How to disable completely everything except the Firewall?

Comodo Internet Security - CIS Install / Setup / Configuration Help - CIS
1

Hi,

using Comodo 12.0.0.6818 on Windows 10 x64 (10.0.17134.915).
In my Comodo settings, only the Firewall is enabled (custom ruleset). Everything else - AutoContainment, HIPS, VirusScope, Website filtering etc. is set to Disabled.

I have a .bat file started periodically by the Windows Task Manager.
This .bat file uses pskill.exe by Microsoft Sysinternals to terminate some processes.

The problem is Comodo Antivirus(which is supposed to be disabled) does not allow it to run.
In the logs under Antivirus Events there are entries like this

2019-08-21 22:45:10  	D:\_misc\pskill.exe  	ApplicUnsaf.Win32.RiskTool.PsKill.efs@1  	Detect  	Success
2019-08-21 22:45:10  	D:\_misc\pskill.exe  	ApplicUnsaf.Win32.RiskTool.PsKill.efs@1  	Block  	Success

What I tried:

  • disabled AutoContainment, HIPS, VirusScope, Script Analysis and everything else except the firewall
  • added pskill.exe and the .bat file that calls it to VirusScope scan exclusions - both to Excluded Paths and Excluded Applications.
  • added the folder they reside in to VirusScope exclusions - Excluded Paths
  • in HIPS rules added pskill.exe and the .bat file that calls it on top of the list as Allowed Application

but nothing of the above works and pskill.exe is still blocked.
Any idea how to fix that?

Thanks for any suggestions.
Peter

2

You should uninstall and just install the firewall so the anti-virus does not get installed. You can try the file rating setting detect potentially unwanted applications.