COMODO Antivirus

COMODO Antivirus

by COMODO

What is COMODO Antivirus?

COMODO Antivirus is software application developed by COMODO. It is most commonly found on computers running Windows 7 with nearly 52.08% of installations running this operating system. COMODO Antivirus's installer is typically 247.00 MB in size and installs around 55 files. The most common release is 7.0.55655.4142 with 22.18% of all installations currently using this version.

COMODO Antivirus is most popular in the United States with 46.21% of installations residing in this country.

COMODO Antivirus adds 5 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times.

Software Behaviors

Services:
  • cmdvirth.exe runs as a service named 'COMODO Virtual Service Manager' (cmdvirth).
  • cmdagent.exe runs as a service named 'COMODO Internet Security Helper Service' (CmdAgent) "COMODO Internet Security Helper Service".
Scheduled tasks:
  • cfpconfg.exe is scheduled as a task named 'COMODO Scan {DBB22600-F6F5-41E4-866D-B11CBC208853}' (runs weekly on Sundays at 10:00).
  • cis.exe is scheduled as a task named 'COMODO Telemetry {18AD3DFA-30C0-4B5F-84F7-F1870B1A4921}' (Next runs on 7/26/2018 at 12:59 AM).
  • CisTray.exe is scheduled as a task with the class '{F533530B-90CD-4A0D-BE0C-5676B84616AF}' (runs on registration).
  • cmdinstall.exe is scheduled as a task with the class '{854B5144-FE2B-4F7A-96E9-764575ECB0DE}' (runs on registration).
  • virtkiosk.exe is scheduled as a task with the class '{F9C03A61-D8DF-42BC-8677-28A28CBC2FD4}' (runs on registration).

Startup Entries

Startup tasks:
  • CisTray.exe is automatically launched at startup through a scheduled task named 1.
  • cis.exe is automatically launched at startup through a scheduled task named COMODO Telemetry {18AD3DFA-30C0-4B5F-84F7-F1870B1A4921}.
  • cfpconfg.exe is automatically launched at startup through a scheduled task named COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85}.
Registry entries:
  • cistray.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'COMODO Internet Security' and executes as C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe.
  • cis.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'COMODE Firewall 10' and executes as "C:\Program Files\COMODO\COMODO Internet Security\cis.exe".
  • KillSwitch.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'KSBootLog' and executes as "C:\Program Files\COMODO\COMODO Internet Security\KillSwitch.exe" -b.

Software Details

URL:
https://www.comodo.com/home/internet-security/antivirus.php
Support:
–
Installation path:
C:\Program Files\COMODO\COMODO Internet Security\
Uninstaller:
MsiExec.exe /I{F1EC4151-805B-4097-B9BB-7D71A417AAF1}
Size:
247.00 MB
Language:
English

COMODO Antivirus Executable Details

Primary executable:
CisTray.exe
Name:
COMODO Antivirus
Path:
C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe
MD5:
–
SHA-1:
–
SHA-256:
–
Files installed by COMODO Antivirus
File Type Filename MD5
DLL
cmdhtml.dll
e079b121b84c3143f18a5af5fdcdce92
EXE
bsm_chrome.exe
01621507ad7ba23353d14e5de7ed2cbf
EXE
virtkiosk.exe
ccdd316d648bde961b0696a7febbbdff
DLL
msica.dll
e8f2c84e24245fdc1f148ca263863987
EXE
KillSwitch.exe
0e1a11ed60b663c6a11da2b39bd18122
EXE
cmdvirth.exe
e621ec50b1a85d875904cc0741f03d16
DLL
cmdurlflt.dll
fcd1eca94975cb845610c906afd4c991
DLL
cmdupdps.dll
032250248e037cbbdcd7977ab8444baa
EXE
cmdupd.exe
e0b4d307ff05c0ce175cc5dca2032cca
DLL
cmdtrust.dll
0eeab281ebeadb7e0bf90e2a41ba9eac