High CPU usage

Hi, I did a search on the forums but couldn’t find an answer so thought I’d ask -apologies if it has already been asked, I’m finding on my standard Windows XP Pro box that cmdagent.exe is frequently taking 90%+ of my CPU which seems to be killing my PC, does anyone have any ideas on how to reduce this?



You can try this one. I’ve done lots of testing and monitoring with cmdagent.exe and found that monitor dll injections (MDI) has been the main cause. If you turn it off for a few days, then turn it back on. It might solve the issue like it did for me.

Hi soyabeaner,

I left my MDI off for a few days. Turned it back on again today after the latest update to I’m still seeing slow web page loading on sites with multiple links. So I turned it back off. Did you tweak anything else?



Make sure Component Monitor is in Learn mode. For some reason, if it’s On the cpu % is higher. That’s as far as I can get it without really losing CFP’s full security level. I’ve asked two other moderators to test this, and it seems we’re all on the same page. cmdagent.exe should be 0-3% when browsing sites, any more than that must be something wrong…

Try it with off for a few more days. I left mine off for about a week. Rebooting might help as well.

Thanks soyabeaner, I’ve turned it off for the moment, there’s a chance that this is part of the problem as I’m a developer so frequently compile new DLLs I guess there’s a chance that the two are linked, I’ll report back :slight_smile:

Actually, MDI has not consumed any cpu since I tried this method (except if I change Component Monitor mode to On).

During this week, there has been only 2 occurrences with me visiting some sites with flash animations, then cmdagent.exe has gone back to the spikes. However, Monitor COM/ OLE Automation was the culprit during those times. A reboot always solved the issue. Very mysterious. :THNK

Here’s a ticket I opened with Comodo:

I noticed CPU usage spikes on every page load in browser, using P2P apps, etc.
The culprit is cmdagent.exe.

Running ProcMon and opening http://img186.imageshack.us/my.php?image=comodo0023tb.png in IE6 logged 438,940(!!!) file operations between cmdagent.exe and cpf.exe

See attached CSV file: http://rapidshare.com/files/22180032/log1.zip

Thanks for sharing, Alexo, but did the second attachment had to be in rapidshare? It’s not very rapid. ;D (I wonder what this forum’s upload limit per post is). Anyway, the 5mb csv file gave me an error: “File not loaded completely”. That’s big. 90% of it seems to be dominated by QuickTime. I don’t know how to analyze it.

Duplicate post. https://forums.comodo.com/index.php/topic,5499.msg53885.html#msg53885


Let’s wait and see when is Comodo about to deal with this cpu issue. I have come across the posts about it and i think that many users suffer from it. And also some do not know about it yet. Like me… I experience high cpu only at the first boot with my router closed. When i switch it on after some mins i go high on cpu. A reboot solve the problem (without switch off router) and never go high again with momentarily spikes on web page loading only. It’s annoying.

Welcome to my level. Did you try to disable Monitor DLL Injections or Monitor OLE and made sure Component Monitor is not ON mode?

I agree.

Please suggest an alternative service that is:

  1. Free
  2. Has high limits on storage (5GB+), file size (10MB+) and bandwidth
  3. Allows hot-linking.
  4. Not Java-based (somehow those seem not to work on my machine)

I did a Google on the high CPU usage and slowdown caused by cmdagent.exe and came accross this topic. Wondering if anything is known now since the last reaction here is from March?
I too have the same problem: cmdagent.exe is using 50% or more of CPU, causing a big slowdown in the loading of internet pages.

Comodo Firewall Pro version , Database 3.0 (Component monitor is set to Learn)
Windows XP Home SP2 Dutch version
Mostly latest Firefox as browser, sometimes IE
AMD Athlon 64 X2 Dual core 3800+
1 Gb DDR PC3200
ADSL 6 mbit connection

All latest updates and software

Menno Jansen
The Netherlands

I’m quite sure the devs already know about the cpu issue with v2.4. The only update as far as v3.0 alpha goes is that there hasn’t been any reported cpu issues (except with Vista). Little Mac knows more about that.

I’m absolutely positive the devs know about the CPU issues. I don’t know what causes them, but I think they do. As to v3’s consumption, it’s lower than 2.4. Granted I’ve not had CPU issues w/2.4, but v3 is lower than what I have experienced so far.

Between the two running processes (cfp.exe and cmdagent.exe) it’s pulling about 8MB. One time it crashed on me because I left and there were unanswered alerts, it peaked at 17MB. That’s it. Barely a blip on the screen. And that computer only has 512MB of RAM, so it’s not like I’m running multi-gigs.


I noticed there haven’t been any posts on this subject for a while, but i appear to be having problems very similar in nature. For the past few nights I’ve left my pc running peer to peer overnight and woke up to find that it has rebooted its self and is waiting for me to enter my windows password. Even stranger still my modem was still showing signs of high activity even though i wasn’t logged into windows.
Have there been any further developments into this issue? I will replace my pc’s power supply soon as it is old anyway but i don’t feel as if that is the problem.

Commodo F/W Version:
OS: Win xp sp2

Currently there are really only two options with CFP:

  1. ** FAQs/Threads - Read Me First **:
[b]Version 2.4 - cpf.exe and High CPU[/b] https://forums.comodo.com/index.php/topic,6819.0.html https://forums.comodo.com/index.php/topic,6933.0.html https://forums.comodo.com/index.php/topic,6943.0.html

Version 2.4 - cmdagent.exe and High CPU

  1. Beta test CFP v3 or wait for the final

Forgive my ignorance but how could I turn off the MDI? I am totally a newbie to this. My cmdagent.exe takes 80-99% of CPU power frequently. That’s really killing me.

application behavioral analysis
monitor dll injections

BTW, oyzz, you have 0 posts even though you just created one ???

Unless you absolutely can’t do without it, disable NetBT. This will close ports 137, 138 and 139 (the first two can be seen in your screenshot) and substantially reduce inbound connection attempts. You can do that by right clicking your LAN connection in Network Properties → Properties → double click Internet Protocol (TCP/IP) → Advanced (button) → WINS (tab) → checkmark the radio button called “Disable NetBIOS over TCP/IP”. Apply/OK in the usual way.