Uninstalled CIS, why am I still seeing COMODO ConnectV4 in firewall logs

I’ve recently uninstalled Comodo Internet Security Premium from my home PCs. However, after complete uninstall, and a search through my registry / deletion of everything ‘Comodo’, why am I still seeing a ton of entries in my Windows 10 firewall logs relating to COMODO ConnectV4?

Application Host Service|WindowsFirewall: COMODO ConnectV4 Outgoing

Whether it’s my browser, my current antivirus or my BTsync app, everything seems to go through COMODO ConnectV4 Outgoing.

Any help would be much appreciated.

Jeremy

Can you see if Geekbuddy is still on your system?

Sure thing. I recall doing a custom install and opting not to install Geekbuddy. I took a look anyway and didn’t see Geekbuddy in my list of installed programs via Control Panel. Not sure if this has anything to do with it or not, but I also tested the new CCAV for a little bit as well but uninstalled that before throwing CIS back on. Overall, my system is running perfectly fine. Was just wondering why I still saw COMODO in the logs. Thanks again for the help.

I was just thinking out loud when I mentioned Geekbuddy. Was the log information you provided all Windows Firewall reported or was there more extensive information?

I assume now CIS is installed Windows Firewall is disabled and no longer logging this event.

My apologies as that last little bit could have been a bit confusing. I gave CCAV a quick spin (looks to become a nice little solution)! I uninstalled CCAV and installed CIS (turned off Windows 10 firewall) latest version. I noticed on only the systems that were running CIS that a process called System had an ever increasing private working set. My non-CIS machines did not show this behavior (all Windows 10). Although, my CIS systems were working just fine, I love to tinker so I decided to uninstall CIS and monitor. Here’s a block of my Windows 10 firewall log with CIS uninstalled and using Windows 10 Firewall Control along with native Windows 10 firewall. Slimjet is my Chromium browser and this was during a standard web surf. I also notice the COMODO ConnectV4 entry with my other apps as well. To be specific, this is the Windows 10 Firewall Control access.log:

2016:08:02|11:43:17|Allowed|1|IPv4 TCP 216.58.194.110:443(51379)|Slimjet|WindowsFirewall: COMODO ConnectV4 Outgoing|C:\program files (x86)\slimjet\slimjet.exe
2016:08:02|11:43:22|Allowed|1|IPv4 TCP 74.125.21.19:443(51380)|Slimjet|WindowsFirewall: COMODO ConnectV4 Outgoing|C:\program files (x86)\slimjet\slimjet.exe
2016:08:02|11:43:22|Allowed|1|IPv4 UDP 74.125.21.19:443(51929)|Slimjet|WindowsFirewall: COMODO ConnectV4 Outgoing|C:\program files (x86)\slimjet\slimjet.exe
2016:08:02|11:43:26|Allowed|1|IPv4 UDP 64.233.176.132:443(60896)|Slimjet|WindowsFirewall: COMODO ConnectV4 Outgoing|C:\program files (x86)\slimjet\slimjet.exe
2016:08:02|11:43:26|Allowed|1|IPv4 TCP 64.233.176.132:443(51381)|Slimjet|WindowsFirewall: COMODO ConnectV4 Outgoing|C:\program files (x86)\slimjet\slimjet.exe
2016:08:02|11:43:26|Allowed|1|IPv4 TCP 209.85.232.132:443(51382)|Slimjet|WindowsFirewall: COMODO ConnectV4 Outgoing|C:\program files (x86)\slimjet\slimjet.exe
2016:08:02|11:43:26|Allowed|1|IPv4 UDP 209.85.232.132:443(54993)|Slimjet|WindowsFirewall: COMODO ConnectV4 Outgoing|C:\program files (x86)\slimjet\slimjet.exe
2016:08:02|11:43:27|Allowed|1|IPv4 TCP 216.58.194.110:443(51383)|Slimjet|WindowsFirewall: COMODO ConnectV4 Outgoing|C:\program files (x86)\slimjet\slimjet.exe
2016:08:02|11:43:27|Allowed|1|IPv4 UDP 216.58.194.110:443(54995)|Slimjet|WindowsFirewall: COMODO ConnectV4 Outgoing|C:\program files (x86)\slimjet\slimjet.exe
2016:08:02|11:43:28|Allowed|1|IPv4 TCP 74.125.21.139:443(51384)|Slimjet|WindowsFirewall: COMODO ConnectV4 Outgoing|C:\program files (x86)\slimjet\slimjet.exe
2016:08:02|11:43:28|Allowed|1|IPv4 TCP 216.58.218.174:443(51385)|Slimjet|WindowsFirewall: COMODO ConnectV4 Outgoing|C:\program files (x86)\slimjet\slimjet.exe
2016:08:02|11:43:28|Allowed|1|IPv4 UDP 216.58.218.174:443(65150)|Slimjet|WindowsFirewall: COMODO ConnectV4 Outgoing|C:\program files (x86)\slimjet\slimjet.exe
2016:08:02|11:43:29|Allowed|1|IPv4 TCP 216.58.218.14:443(51386)|Slimjet|WindowsFirewall: COMODO ConnectV4 Outgoing|C:\program files (x86)\slimjet\slimjet.exe
2016:08:02|11:43:29|Allowed|1|IPv4 UDP 216.58.218.14:443(63135)|Slimjet|WindowsFirewall: COMODO ConnectV4 Outgoing|C:\program files (x86)\slimjet\slimjet.exe