COMODO Antivirus

COMODO Antivirus

by COMODO

What is COMODO Antivirus?

COMODO Antivirus is software application developed by COMODO. It is most commonly found on computers running Windows 7 with nearly 52.08% of installations running this operating system. COMODO Antivirus's installer is typically 247.00 MB in size and installs around 55 files. The most common release is 7.0.55655.4142 with 22.18% of all installations currently using this version.

COMODO Antivirus is most popular in the United States with 46.21% of installations residing in this country.

COMODO Antivirus adds 5 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times.

Software Behaviors

Services:
  • cmdvirth.exe runs as a service named 'COMODO Virtual Service Manager' (cmdvirth).
  • cmdagent.exe runs as a service named 'COMODO Internet Security Helper Service' (CmdAgent) "COMODO Internet Security Helper Service".
Scheduled tasks:
  • cfpconfg.exe is scheduled as a task named 'COMODO Scan {DBB22600-F6F5-41E4-866D-B11CBC208853}' (runs weekly on Sundays at 10:00).
  • cis.exe is scheduled as a task named 'COMODO Telemetry {18AD3DFA-30C0-4B5F-84F7-F1870B1A4921}' (Next runs on 7/26/2018 at 12:59 AM).
  • CisTray.exe is scheduled as a task with the class '{F533530B-90CD-4A0D-BE0C-5676B84616AF}' (runs on registration).
  • cmdinstall.exe is scheduled as a task with the class '{854B5144-FE2B-4F7A-96E9-764575ECB0DE}' (runs on registration).
  • virtkiosk.exe is scheduled as a task with the class '{F9C03A61-D8DF-42BC-8677-28A28CBC2FD4}' (runs on registration).

Startup Entries

Startup tasks:
  • CisTray.exe is automatically launched at startup through a scheduled task named 1.
  • cis.exe is automatically launched at startup through a scheduled task named COMODO Telemetry {18AD3DFA-30C0-4B5F-84F7-F1870B1A4921}.
  • cfpconfg.exe is automatically launched at startup through a scheduled task named COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85}.
Registry entries:
  • cistray.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'COMODO Internet Security' and executes as C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe.
  • cis.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'COMODE Firewall 10' and executes as "C:\Program Files\COMODO\COMODO Internet Security\cis.exe".
  • KillSwitch.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'KSBootLog' and executes as "C:\Program Files\COMODO\COMODO Internet Security\KillSwitch.exe" -b.

Software Details

URL:
https://www.comodo.com/home/internet-security/antivirus.php
Support:
–
Installation path:
C:\Program Files\COMODO\COMODO Internet Security\
Uninstaller:
MsiExec.exe /I{F1EC4151-805B-4097-B9BB-7D71A417AAF1}
Size:
247.00 MB
Language:
English

COMODO Antivirus Executable Details

Primary executable:
CisTray.exe
Name:
COMODO Antivirus
Path:
C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe
MD5:
–
SHA-1:
–
SHA-256:
–
Files installed by COMODO Antivirus
File Type Filename MD5
DLL
CCE.dll
1b7feee0edde96eab623eb1c407c2132
DLL
cavwpps.dll
944e5fc8dfe7ea1ad02e095e2b817fc7
EXE
cavwp.exe
de0542043906b3c7fed1c259d54a23ae
DLL
cavshell.dll
b26f29af7cca5a131f226f80b7facf33
EXE
cavscan.exe
ad843aab0ad8f1243252b6daccbc8f1c
DLL
signmgr.dll
bc8ecd98f3f9c38a4989b92e0f87d19a
SYS
cmdhlp.sys
da60bbd619bb974e555d32b980784660
SYS
cmdguard.sys
3775459e4c4ca1e0e8e10d42943ad88d
SYS
inspect.sys
71b1a24fae0de352f9c98da117ca1150
SYS
cmderd.sys
2df152c6e98331afd5946e8c7968b53a