Something is wrong...

Hey, I noticed COMODO is taking up more cpu again so I looked at the logs and found something shocking. Please tell me what is going on and how I can fix it.

[attachment deleted by admin]

How often does this program access CIS in memory? Is the higher CPU usage continuously, only when that program is running or only every now and then?

I don’t know how often but I know it accesses it more often than a minute. I don’t know why, siber systems is a trusted company.

This happened with steam as well in version 6.

But with version 5.10 it does not happen.

With v5 when CIS gets hammered with memory access attempts (multiple times per second) the self protection of CIS will then cause cmdagent.exe to use significant CPU resources.

Could you answer my previous questions about under what circumstances and for what time periods this happens?

I do not know when this happens. My computer all of a sudden gets slow so I check cpu and it’s high. Sometimes it’s low too.

When the CPU usage is high can you check what process is using a lot of cpu cycles. It could be cavwp.exe from CIS.

With default settings CIS will run this process to build a cache for the AV to help make it lighter and more responsive. It will run when the computer is idle. I noticed it may use a lot CPU capacity (may close to maxing out a full cpu core). In this mode I have seen it active for approx 10 min; it does not seem to throttle back though when the system starts to use more resources.

To see if cache builder is running check the CIS task manager. CIS task manager can be started from the main screen of CIS.

Can you report your findings with the above in the back of your head?

I cannot find that process. I can just see 3 processes that say “COMODO Internet Security”.

I take you are using Windows 8 and using Win 8 Task Manager. Either right click on the entry and ask for its properties to see what process it is or look under the Details tab where you will get the old school list with the actual names of the executables.

Mostly “cis” followed by “cmdagent” then “Cis Tray”.

Never mind. All the process of COMODO’s take up tons of cpu after another. My cpu is maxed to 99% all the time. :(.

Sometimes its better to get a step back.
Your cpu should not be wasted to find a bug.
And you should save your nerves.

What do you mean?

Would you mind exporting your configuration, zipping it, then attaching it to a post here.

  1. Open CIS
  2. Select Tasks\Advanced Tasks\Open Advanced Settings\Configuration
  3. Select the ‘Active’ Configuration, right click and the Export.
  4. select ‘Yes’ then save it somewhere you can find it
  5. Zip the file or simply append .txt to the end of the file name
  6. Post it here.

Here it is! ;D

[attachment deleted by admin]

The problem you have is because robotaskbaricon.exe keeps accessing cis.exe and Comodo files are protected from this kind of access. If you feel you trust the roboform file, you can add it as an exclusion in the D+ rules:

  1. Open CIS
  2. Navigate to - Tasks\Advanced Tasks\Open Advanced Settings\Security Settings\Defence+\HIPs\HIPs Rules
  3. Find the group called Comodo Internet Security
  4. Right click the group name and select Edit
  5. Select the Protection Settings tab
  6. Select Interprocess Memory Access
  7. Select Modify
  8. Right click and select Add\Files
  9. Navigate to you Roboform installation folder and select robotaskbaricon.exe
  10. Select ‘OK’ back to the main CIS UI

Monitor and report back…

Do you know how I can stop roboform from attempting to access the files?

Maybe ask Siber Syetems, it’s their product…

Edit: One thing I would suggest, stop robotaskbaricon.exe from auto-starting with Windows. You can use and start-up manager for that. Other than that, use a different product. There ate many of these types of program available and most browsers have built in functions to one extent or another.

The roboform issue was fixed but COMODO STILL uses tons of cpu. And now my computer is not functioning properly.

Are you running Bitdefender or have you run it in the past? There are compatibility issues with BD.

Make sure that left overs of previously installed security programs are no longer around by removing possible left overs with cleanup tools of those programs. Leftovers can cause all sort of strange results A list of such tools can be found here: ESET Knowledgebase .