Huge thank you for checking. I may definitely check out FortKnox then. Nothing to lose by trying it. It sounds like there might be some additional functionality in the paid version, but I'm not sure how they differ other than the auto updates.
With security products you have to be aware that the first thing Malware tries to do is to disable the defensive processes. Therefore most security systems will have processes to reactivate or even regenerate. services and sub-processes, most of these are simply scheduled tasks some systems also run other tasks on timers or other OS triggers to check that specific security processes are actually present and working correctly ...
Coincidently, many malware systems also use the same Scheduled task method to regenerate parts of their process load that simplistic anti-malware products remove so the malware keeps returning
This is one reason that you need specialist software to remove both security products and Malware
Win10 PRO build 1809
Comodo Firewall 11.0.0.6744
I don't mean to necro this thread but there is indeed a way you can keep the Comodo tasks disabled (and other software for that matter). I was locking down a new PC and came across the same issue.
-Close/Exit Comodo Firewall
-Open Task Scheduler
-Go into Comodo task subfolder and Disable the tasks you want
-Open up File Explorer
-Navigate to C:\WINDOWS\system32\Tasks\Comodo folder
-Right click on each Task file (its just xml) that you disabled in Task Scheduler and do:
-Properties > Security Tab > Advanced > Disable Inheritance > Remove all inherited permissions from this object
-Remove any and all permission entries that are still listed (usually just a single entry of the object owner)
-Confirm all "warnings" and OK your way back out of the properties dialog
-Reboot PC
Technically there is another way if you use the HIPS (Host Intrusion Protection System) functionality provided by Comodo Firewall. It's ironic you can use the software to lock down itself but its also a testament to its power imo.
-Go into Comodo Settings > HIPS > Protected Objects > Blocked Files, just add the Task file you want to lock down, ie C:\WINDOWS\system32\Tasks\Comodo\COMODO\Telemetry{xxxx-xxxx-xxxx-xxxx}
-Click OK
-Right Click on Comodo TSR Icon next to clock, make sure Advanced View is checked, and Disable HIPS
-Open Task Scheduler
-Go into Comodo task subfolder and Disable the tasks you want
-Right Click on Comodo TSR Icon next to clock and Enable HIPS
The drawback with that method is if you go into Settings with HIPS disabled, and leave Settings whether you changed anything or not the Comodo Tasks will be reset to defaults. You would have to Disable tasks again with HIPS off, then turn it back on. But it does survive reboots and comodo settings visits as long as you keep HIPS on.
Quote
