For wide more than a decade with comodo I never had problems with malicious software.
I didn't only installe cis. Based on cruelsister's settings I modified CIS, added rules, block rather than allowing. You have to know and understand the interrelations between the components, otherwise problems will occur.
With all the negativity you can read about CIS (also in this forum), my PC should be full of trojans, worms, rootkits and all the spies, but it's not. With comodo I shouldn't dare to use it with sensitive work. I do it because with comodo I am indeed well protected.
That's real-world-protection! And I chose comodo not because it is free, but because it protects. If this is no longer the case, I will choose another program.