COMODO Internet Security

COMODO Internet Security

by COMODO

What is COMODO Internet Security?

COMODO Internet Security is software application developed by COMODO. It is most commonly found on computers running Windows 7 with nearly 75.87% of installations running this operating system. COMODO Internet Security's installer is typically 98.00 MB in size and installs around 64 files. The most common release is 5.10.31649.2253 with 24.70% of all installations currently using this version.

COMODO Internet Security is most popular in the United States with 42.53% of installations residing in this country.

COMODO Internet Security adds 4 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, COMODO Internet Security is known to create 3 firewall exceptions to allow inbound and outbound connectivity.

About COMODO Internet Security?

Comodo Internet Security (CIS) is a comprehensive internet security suite developed by Comodo Group, designed to safeguard Microsoft Windows users. It provides anti-malware (antivirus) protection, a personal firewall, a sandbox, and a Host-based Intrusion Prevention System (HIPS) known as Defense+. CIS is offered in four editions: Comodo Internet Security (standard edition), Comodo Internet Security Plus, Comodo Internet Security Pro, and Comodo Internet Security Complete, catering to a range of security needs.

Software Behaviors

Services:
  • cmdagent.exe runs as a service named 'COMODO Internet Security Helper Service' (cmdAgent) "COMODO Internet Security Helper Service".
  • cmdvirth.exe runs as a service named 'COMODO Virtual Service Manager' (cmdvirth).
Firewall:
  • cmdagent.exe is added as a firewall exception for 'C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe'.
  • cfpupdat.exe is added as a firewall exception for 'C:\Program Files\COMODO\COMODO Internet Security\cfpupdat.exe'.
  • cfp.exe is added as a firewall exception for 'C:\Program Files\COMODO\COMODO Internet Security\cfp.exe'.
Scheduled tasks:
  • cfpconfg.exe is scheduled as a task named 'COMODO Scan {D122332D-758F-4070-BB35-0B7DD95552CF}' (runs weekly on Mondays at 9:00 AM).
  • cistray.exe is scheduled as a task with the class '{B1B084E8-2B55-485E-A8F7-10ADA7FA1F4B}' (runs on registration).
  • cmdinstall.exe is scheduled as a task with the class '{854B5144-FE2B-4F7A-96E9-764575ECB0DE}' (runs on registration).
  • virtkiosk.exe is scheduled as a task with the class '{F9C03A61-D8DF-42BC-8677-28A28CBC2FD4}' (runs on registration).

Startup Entries

Startup tasks:
  • cfpconfg.exe is automatically launched at startup through a scheduled task named COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85}.
  • cistray.exe is automatically launched at startup through a scheduled task named Comodo Startup.
  • cis.exe is automatically launched at startup through a scheduled task named COMODO Welcome {CEB54B45-2B5E-4FF5-9223-6735CD80FE69}.
Registry entries:
  • cistray.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'COMODO' and executes as "C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe".
  • cis.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'COMODO Internet Security' and executes as C:\Program Files\COMODO\COMODO Internet Security\cis.exe.
  • killswitch.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'KSBootLog' and executes as "C:\Program Files\COMODO\COMODO Internet Security\KillSwitch.exe" -b.
  • cfp.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'COMODO Internet Security' and executes as C:\Program Files\COMODO\COMODO Internet Security\cfp.exe.

Software Details

URL:
https://www.comodo.com/home/internet-security/free-internet-security.php
Support:
–
Installation path:
C:\Program Files\COMODO\COMODO Internet Security\
Uninstaller:
MsiExec.exe /I{D6AB1F5B-FED6-49A9-9747-327BD28FB3C7}
Size:
98.00 MB
Language:
English

COMODO Internet Security Executable Details

Primary executable:
CisTray.exe
Name:
COMODO Internet Security
Path:
C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe
MD5:
d67c4c1bae2b6236f21a115e8316d16c
SHA-1:
–
SHA-256:
–
Files installed by COMODO Internet Security
File Type Filename MD5
DLL
cmdavcen.dll
c4cf4fdf653833d52ef04bacb717a2fc
DLL
cmdaruns.dll
95832351a2006f729cd67e110deac28a
DLL
cisresc.dll
7a86ad5396c6b4cb5243cc50bda2291f
DLL
cisevlog.dll
6cbc56330ceee068b4bb7e022a3ca997
DLL
cisbfps.dll
3e7ca64a62ab69ec41900e72cbf12ea1
EXE
cisbf.exe
c635ac25a4615489b6e5b1798715fde3
EXE
cis.exe
337d20365768c14bf97a316fbe802947
EXE
cfpconfg.exe
c9703198a5d0c53fab5f89ef6828fbed
EXE
CCE.exe
6d71e54f3d810b72192ef0bc24e3d090
DLL
CCE.dll
1b7feee0edde96eab623eb1c407c2132