COMODO Firewall

COMODO Firewall

by COMODO

What is COMODO Firewall?

COMODO Firewall is software application developed by COMODO. It is most commonly found on computers running Windows 7 with nearly 51.92% of installations running this operating system. COMODO Firewall's installer is typically 97.00 MB in size and installs around 54 files. The most common release is 7.0.55655.4142 with 17.85% of all installations currently using this version.

COMODO Firewall is most popular in the United States with 40.41% of installations residing in this country.

COMODO Firewall adds 5 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times.

Software Behaviors

Services:
  • cmdvirth.exe runs as a service named 'COMODO Virtual Service Manager' (cmdvirth).
  • cmdagent.exe runs as a service named 'COMODO Internet Security Helper Service' (CmdAgent) "COMODO Internet Security Helper Service".
Scheduled tasks:
  • cfpconfg.exe is scheduled as a task named 'COMODO Scan {DBB22600-F6F5-41E4-866D-B11CBC208853}' (runs weekly on Saturdays at 7.00).
  • cis.exe is scheduled as a task named 'COMODO Telemetry {18AD3DFA-30C0-4B5F-84F7-F1870B1A4921}' (Next runs on 7/26/2018 at 12:59 AM).
  • CisTray.exe is scheduled as a task with the class '{F533530B-90CD-4A0D-BE0C-5676B84616AF}' (runs on registration).
  • cmdinstall.exe is scheduled as a task with the class '{854B5144-FE2B-4F7A-96E9-764575ECB0DE}' (runs on registration).
  • virtkiosk.exe is scheduled as a task with the class '{F9C03A61-D8DF-42BC-8677-28A28CBC2FD4}' (runs on registration).

Startup Entries

Startup tasks:
  • cistray.exe is automatically launched at startup through a scheduled task named 1.
  • cis.exe is automatically launched at startup through a scheduled task named COMODO Telemetry {18AD3DFA-30C0-4B5F-84F7-F1870B1A4921}.
  • cfpconfg.exe is automatically launched at startup through a scheduled task named COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85}.
Registry entries:
  • CisTray.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'COMODO' and executes as "C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe".
  • cis.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'COMODO Internet Security' and executes as C:\Program Files\COMODO\COMODO Internet Security\cis.exe.
  • KillSwitch.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'KSBootLog' and executes as "C:\Program Files\COMODO\COMODO Internet Security\KillSwitch.exe" -b.

Software Details

URL:
https://www.comodo.com/home/internet-security/firewall.php
Support:
Installation path:
C:\Program Files\COMODO\COMODO Internet Security\
Uninstaller:
MsiExec.exe /I{F1EC4151-805B-4097-B9BB-7D71A417AAF1}
Size:
97.00 MB
Language:
English

COMODO Firewall Executable Details

Primary executable:
CisTray.exe
Name:
COMODO Firewall
Path:
C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe
MD5:
SHA-1:
SHA-256:
Files installed by COMODO Firewall
File Type Filename MD5
DLL
e079b121b84c3143f18a5af5fdcdce92
EXE
01621507ad7ba23353d14e5de7ed2cbf
EXE
ccdd316d648bde961b0696a7febbbdff
DLL
e8f2c84e24245fdc1f148ca263863987
EXE
0e1a11ed60b663c6a11da2b39bd18122
EXE
e621ec50b1a85d875904cc0741f03d16
DLL
fcd1eca94975cb845610c906afd4c991
DLL
032250248e037cbbdcd7977ab8444baa
EXE
e0b4d307ff05c0ce175cc5dca2032cca
DLL
0eeab281ebeadb7e0bf90e2a41ba9eac