I am seeing the following process in process explorer on multiple machines
C:\WINDOWS\system32\cmd.exe /c "“C:\Temp\7ZSfx000.cmd” "
Inside of C:\Temp\7ZSfx000.cmd is the following
:Repeat
del “C:\Program Files\COMODO\Comodo ITSM\python_x86_Lib.exe”
if exist “C:\Program Files\COMODO\Comodo ITSM\python_x86_Lib.exe” goto Repeat
del “C:\Temp\7ZSfx000.cmd”
On some machines there are multiple .cmd files with similar names. I assume this is not normal, please advise