I’m not sure I have 2 entries.
Like I’ve written, I’ve modified the Group “Comodo Firewall Pro” in Defense+ Computer Security Policy so that the tasks in this group could not be terminated : protection settings - process terminations set to Yes.
When I used Ctrl/alt/del to terminate cfp.exe, I got an error message ==> acces refused.
When logging off from my session to word under another, 2 tasks cfp.exe were running ( not good … )
I’ve looked at the Defense+ events, and several entries like that
Action Terminate process
Target e:\Program Files\Comodo\Firewall\cfp.exe
I’ve understood that csrss couldn’t terminate cfp.exe when I logoff.
In the policy group, in terminate process, I have entered exceptions the file group “Windows System Application”.
Now, when I logoff and log under another account, all is OK ( just one cfp.exe in memory ).