Comodo Internet Security, Windows 7 Home Premium.
I cannot get CIS to start properly. It runs fine right after a new installation but after a restart and every start after that, cmdagent.exe starts. cfp.exe starts and is suspended. A second instance of cfp is then started. The Notification area icon does not appear and is shown with an error icon in the Notification area Customize panel. Doubleclicking the desktop icon suspends the running instance and starts another one just like the last one. There is some activity as I do see a small disk load on cfp.exe if I open an Internet Browser.
I have: Uninstalled and reinstalled, running the reinstall as Administrator. Turned off the Windows Firewall. Set all the .exe files in the Comodo directory to run all users as Administrator. Used the Windows Task Scheduler to schedule cfp.exe to run on Startup under the System account. All with no change.
If I turn UAC all the way off. It will run but with errors. I ran the Defense+ troubleshooter and it came back with a report that the install was good but Defense+ still shows an error and it doesn’t appear that the GUI is saving setting changes.
Any help would be appreciated,
Craig
Sounds truly odd. I would say try a clean install of CIS. Start with exporting your current active configuration under More → Manage My Configurations so you can import it after the installation again.
Now uninstall CIS, reboot and run this unofficial clean up tool. Now you should be good to go to try installing CIS again.
Also let us know what other security and networking related programs you have running in the background.
Thanks for your help but I followed your instructions and the new installation is just like the last one.
I did think to clear the Notification Area cache and that has allowed me to restart a working instance of cfp.exe even after a restart in at least once instance. (I didn’t try it again in case it only worked the one time.)
This forum does not allow the post of an HTML file so I have posted the text of the startup here. It’s ugly but it may help.
'Startup [27] ’ report created by AnVir Task Manager Free, 7/7/2010 11:16
N Name Value Product Security Risk Company Startup location When Added to Startup State Status Delayed Startup
1 [x] Adobe ARM “C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe” Adobe Reader and Acrobat Manager Adobe Systems Incorporated Registry: Machine\Run 7/4/2010 08:17 Enabled 0 sec
2 [x] Adobe Gamma Loader.lnk C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe Adobe Gamma Loader Adobe Systems, Inc. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ 7/4/2010 08:17 Enabled 0 sec
3 [x] Adobe PDF Link Helper C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll Adobe PDF Helper for Internet Explorer Adobe Systems Incorporated Internet Explorer: Browser Helper Object: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} 6/24/2010 16:53 Enabled
4 [x] Adobe Reader Speed Launcher “C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe” Adobe Acrobat SpeedLauncher Adobe Systems Incorporated Registry: Machine\Run 7/4/2010 08:17 Enabled 0 sec
5 [x] Agere Modem Call Progress Audio C:\Program Files\LSI SoftModem\agr64svc.exe LSI Soft Modem Call Progress Service LSI Corporation Services: AgereModemAudio 7/4/2010 08:17 Running Enabled
6 [x] AMD External Events Utility C:\windows\system32\atiesrxx.exe AMD External Events Service Module AMD Services: AMD External Events Utility 7/4/2010 08:17 Running Enabled 0 sec
7 [x] Blog This in Windows Live Writer C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll Windows Live Writer Blog This Extension Microsoft Corporation Internet Explorer: Extension: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} 6/24/2010 16:53 Enabled
8 [x] COMODO Internet Security Helper Service “C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe” COMODO Internet Security COMODO Services: cmdAgent 7/7/2010 10:34 Running Enabled 0 sec
9 [x] ConfigFree Gadget Service “C:\Program Files (x86)\TOSHIBA\ConfigFree\CFProcSRVC.exe” ConfigFree Gadget Process Service TOSHIBA CORPORATION Services: ConfigFree Gadget Service 7/4/2010 08:17 Running Enabled
10 [x] ConfigFree Service “C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe” ConfigFree Service Process TOSHIBA CORPORATION Services: ConfigFree Service 7/4/2010 08:17 Running Enabled
11 [x] ConfigFree WiMAX Service “C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe” ConfigFree Service Process TOSHIBA CORPORATION Services: cfWiMAXService 7/4/2010 08:17 Running Enabled
12 [ ] googletalk C:\Users\Craig\AppData\Roaming\Google\Google Talk\googletalk.exe /autostart Google Talk Google Registry: User\Run (Disabled by AnVir) 6/24/2010 17:29 Disabled
13 [x] Java™ Plug-In 2 SSV Helper C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll Java™ Platform SE binary Sun Microsystems, Inc. Internet Explorer: Browser Helper Object: {DBC80044-A445-435b-BC74-9C25C1C588A9} 6/24/2010 16:53 Enabled
14 [x] Office Document Cache Handler C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL Microsoft Office Document Cache Handler Microsoft Corporation Internet Explorer: Browser Helper Object: {B4F3A835-0E21-4959-BA22-42B3008E02FF} 6/24/2010 16:53 Enabled
15 [x] OneNote 2010 Screen Clipper and Launcher.lnk C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE Microsoft OneNote Quick Launcher Microsoft Corporation C:\Users\Craig\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ 7/4/2010 08:17 Running Enabled 0 sec
16 [x] OneNote Linked Notes C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll Microsoft OneNote Internet Explorer Add-in Microsoft Corporation Internet Explorer: Extension: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} 6/24/2010 16:53 Enabled
17 [ ] Partner BHO Class C:\ProgramData\Partner\Partner.dll Partner application Google Inc. Internet Explorer: Browser Helper Object: {83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} 6/24/2010 16:53 Disabled
18 [x] Send to OneNote C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll Microsoft OneNote Internet Explorer Add-in Microsoft Corporation Internet Explorer: Extension: {2670000A-7350-4f3c-8081-5663EE0C6C49} 6/24/2010 16:53 Enabled
19 [x] Sidebar C:\Program Files\Windows Sidebar\sidebar.exe /autoRun Windows Desktop Gadgets Microsoft Corporation Registry: User\Run 7/4/2010 08:17 Running Enabled 0 sec
20 [x] StartCCC “C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe” MSRun Catalyst® Control Center Launcher Advanced Micro Devices, Inc. Registry: Machine\Run 7/4/2010 08:17 Enabled 0 sec
21 [x] TOSHIBA eco Utility Service “C:\Program Files\TOSHIBA\TECO\TecoService.exe” TOSHIBA eco Utility Service TOSHIBA Corporation Services: TOSHIBA eco Utility Service 7/4/2010 08:17 Running Enabled 0 sec
22 [x] TOSHIBA Modem region select service C:\Program Files\TOSHIBA\rselect\RSelSvc.exe /Service RSelSvc Service Application TOSHIBA Corporation Services: RSELSVC 7/4/2010 08:17 Running Enabled
23 [x] TOSHIBA Optical Disc Drive Service C:\Windows\system32\TODDSrv.exe TDCSrv Application TOSHIBA Corporation Services: TODDSrv 7/4/2010 08:17 Running Enabled 0 sec
24 [x] TOSHIBA Power Saver “C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe” TOSHIBA Power Saver TOSHIBA Corporation Services: TosCoSrv 7/4/2010 08:17 Running Enabled 0 sec
25 [x] ToshibaServiceStation “C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe” /hide:60 TOSHIBA Service Station TOSHIBA Corporation Registry: Machine\Run 7/4/2010 08:17 Running Enabled 0 sec
26 [x] TWebCamera “%ProgramFiles%\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe” autorun Registry: Machine\Run 7/4/2010 08:17 Enabled 0 sec
27 [x] Windows Live Sign-in Helper C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll WindowsLiveLogin.dll Microsoft Corporation Internet Explorer: Browser Helper Object: {9030D464-4C02-4ABF-8ECC-5164760863C6} 6/24/2010 16:53 Enabled
You can zip the html file in order to be able to attach it to the topic.
Are you sure you installed the 64 bit version of CIS?
I will remember the .zip file for next time. It is unlikely that it is a conflict with any of these items as I used msconfig to do a “Basic Startup” with only the MS Services, the Comodo Service agent and the .cfp.exe enabled and got the same result.
The installation file is cispremium_installer_x64.exe. The version is 4.1.150349.920.
I could easily be wrong but I seriously think that the conflict it with the UAC because I have it to where I can manually start a second instance of cfp by running a desktop shortcut as Administrator after logon and I always get asked for “permission” (“Do you want to allow…”). It may be that the permission request comes during startup and not getting a response, suspends the GUI.
Workaround:
The following is a workaround not a solution. It is apparent that CIS is not playing nice with UAC. This can be gotten around by using the Windows Task Scheduler to schedule a start of cfp.exe at Logon “with highest privileges”.
Task Scheduler will not be able to “stop existing instance” but it will start a new instance alongside the current Suspended instance.
The GUI will popup on Logon but can be closed to the Icon Tray in a normal fashion.
Hopefully this problem will be corrected in the next update.
There are many ways to disable the CFP start-up
I use the facility in CCleaner, which also allows me to re-activate if I change my mind.
I have a script which is launched from Windows => All Programs => Startup
and I use that script to launch various things in an orderly controlled fashion instead of standard Windows chaos, and one of its last actions is to launch CFP.exe so that any A.V. updates which might result will not delay the establishment of more important things.
So what if I could have got a signature update 30 seconds earlier,
I do not worry much about zero day threats,
and absolutely refuse to waste time thinking about zero minute threats ! ! !
I am still using CIS 3.14.??? on Windows XP.
Perhaps you need task scheduler to overcome UAC restrictions when launching CFP,
it should be simple to tweak the start-up to avoid a preliminary premature execution of CFP.
Alan