How many CiS-Proccesses is running in Windows Task Manager?

[cpf]

Hi all! Can you please confirm if all proccesses are listed in Task Manager or is some missing? Thanx!
Running Comodo Internet Security Premium,the latest updated version 6!

[attachment deleted by admin]

[HeffeD]

CIS has a more modular process system than it had previously.

As such, the number of CIS processes will change depending on what it is doing at the time.

[Citizen_K]

For a full explanation:

@egemen

What are all different processes in CIS 6?

1 - cistray.exe: This shows the widget and tray icon.
2 - cmdagent.exe: core security service which orchestrates alerts, scans etc.
3 - cmdservice.exe: Virtual Service control manager of COMODO, started only when an application is run virtulized. With kiosk as well apparently.
4 - cavwp.exe: Scanner services. Unlike CIS 5.x, scanning is done in cavwp.exe processes now. For every scan, a new instance of cavwp.exe is created. 1 instance is always dedicated to realtime scanning
5 - cis.exe: you will see multiple instances of cis.exe while you use CIS.
5.1 - one cis.exe instance is dedicated for alerts. IT starts automatically with costray.exe
5.2 - When you open main UI, another cis.exe is opened that shows you the main ui. Then it is closed when you close it.
5.3 - When you open advanced settings, another cis.exe is created.
5.4 - when you start a task such as scan, update etc., another instance of cis.exe is created
5.5 - When you run virtual kiosk, one cis.exe process is created in kiosk so that you can see alerts form kiosk.
5.6 - When you see welcome message, another cis.exe instance is shown

Wov! A lot of process instances eh? In order to provide a better architecture, less intensive resource usage or fault tolerance we chose this way.

Although there are so many instances, by default you will only see 4 processes of CIS running:

1 - cavwp.exe for realtime scanning
2 - cmdagent.exe for core services
3 - cistray.exe for tray icon and widget
4 - cis.exe for alerts.

So if you are using your computer and not working with CIS this is what you will see.

[Radaghast]

And cavwp.exe continues to run even when the AV hasn’t been installed…

[Citizen_K]

@Radaghast post:4

And cavwp.exe continues to run even when the AV hasn’t been installed…

Good question. I didn’t know there is an instance of cavwp.exe running with Firewall installation Is it just idling or actually taking up resources? Do you know if that is both with 6.0 and 6.1?

[Radaghast]

@EricJH post:5

Good question. I didn’t know there is an instance of cavwp.exe running with Firewall installation Is it just idling or actually taking up resources? Do you know if that is both with 6.0 and 6.1?

Unfortunately, it chews resources and is completely unnecessary on a firewall only installation, but such is the way with the ‘kitchen sink’ approach to security.

[attachment deleted by admin]

[Citizen_K]

It’s truly odd. With CIS being more modular it makes no sense to have an unneeded module at work. It defeats purpose in my view…

[khanyash]

4 processes are always there whether you install CAV or not. I dont know how many processes will be there if only CAV is installed?

Rest processes depends on what is run like VK, etc…

[sarkanygyik]

I have two instances of cis.exe on my win 7 pro x64
latest comodo cis 2015 02. update

[Citizen_K]

Do you have a CIS window open? That would explain it.