Versions

2, 7, 10, 0	9.38%
2, 6, 0, 0	9.38%
2, 6, 0, 0	53.13%
2.0.4.0	28.13%

There are 4 versions of geekbuddyrsp.exe in the wild, the latest version being 2, 7, 10, 0. It is started as a Windows Service called 'GeekBuddyRSP Server' with the name 'GeekBuddyRSP'. In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). During installation, a run registry key for all users is added that will cause the program to run each time any user logs on to Windows. The average file size is about 1.79 MB. The file is a digitally signed and issued to Comodo Security Solutions by COMODO CA Limited. Some variations of the file have been seen to be installed with the program GeekBuddy from COMODO. During the process's lifecycle, the typical CPU resource utilization is about 0.0020% including both foreground and background operations, the average private memory consumption is about 2.59 MB with the maximum memory reaching around 5.67 MB. Addionally, typically read and write I/O disk operations is about 2.78 KB per minute for reads and 2.78 KB per minute for writes.

GeekBuddyRSP Server for Windows is part of GeekBuddy, a support system built into Comodo Internet Security whereby a Comodo expert makes a remote connection to the user's computer and resolves a wide variety of technical issues, included but not restricted to virus cleaning and Internet security, such as software installation and printer setup. It is available in the paid-for versions of Comodo Internet Security, and as a separate subscription service.