COMODO Internet Security

COMODO Internet Security

by COMODO

What is COMODO Internet Security?

COMODO Internet Security is software application developed by COMODO. It is most commonly found on computers running Windows 7 with nearly 75.87% of installations running this operating system. COMODO Internet Security's installer is typically 98.00 MB in size and installs around 64 files. The most common release is 5.10.31649.2253 with 24.70% of all installations currently using this version.

COMODO Internet Security is most popular in the United States with 42.53% of installations residing in this country.

COMODO Internet Security adds 4 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, COMODO Internet Security is known to create 3 firewall exceptions to allow inbound and outbound connectivity.

About COMODO Internet Security?

Comodo Internet Security (CIS) is a comprehensive internet security suite developed by Comodo Group, designed to safeguard Microsoft Windows users. It provides anti-malware (antivirus) protection, a personal firewall, a sandbox, and a Host-based Intrusion Prevention System (HIPS) known as Defense+. CIS is offered in four editions: Comodo Internet Security (standard edition), Comodo Internet Security Plus, Comodo Internet Security Pro, and Comodo Internet Security Complete, catering to a range of security needs.

Software Behaviors

Services:
  • cmdagent.exe runs as a service named 'COMODO Internet Security Helper Service' (cmdAgent) "COMODO Internet Security Helper Service".
  • cmdvirth.exe runs as a service named 'COMODO Virtual Service Manager' (cmdvirth).
Firewall:
  • cmdagent.exe is added as a firewall exception for 'C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe'.
  • cfpupdat.exe is added as a firewall exception for 'C:\Program Files\COMODO\COMODO Internet Security\cfpupdat.exe'.
  • cfp.exe is added as a firewall exception for 'C:\Program Files\COMODO\COMODO Internet Security\cfp.exe'.
Scheduled tasks:
  • cfpconfg.exe is scheduled as a task named 'COMODO Scan {D122332D-758F-4070-BB35-0B7DD95552CF}' (runs weekly on Mondays at 9:00 AM).
  • cistray.exe is scheduled as a task with the class '{B1B084E8-2B55-485E-A8F7-10ADA7FA1F4B}' (runs on registration).
  • cmdinstall.exe is scheduled as a task with the class '{854B5144-FE2B-4F7A-96E9-764575ECB0DE}' (runs on registration).
  • virtkiosk.exe is scheduled as a task with the class '{F9C03A61-D8DF-42BC-8677-28A28CBC2FD4}' (runs on registration).

Startup Entries

Startup tasks:
  • cfpconfg.exe is automatically launched at startup through a scheduled task named COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85}.
  • cistray.exe is automatically launched at startup through a scheduled task named Comodo Startup.
  • cis.exe is automatically launched at startup through a scheduled task named COMODO Welcome {CEB54B45-2B5E-4FF5-9223-6735CD80FE69}.
Registry entries:
  • cistray.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'COMODO' and executes as "C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe".
  • cis.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'COMODO Internet Security' and executes as C:\Program Files\COMODO\COMODO Internet Security\cis.exe.
  • killswitch.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'KSBootLog' and executes as "C:\Program Files\COMODO\COMODO Internet Security\KillSwitch.exe" -b.
  • cfp.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'COMODO Internet Security' and executes as C:\Program Files\COMODO\COMODO Internet Security\cfp.exe.

Software Details

URL:
https://www.comodo.com/home/internet-security/free-internet-security.php
Support:
–
Installation path:
C:\Program Files\COMODO\COMODO Internet Security\
Uninstaller:
MsiExec.exe /I{D6AB1F5B-FED6-49A9-9747-327BD28FB3C7}
Size:
98.00 MB
Language:
English

COMODO Internet Security Executable Details

Primary executable:
CisTray.exe
Name:
COMODO Internet Security
Path:
C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe
MD5:
d67c4c1bae2b6236f21a115e8316d16c
SHA-1:
–
SHA-256:
–
Files installed by COMODO Internet Security
File Type Filename MD5
DLL
cavwpps.dll
944e5fc8dfe7ea1ad02e095e2b817fc7
EXE
cavwp.exe
de0542043906b3c7fed1c259d54a23ae
DLL
cavshell.dll
6bc9c22bbc1837734ecfd135f466b208
EXE
cavscan.exe
e270aa89af8acbe1d5be3127136bd9fd
DLL
signmgr.dll
73ec75c38053596dbe594d63e4cd3e79
SYS
cmdhlp.sys
0ab6e8d34782e83aeeceee76bc788957
SYS
cmdguard.sys
923659525adac632ea6f94570cce1561
SYS
inspect.sys
8e8c4f5de79216e56a2e61d573c4f9b3
SYS
cmderd.sys
348a7fddf0d7354ed6308af96eef4f54
DLL
CmdWRHlp.dll
f14853c32944c1d3380e86af19aa8ac4