COMODO Firewall

COMODO Firewall

by COMODO

What is COMODO Firewall?

COMODO Firewall is software application developed by COMODO. It is most commonly found on computers running Windows 7 with nearly 51.92% of installations running this operating system. COMODO Firewall's installer is typically 97.00 MB in size and installs around 54 files. The most common release is 7.0.55655.4142 with 17.85% of all installations currently using this version.

COMODO Firewall is most popular in the United States with 40.41% of installations residing in this country.

COMODO Firewall adds 5 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times.

Software Behaviors

Services:
  • cmdvirth.exe runs as a service named 'COMODO Virtual Service Manager' (cmdvirth).
  • cmdagent.exe runs as a service named 'COMODO Internet Security Helper Service' (CmdAgent) "COMODO Internet Security Helper Service".
Scheduled tasks:
  • cfpconfg.exe is scheduled as a task named 'COMODO Scan {DBB22600-F6F5-41E4-866D-B11CBC208853}' (runs weekly on Saturdays at 7.00).
  • cis.exe is scheduled as a task named 'COMODO Telemetry {18AD3DFA-30C0-4B5F-84F7-F1870B1A4921}' (Next runs on 7/26/2018 at 12:59 AM).
  • CisTray.exe is scheduled as a task with the class '{F533530B-90CD-4A0D-BE0C-5676B84616AF}' (runs on registration).
  • cmdinstall.exe is scheduled as a task with the class '{854B5144-FE2B-4F7A-96E9-764575ECB0DE}' (runs on registration).
  • virtkiosk.exe is scheduled as a task with the class '{F9C03A61-D8DF-42BC-8677-28A28CBC2FD4}' (runs on registration).

Startup Entries

Startup tasks:
  • cistray.exe is automatically launched at startup through a scheduled task named 1.
  • cis.exe is automatically launched at startup through a scheduled task named COMODO Telemetry {18AD3DFA-30C0-4B5F-84F7-F1870B1A4921}.
  • cfpconfg.exe is automatically launched at startup through a scheduled task named COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85}.
Registry entries:
  • CisTray.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'COMODO' and executes as "C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe".
  • cis.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'COMODO Internet Security' and executes as C:\Program Files\COMODO\COMODO Internet Security\cis.exe.
  • KillSwitch.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'KSBootLog' and executes as "C:\Program Files\COMODO\COMODO Internet Security\KillSwitch.exe" -b.

Software Details

URL:
https://www.comodo.com/home/internet-security/firewall.php
Support:
–
Installation path:
C:\Program Files\COMODO\COMODO Internet Security\
Uninstaller:
MsiExec.exe /I{F1EC4151-805B-4097-B9BB-7D71A417AAF1}
Size:
97.00 MB
Language:
English

COMODO Firewall Executable Details

Primary executable:
CisTray.exe
Name:
COMODO Firewall
Path:
C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe
MD5:
–
SHA-1:
–
SHA-256:
–
Files installed by COMODO Firewall
File Type Filename MD5
DLL
dbghelp.dll
423a41f5fa8609c176bfae35c704ddd1
DLL
libeay32.dll
5e18d02760c57b3a0dd293da60567d8a
DLL
7za.dll
4f5c6c4b946a045f3d371c3af3d57e52
DLL
ssleay32.dll
afab8e22db3b291dc38cecf5419346a0
DLL
framework.dll
2fa0d2383c02ff6790b8c05ff12268db
EXE
autoruns.exe
a58411b519f0eb40d53f202c348f75c2
EXE
cmdagent.exe
5b33c08de574da58606b61cfccd3f082
DLL
Platform.dll
50e79891849ae9fdcce3ebba67aa4288
DLL
cmdfile.dll
b4e7379924034ad7e9755b3fcfa66c0f
DLL
recognizer.dll
51bbfc938065218f23719684562e7ca4