-8677-28A28CBC2FD4}' (runs on registration).

Startup Entries

Startup tasks:
  • CisTray.exe is automatically launched at startup through a scheduled task named 1.
  • cis.exe is automatically launched at startup through a scheduled task named COMODO Telemetry {18AD3DFA-30C0-4B5F-84F7-F1870B1A4921}.
  • cfpconfg.exe is automatically launched at startup through a scheduled task named COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85}.
Registry entries:
  • cistray.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'COMODO Internet Security' and executes as C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe.
  • cis.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'COMODE Firewall 10' and executes as "C:\Program Files\COMODO\COMODO Internet Security\cis.exe".
  • KillSwitch.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'KSBootLog' and executes as "C:\Program Files\COMODO\COMODO Internet Security\KillSwitch.exe" -b.

Software Details

URL:
https://www.comodo.com/home/internet-security/antivirus.php
Support:
–
Installation path:
C:\Program Files\COMODO\COMODO Internet Security\
Uninstaller:
MsiExec.exe /I{F1EC4151-805B-4097-B9BB-7D71A417AAF1}
Size:
247.00 MB
Language:
English

COMODO Antivirus Executable Details

Primary executable:
CisTray.exe
Name:
COMODO Antivirus
Path:
C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe
MD5:
–
SHA-1:
–
SHA-256:
–
Files installed by COMODO Antivirus
File Type Filename MD5
DLL
dbghelp.dll
423a41f5fa8609c176bfae35c704ddd1
DLL
libeay32.dll
5e18d02760c57b3a0dd293da60567d8a
DLL
7za.dll
4f5c6c4b946a045f3d371c3af3d57e52
DLL
ssleay32.dll
afab8e22db3b291dc38cecf5419346a0
DLL
framework.dll
2fa0d2383c02ff6790b8c05ff12268db
EXE
autoruns.exe
a58411b519f0eb40d53f202c348f75c2
EXE
cmdagent.exe
5b33c08de574da58606b61cfccd3f082
DLL
Platform.dll
50e79891849ae9fdcce3ebba67aa4288
DLL
cmdfile.dll
b4e7379924034ad7e9755b3fcfa66c0f
DLL
recognizer.dll
51bbfc938065218f23719684562e7ca4