What ends up in this directory? Mine currently has 88 files totaling 429MB and their modification date-time is over a period of 5 hours, on the same date at nighttime. Are they automatically deleted by CIS at some point in time?
Moreover WiseVectorX which I have installed and apparently it did a scheduled run at about the same time, detected four files in this directory with Heur.MLPE.A malware which I quarantined.
The AV uses it for updating the AV definitions. Files related to the AV update have the .cav extension.
I looked at the folder and with me it has various empty subfolders which names point to various subcomponents of CIS. It looks like a temporary download folder.
Thank you for the information. However, are you referring to the C:\ProgramData\Comodo\Cis\Quarantine\Temp\TempFiles directory? I have that too and like yours it contains a number of empty sub-directories. The one which I referred to in my original post is above it and it contains files that are named like this example: {018A236A-C2C2-4CD5-8535-0DF126649814}.
EDIT: I looked at the sub-directory about 24 hours later and it’s empty! The modification date was again at nighttime.
Hi Kamada,
This is the place where CIS downloads product updates. Which version of the CIS are you using now?
From your statement I can understand that the CIS is trying to update to the latest version. But CIS binaries are being quarantined by the other security software that you are using.
Could you please let us know the sha1 of files that are being quarantined. And, it is not recommeded to run two antivirus programs at the same time. Running two at the same time will often lead to one singling out the other as a virus or in some cases even cause file corruption.
Hi,
I’m using v.12.2.2.7062. In addition to Comodo CIS I have Windows Defender running, but that is only because according to Windows settings it can run in parallel with Comodo and will only do occasional Quick scans. I also run WiseVector StopX, but not always in real-time protection mode.
As I wrote the files that were quarantined are now gone. However, for possible future use, how do I find the sha1 of such files?
So, can I take it as you have no problem with this location now.
In future if you find any such issues, you can provide us the files for investigation.
Or you can find the sha1 by uploading it to virustotal.com or by using any sha calc tools.
There are no files in that directory anymore and therefore I can say that there is no problem.
Many thanks for your assistance and advice. :-TU