COMODO Antivirus

COMODO Antivirus

by COMODO

What is COMODO Antivirus?

COMODO Antivirus is software application developed by COMODO. It is most commonly found on computers running Windows 7 with nearly 52.08% of installations running this operating system. COMODO Antivirus's installer is typically 247.00 MB in size and installs around 55 files. The most common release is 7.0.55655.4142 with 22.18% of all installations currently using this version.

COMODO Antivirus is most popular in the United States with 46.21% of installations residing in this country.

COMODO Antivirus adds 5 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times.

Software Behaviors

Services:
  • cmdvirth.exe runs as a service named 'COMODO Virtual Service Manager' (cmdvirth).
  • cmdagent.exe runs as a service named 'COMODO Internet Security Helper Service' (CmdAgent) "COMODO Internet Security Helper Service".
Scheduled tasks:
  • cfpconfg.exe is scheduled as a task named 'COMODO Scan {DBB22600-F6F5-41E4-866D-B11CBC208853}' (runs weekly on Sundays at 10:00).
  • cis.exe is scheduled as a task named 'COMODO Telemetry {18AD3DFA-30C0-4B5F-84F7-F1870B1A4921}' (Next runs on 7/26/2018 at 12:59 AM).
  • CisTray.exe is scheduled as a task with the class '{F533530B-90CD-4A0D-BE0C-5676B84616AF}' (runs on registration).
  • cmdinstall.exe is scheduled as a task with the class '{854B5144-FE2B-4F7A-96E9-764575ECB0DE}' (runs on registration).
  • virtkiosk.exe is scheduled as a task with the class '{F9C03A61-D8DF-42BC-8677-28A28CBC2FD4}' (runs on registration).

Startup Entries

Startup tasks:
  • CisTray.exe is automatically launched at startup through a scheduled task named 1.
  • cis.exe is automatically launched at startup through a scheduled task named COMODO Telemetry {18AD3DFA-30C0-4B5F-84F7-F1870B1A4921}.
  • cfpconfg.exe is automatically launched at startup through a scheduled task named COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85}.
Registry entries:
  • cistray.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'COMODO Internet Security' and executes as C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe.
  • cis.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'COMODE Firewall 10' and executes as "C:\Program Files\COMODO\COMODO Internet Security\cis.exe".
  • KillSwitch.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'KSBootLog' and executes as "C:\Program Files\COMODO\COMODO Internet Security\KillSwitch.exe" -b.

Software Details

URL:
https://www.comodo.com/home/internet-security/antivirus.php
Support:
Installation path:
C:\Program Files\COMODO\COMODO Internet Security\
Uninstaller:
MsiExec.exe /I{F1EC4151-805B-4097-B9BB-7D71A417AAF1}
Size:
247.00 MB
Language:
English

COMODO Antivirus Executable Details

Primary executable:
CisTray.exe
Name:
COMODO Antivirus
Path:
C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe
MD5:
SHA-1:
SHA-256:
Files installed by COMODO Antivirus
File Type Filename MD5
DLL
58cc6bb55e296992bf1db7c50fd95609
DLL
ddb691a6f65b209c2cc6b35ce971a3c7
DLL
adf02fa2e12e977afe7152cc6a80eba9
DLL
910aab018ac0e0ddf7b44deb87353b9b
EXE
595126d0325ab2938019fc2c4a7fe701
DLL
4257dc29b1bdc4055a6ebb7c09aed6e3
DLL
6d0f0e84ac20ece0b2641e0427f81734
DLL
cb1beb388b81e3ffda10dcf995556f2c
DLL
27e89bd5db9a457d2cc21d31f3543c2e
DLL
88e0853929b91c0afc4a21fed0049868