Why ITSM trying to change HOSTS file?

Products ITarian Endpoint Manager
1

When ITSM module installed - my antivirus shows message “Prevented changing of HOSTS file - ITSMService.exe”.

What ITSMService.exe wants in HOSTS?

2

Hello @Sergey
The CCC (ITSM client) adds an entry in the hosts file: 127.0.0.1 localhost.cmdm.comodo.net

Below is a screenshot of a HOSTS file from a newly enrolled endpoint. The endpoint is basically a newly setup Windows 7 computer.

itsm - hosts file in test machine.png

3

Why?? Is this done please ?

4

I believe it is a loop back name for the agent to communicate with itself to run scripts using a name instead of 127.0.0.1, bit I could be wrong… Comodo like to comment?

PS
if you ever use Comodo cleaning tools it shows this as a viru has infected the machine when it is just ITSM.

5

@StrobeTech is on the right track here. Also please do check the following post from last year about Comodo Cleaning Essentials and ITSM.

@dittoit we will get back to you with more information from the product development team about this specific Comodo entry in the HOSTS file.

6

Hi @Sergey @dittoit and @StrobeTech . It is by design. This record is used by ITSM agent to resolve localhost.cmdm.comodo.com as 127.0.0.1. It doesn’t influence anything except mentioned above resolving. Please let us know if this is helpful. Thank you