Comodo A/V alerts on one of its own files?

Correct Lisa. This is normal behaviour when CIS detects a command line command being executed from within an app. CIS creates a script to replicate the command/s.

HTH
Ewen :slight_smile: