High CPU usage by cmdagent.exe when user re-logon

A. THE BUG/ISSUE:

  1. What you did: Logon user at first time (after rebooting), then logoff (without rebooting) and logon again (the same user or another - no matter).
  2. What actually happened or you actually saw: At second and subsequent logins cmdagent.exe uses almost 100% CPU for about 3 minutes on Athlon XP 1600+ with 512Mb RAM.
  3. What you expected to happen or see: Normal CPU usage like at first logon.
  4. How you tried to fix it & what happened: Set Antivirus Security Level to Disabled - normal CPU usage.
  5. If a software compatibility problem have you tried the compatibility fixes (link in format)?: -
  6. Details & exact version of any software (execpt CIS) involved (with download link unless malware): -
  7. Whether you can make the problem happen again, and if so precise steps to make it happen: Every second and subsequent user logins.
  8. Any other information (eg your guess regarding the cause, with reasons): -

B. FILES APPENDED. (Please zip unless screenshots).:

  1. Screenshots of the Defense plus Active Processes List (Required for all issues):
  2. Screenshots illustrating the bug:
  3. Screenshots of related CIS event logs:
  4. A CIS config report or file:
  5. Crash or freeze dump file:
  6. Screenshot of More~About page. Can be used instead of typed product and AV database version:

C. YOUR SETUP:

  1. CIS version, AV database version & configuration: CIS version 5.8.213334.2131, AV database version 10536, Defense+ - Disabled (by Level slider and “Deactivate …” check box with reboot); Sandbox - Disabled; Firewall - Custom Policy; Antivirus - Stateful.
  2. a) Have you updated (without uninstall) from a previous version of CIS: Yes.
    b) if so, have you tried a clean reinstall (without losing settings - if not please do)?: No, but installation of previous version was clean and this issue was presented there.
  3. a) Have you imported a config from a previous version of CIS: No.
    b) if so, have U tried a standard config (without losing settings - if not please do)?: Yes.
  4. Have you made any other major changes to the default config? (eg ticked ‘block all unknown requests’, other egs here.): No.
  5. Defense+, Sandbox, Firewall & AV security levels: Defense+ - Disabled (by Level slider and “Deactivate …” check box with reboot); Sandbox - Disabled; Firewall - Custom Policy; Antivirus - Stateful.
  6. OS version, service pack, number of bits, UAC setting, & account type: WinXP Pro SP3, 32 bit, administrator
  7. Other security and utility software currently installed: No
  8. Other security software previously installed at any time since Windows was last installed: No
  9. Virtual machine used (Please do NOT use Virtual box)[color=blue]: No

[attachment deleted by admin]

Thank you very much for your bug report in standard format.

Unfortunately the following items of required information are missing from your post

    1. Other security and utility software currently installed: -
    1. Other security software previously installed at any time since Windows was last installed: -
    1. Virtual machine used (Please do NOT use Virtual box): -
  • Also can you explain how you disabled Defense+ Slider or Tick box and reboot

We would be grateful if you would add these items of information so we can forward this post to the format verified board. You can find assistance using red links in the format and here - if you need further help please ask a mod. If you do not add the information after a week we will forward this post to non-format. If this happens we will tell you how to rectify this if you wish to. Developers may look at the issue in the non-format board, and may fix it.

But it is much more likely to be fixed if you edit your first post to create an issue report which meets all criteria in the bug forum Checklist and Format. (You can copy and paste the format from this topic). The general reasons why are summarized in that post, the reasons we ask for information you may think unecessary are given in this detailed post.

In the current process we will normally leave it up to you whether you want to make a report which meets all the criteria or not. We may remind you if we think a bug of particular importance.

The first post was modified.

Thank you very much for your report in standard format, with all information supplied. The care you have taken is much appreciated by Comodo, and will increase the likelihood that this bug can be fixed.

Developers may or may or may not communicate with you in the forum or by PM/IM, depending on time availability and need. Because you have supplied complete information they may be able to replicate and fix the bug without doing so.

Moved to Verified.

Many thanks again

Dennis