Calog

1,3,20181226,17:26:34.
983,6732,,0,(*)Entitlement::Init() - Started
1,3,20181226,17:26:34.983,6732,,0,OS VERSION INFO : PlatformId : 2, MajorVersion :
6, MinorVersion : 2, ProductType : 1, suiteMask : 768, BuildNo : 9200
1,3,20181226,17:26:47.105,6732,,0,(*)Entitlement::Init() - Ended with result = 0
1,3,20181226,17:55:01.935,9996,,0,(*)Entitlement::Init() - Started
1,3,20190701,11:09:18.702,10304,,0,Before - KillActiveProcesses ManageServiceList -
START
1,3,20190701,11:09:18.702,10304,,0,Before - ManageServiceList
1,3,20190701,11:09:42.392,10304,,0,After - ManageServiceList
1,3,20190701,11:09:42.661,10304,,0,After - KillActiveProcesses ManageServiceList -
STOP
1,3,20190701,11:09:42.677,10304,,0,Before - KillActiveProcesses Kill Process
List[1]
1,3,20190701,11:09:42.746,10304,,0,After - KillActiveProcesses Kill Process
List[1]
1,3,20190701,11:09:42.762,10304,,0,Before - KillActiveProcesses SendMessageTimeout
to security center
1,3,20190701,11:09:44.350,10304,,0,After - KillActiveProcesses SendMessageTimeout
to security center
1,3,20190701,11:09:45.939,10304,,0,Before - KillActiveProcesses KillTray(s)
1,3,20190701,11:09:46.926,10304,,0,After - KillActiveProcesses KillTray(s)
1,3,20190701,11:09:46.941,10304,,0,Before - KillActiveProcesses Kill Process
List[2]
1,3,20190701,11:09:47.229,10304,,0,After - KillActiveProcesses Kill Process
List[2]
1,3,20190701,11:11:54.879,10304,,0,Entitlement::GetSuiteTypeNew - = 0
1,3,20190701,11:11:54.911,10304,,0,ProductAM::PreUninstall - Started
1,3,20190701,11:11:54.917,10304,,0,ISS9_CheckRegistryPermissions ISS9 Started
1,3,20190701,11:11:54.933,10304,,2,Result of trying to delete before create
SOFTWARE\TD_PermissionsCheck - = 2
1,3,20190701,11:11:54.933,10304,,0,Result of trying to Create
1,3,20190701,11:11:54.933,10304,,0,Result of trying to delete after create
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\TD_PermissionsCheck - = 2
SYSTEM\CurrentControlSet\services\TD_PermissionsCheck - = 2
1,3,20190701,11:11:55.289,10304,,0,ISS9_CheckRegistryPermissions ISS9 Ended - Ended
with result = 0
1,3,20190701,11:11:55.321,10304,,0,ProductAM::KillActiveProcesses - Started
1,3,20190701,11:11:55.606,10304,,0,ProductAM::KillActiveProcesses - Ended with
result = 0
1,3,20190701,11:11:55.621,10304,,0,ProductAM::PreUninstall - Ended with result = 0
1,3,20190701,11:11:55.653,10304,,0,ProductAM::DoUninstall - Started
1,3,20190701,11:11:55.659,10304,,0,build isafinst64.exe u
1,3,20190701,11:11:55.690,10304,,0,CallSetupApplication started with: - =
CallSetupApplication invoked with : "C:\Program Files\Total Defense\Internet
Security Suite\Anti-Virus\isafinst64.EXE" u, Wait : 1 , CreateNoWindows : 1
1,3,20190701,11:11:55.690,10304,,0,"C:\Program Files\Total Defense\Internet
Security Suite\Anti-Virus\isafinst64.EXE" u
1,3,20190701,11:11:55.806,10304,,0,CallSetupApplication waiting for process to
end....
1,3,20190701,11:11:55.853,10304,,1,CallSetupApplication process ended with: - = 1
1,3,20190701,11:11:55.853,10304,,0,CommandLine = "C:\Program Files\Total
Defense\Internet Security Suite\Anti-Virus\isafinst64.EXE" u ExitCodeProcess = 1
1,3,20190701,11:11:55.891,10304,,0,CallSetupApplication ended with: - = 0
1,3,20190701,11:11:55.891,10304,,0,build isafinst.exe u
Security Suite\Anti-Virus\isafinst.EXE" u, Wait : 1 , CreateNoWindows : 1
Security Suite\Anti-Virus\isafinst.EXE" u
end....
Defense\Internet Security Suite\Anti-Virus\isafinst.EXE" u ExitCodeProcess = 1
1,3,20190701,11:11:56.123,10304,,0,removing service: CAISafe
1,3,20190701,11:11:56.138,10304,,1060, - = 1060
1,3,20190701,11:11:56.138,10304,,1060, - = 1060
1,3,20190701,11:11:56.361,10304,,0,NetFilterSrv.exe unregister - = 0
1,3,20190701,11:11:56.439,10304,,0,ProductAM::UnInstallAMRTTNG::invoked
1,3,20190701,11:11:56.455,10304,,0,ProductAM::UnInstallAMRTTNG::Service stopped.
1,3,20190701,11:11:56.461,10304,,0,ProductAM::UnInstallAMRTTNG::Will execute
command : - = "C:\Program Files\Total Defense\Internet Security Suite\Anti-
Virus\AMRT.EXE" /UnregServer
Security Suite\Anti-Virus\AMRT.EXE" /UnregServer, Wait : 1 , CreateNoWindows : 1
Security Suite\Anti-Virus\AMRT.EXE" /UnregServer
end....
Defense\Internet Security Suite\Anti-Virus\AMRT.EXE" /UnregServer ExitCodeProcess =
0
1,3,20190701,11:11:56.677,10304,,0,ProductAM::UnInstallAMRTTNG::Will execute
command : - = C:\Program Files\Total Defense\Internet Security Suite\Anti-
Virus\AMRTMGR10.exe /UnregServer
CallSetupApplication invoked with : C:\Program Files\Total Defense\Internet
Security Suite\Anti-Virus\AMRTMGR10.exe /UnregServer, Wait : 1 , CreateNoWindows :
1
1,3,20190701,11:11:56.693,10304,,0,C:\Program Files\Total Defense\Internet Security
Suite\Anti-Virus\AMRTMGR10.exe /UnregServer
end....
1,3,20190701,11:11:59.199,10304,,995,CallSetupApplication process ended with: - =
995
1,3,20190701,11:11:59.199,10304,,0,CommandLine = C:\Program Files\Total
Defense\Internet Security Suite\Anti-Virus\AMRTMGR10.exe /UnregServer
ExitCodeProcess = 995
1,3,20190701,11:11:59.214,10304,,0,ProductAM::UnInstallAMRTTNG::completed
successfully
1,3,20190701,11:11:59.230,10304,,0,Before - ProductAM::ManageRealTime
1,3,20190701,11:11:59.230,10304,,0,Before - sc delete gzflt
CallSetupApplication invoked with : sc delete gzflt, Wait : 1 , CreateNoWindows : 1
1,3,20190701,11:11:59.245,10304,,0,sc delete gzflt
end....
1,3,20190701,11:11:59.362,10304,,0,CommandLine = sc delete gzflt ExitCodeProcess =
0
1,3,20190701,11:11:59.368,10304,,0,After - sc delete gzflt , ended with result = 0
1,3,20190701,11:11:59.383,10304,,0,Before - C:\windows\regedit.exe /s "C:\Program
Files\Total Defense\Internet Security Suite\Anti-Virus\bd\gzflt_delete.reg"
CallSetupApplication invoked with : C:\windows\regedit.exe /s "C:\Program
Files\Total Defense\Internet Security Suite\Anti-Virus\bd\gzflt_delete.reg", Wait :
1 , CreateNoWindows : 1
1,3,20190701,11:11:59.383,10304,,0,C:\windows\regedit.exe /s "C:\Program
Files\Total Defense\Internet Security Suite\Anti-Virus\bd\gzflt_delete.reg"
end....
1,3,20190701,11:11:59.646,10304,,0,CommandLine = C:\windows\regedit.exe /s
"C:\Program Files\Total Defense\Internet Security Suite\Anti-
Virus\bd\gzflt_delete.reg" ExitCodeProcess = 0
1,3,20190701,11:11:59.668,10304,,0,After - C:\windows\regedit.exe /s "C:\Program
Files\Total Defense\Internet Security Suite\Anti-Virus\bd\gzflt_delete.reg" , ended
with result = 0
1,3,20190701,11:11:59.668,10304,,0,After - ProductAM::ManageRealTime,
IsDriverExists = , ended with result = 1
1,3,20190701,11:11:59.668,10304,,0,Before - ProductAM::ManageRootKit
1,3,20190701,11:11:59.684,10304,,0,ProductAM::DeleteQurbRunOnceLeftOver invoked
1,3,20190701,11:11:59.684,10304,,2,ProductAM::DeleteQurbRunOnceLeftOver - = 2
1,3,20190701,11:11:59.700,10304,,2,ProductAM::DeleteQurbRunOnceLeftOver Wow6432Node
- = 2
1,3,20190701,11:11:59.731,10304,,0,rundll32.exe setupapi,InstallHinfSection
DefaultUninstall 132 C:\Program Files\Total Defense\Internet Security Suite\Anti-
Virus\bd\trufos.inf - = 0
CallSetupApplication invoked with : rundll32.exe setupapi,InstallHinfSection
Virus\bd\trufos.inf, Wait : 1 , CreateNoWindows : 1
1,3,20190701,11:11:59.746,10304,,0,rundll32.exe setupapi,InstallHinfSection
Virus\bd\trufos.inf
end....
1,3,20190701,11:12:00.764,10304,,0,CommandLine = rundll32.exe
setupapi,InstallHinfSection DefaultUninstall 132 C:\Program Files\Total
Defense\Internet Security Suite\Anti-Virus\bd\trufos.inf ExitCodeProcess = 0
1,3,20190701,11:12:00.771,10304,,0,After - ProductAM::ManageRootKit,
IsDriverExists = , ended with result = 1
CallSetupApplication invoked with : C:\windows\system32\sc delete "gzflt", Wait : 1
, CreateNoWindows : 1
1,3,20190701,11:12:00.786,10304,,0,C:\windows\system32\sc delete "gzflt"
end....
1,3,20190701,11:12:00.902,10304,,1072,CallSetupApplication process ended with: - =
1072
1,3,20190701,11:12:00.902,10304,,0,CommandLine = C:\windows\system32\sc delete
"gzflt" ExitCodeProcess = 1072
1,3,20190701,11:12:00.918,10304,,0,C:\windows\system32\sc delete "gzflt" - = 0
1,3,20190701,11:12:00.933,10304,,0,Before -
SYSTEM\CurrentControlSet\services\gzflt\
1,3,20190701,11:12:00.933,10304,,0,After -
SYSTEM\CurrentControlSet\services\gzflt\
1,3,20190701,11:12:00.949,10304,,0,Before -
SYSTEM\CurrentControlSet\services\gzsvc\
1,3,20190701,11:12:00.949,10304,,0,After -
SYSTEM\CurrentControlSet\services\gzsvc\
1,3,20190701,11:12:00.965,10304,,0,Before - Software\Total Defense\AntiMalware SDK\
1,3,20190701,11:12:01.002,10304,,0,After - Software\Total Defense\AntiMalware SDK\
1,3,20190701,11:12:01.002,10304,,0,Before - SYSTEM\gzflt\
1,3,20190701,11:12:01.002,10304,,0,After - SYSTEM\gzflt\
1,3,20190701,11:12:01.018,10304,,0,Before - C:\windows\system32\drivers\trufos.sys
1,3,20190701,11:12:01.018,10304,,0,After - C:\windows\system32\drivers\trufos.sys
1,3,20190701,11:12:01.034,10304,,0,Before - C:\windows\system32\drivers\gzflt.sys
1,3,20190701,11:12:01.034,10304,,0,After - C:\windows\system32\drivers\gzflt.sys
1,3,20190701,11:12:01.118,10304,,0,Uninstall IDTheft driver successfully
1,3,20190701,11:12:01.118,10304,,0,unins001::Completed
1,3,20190701,11:12:01.134,10304,,0,ExecuteAutoMainten invoked
CallSetupApplication invoked with :
C:\ProgramData\TotalDefenseTng\StoredData\TEMP\10to11CU\636975759676939578\External
s\x64\am\WinAutoMaintenFunction.exe -uninstall, Wait : 1 , CreateNoWindows : 1
1,3,20190701,11:12:01.149,10304,,0,C:\ProgramData\TotalDefenseTng\StoredData\TEMP\1
0to11CU\636975759676939578\Externals\x64\am\WinAutoMaintenFunction.exe -uninstall
1,3,20190701,11:12:01.149,10304,,0,CallSetupApplication: E9026
1,3,20190701,11:12:01.187,10304,,0,ExecuteAutoMainten - = 0
1,3,20190701,11:12:01.203,10304,,0,ProductAM::RemoveAMProductFiles - Started
1,3,20190701,11:12:01.218,10304,,0,Removing contents. - =
C:\ProgramData\CA\Consumer\am\*.*
1,3,20190701,11:12:01.234,10304,,0,Enter Delete Wildcard
"(null)\C:\ProgramData\CA\Consumer\am\caamdebuglog.log"
1,3,20190701,11:12:01.250,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\am\caamdebuglog.log" - Result = 1.
1,3,20190701,11:12:01.250,10304,,0,File does not exist.
C:\ProgramData\CA\Consumer\am\exclusion\*.*
"(null)\C:\ProgramData\CA\Consumer\am\exclusion\exclusions.dat"
1,3,20190701,11:12:01.272,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\am\exclusion\exclusions.dat" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\am\odscan.db"
1,3,20190701,11:12:01.303,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\am\odscan.db" - Result = 1.
C:\ProgramData\CA\Consumer\am\pdr\*.*
1,3,20190701,11:12:01.319,10304,,0,START
ProductAM::UnInstallMalwarePlugin::Uninstall
1,3,20190701,11:12:01.334,10304,,0,END ProductAM::UnInstallMalwarePlugin::Uninstall
1,3,20190701,11:12:01.334,10304,,0,START ProductMyKids::Uninstall
1,3,20190701,11:12:01.350,10304,,0,END ProductMyKids::Uninstall
1,3,20190701,11:12:01.437,10304,,0,START
ProductAM::UnInstallUrlFiltering::Uninstall
1,3,20190701,11:12:01.488,10304,,0,END ProductAM::UnInstallUrlFiltering::Uninstall
1,3,20190701,11:12:01.504,10304,,0,ProductAM::RemoveAMProductFiles - Ended
1,3,20190701,11:12:01.504,10304,,0,ProductAM::RemoveAMRegistryData - Started
1,3,20190701,11:12:01.519,10304,,0,ProductAM::RemoveRegistryData()
1,3,20190701,11:12:01.519,10304,,0,Deleting reg value
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\am\CloudScan" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\am\PrevalenceData" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\am\InstallPath" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\am\InitialScanDone" - Result =
0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\am\rton" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\am\LastUpdate" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\WSCRegister" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\am\Key" - Result = 0.
1,3,20190701,11:12:01.602,10304,,0,Deleting reg key
"SOFTWARE\ComputerAssociates\Anti-Virus Plus\LastScan" - Result = 0.
1,3,20190701,11:12:01.618,10304,,0,Deleting reg key
"SOFTWARE\ComputerAssociates\Anti-Virus Plus\Stats" - Result = 0.
1,3,20190701,11:12:01.618,10304,,0,Deleting reg key
"SOFTWARE\ComputerAssociates\Anti-Virus Plus" - Result = 0.
1,3,20190701,11:12:01.618,10304,,0,Deleting reg key
"SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{38151262-FAF8-4778-9AAB-
33E90B60D8E9}" - Result = 0.
1,3,20190701,11:12:01.633,10304,,0,ProductAM::RemoveAMRegistryData - Ended with
result = 0
1,3,20190701,11:12:01.649,10304,,0,SetRebootRequired - = AM 5
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\am\BDUpdate" - Result = 0.
1,3,20190701,11:12:02.521,10304,,0,ProductAM::DoUninstall - Ended with result = 0
1,3,20190701,11:12:04.757,10304,,0,Entitlement::GetSuiteTypeNew - = 0
1,3,20190701,11:12:04.795,10304,,0,(*)Entitlement::Init() - Started
1,3,20190701,11:12:04.942,10304,,0,Removing contents. - = C:\Program
Files\CA\SharedComponents\PPRT\*.*
"SOFTWARE\ComputerAssociates\eTrustPestPatrol\BranchTypeCAPP" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrustPestPatrol\BranchPhaseCAPP" - Result = 0.
1,3,20190701,11:12:04.957,10304,,0,Result = 2 - Deleting empty reg key
"SOFTWARE\ComputerAssociates\eTrustPestPatrol"
"SOFTWARE\ComputerAssociates"
1,3,20190701,11:12:04.979,10304,,0,failed - Deleting empty reg key. "SOFTWARE"
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Computer
Associates\eTrust\PestPatrol\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eTrust EZ Armor\eTrust
PestPatrol\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eTrust Internet Security
Suite\eTrust PestPatrol Anti-Spyware\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CA\CA Anti-Spyware\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CA\CA Security Center\CA Anti-
Spyware\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CA\CA Internet Security
Suite\CA Anti-Spyware\*.*
"SOFTWARE\ComputerAssociates\eTrustPestPatrol\BranchPhaseCAPP" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrustPestPatrol\BranchTypeCAPP" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrustPestPatrol\ProgramGroup" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrustPestPatrol"
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\pp\Name" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\pp\Files" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\pp\Path" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\pp\Generation" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\pp\CommonVersion" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\pp\Group" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\pp\Type" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\pp\Version" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\pp"
"SOFTWARE\ComputerAssociates\eTrust Suite Personal"
"SOFTWARE\WOW6432Node\Qurb\BranchLevelCAAS" - Result = 0.
"SOFTWARE\WOW6432Node\Qurb\BranchStatusCAAS" - Result = 0.
"SOFTWARE\WOW6432Node\Qurb"
1,3,20190701,11:12:05.142,10304,,0,failed - Deleting empty reg key.
"SOFTWARE\WOW6432Node"
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eTrust EZ Armor\eTrust EZ
Anti-Spam\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eTrust EZ Armor\eTrust Anti-
Spam\*.*
Suite\eTrust Anti-Spam\*.*
Suite\CA Anti-Spam\*.*
Spam\*.*
Suite\CA Anti-Spam\*.*
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\as\Name" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\as\Files" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\as\Path" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\as\Generation" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\as\CommonVersion" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\as\Group" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\as\Type" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\as\Version" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\as"
Suite\CA Website Inspector\*.*
1,3,20190701,11:12:05.274,10304,,9040, - = 9040
1,3,20190701,11:12:05.280,10304,,9040, - = 9040
1,3,20190701,11:12:05.280,10304,,0,Deleting reg key
"SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CAAPH2" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\aph\Name" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\aph\Files" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\aph\Path" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\aph\Generation" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\aph\CommonVersion" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\aph\Group" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\aph\Type" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\aph\Version" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\aph"
"SOFTWARE\ComputerAssociates\Anti-Virus\Security\TemplateID" - Result = 0.
"SOFTWARE\ComputerAssociates\Anti-Virus\Security\TemplateLevel" - Result = 0.
"SOFTWARE\ComputerAssociates\Anti-Virus\Security"
"SOFTWARE\ComputerAssociates\Anti-Virus"
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vet Anti-Virus\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VET for Win32\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VET for Windows 95\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VET for Windows NT\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vet Antivirus for Windows
95\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vet Antivirus for Windows
NT\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vet Anti-Virus for Windows
95\*.*
98\*.*
ME\*.*
NT\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vet Anti-Virus for Windows NT
Server\*.*
2000\*.*
2000 Server\*.*
XP\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vet Anti-Virus for Windows XP
Server\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InoculateIT Personal
Edition\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InoculateIT SOHO Edition\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eTrust EZ Antivirus\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eTrust EZ Antivirus SOHO
Edition\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eTrust EZ Antivirus Small
Business Edition\*.*
Antivirus\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eTrust Vet Antivirus\*.*
Suite\eTrust EZ Antivirus\*.*
Virus\*.*
Suite\CA Anti-Virus\*.*
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\av\Name" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\av\Files" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\av\Path" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\av\Generation" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\av\CommonVersion" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\av\Group" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\av\Type" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\av\Version" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\av"
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\sc\hips\Name" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\sc\hips\Files" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\sc\hips\Path" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\sc\hips\Generation" - Result =
0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\sc\hips\CommonVersion" - Result
= 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\sc\hips\Group" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\sc\hips\Type" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\sc\hips\Version" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\sc\hips"
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\sc"
1,3,20190701,11:12:05.797,10304,,0,ProductAM::ManualCleanup - Started
1,3,20190701,11:12:05.797,10304,,0,ProductAM::ManualCleanUp::Call
aminst::PostUnInstall and UnRegisterAMWSC()
1,3,20190701,11:12:05.797,10304,,0,ProductAM::UnscheduleScan - Started
1,3,20190701,11:12:05.812,10304,,0,ProductAM::UnRegisterAMWSC - Started
CallSetupApplication invoked with : "\cawsc.exe" /unregister /AVPlus, Wait : 1 ,
CreateNoWindows : 0
1,3,20190701,11:12:05.828,10304,,0,"\cawsc.exe" /unregister /AVPlus
1,3,20190701,11:12:05.828,10304,,0,CallSetupApplication: E9026
1,3,20190701,11:12:05.844,10304,,0,ProductAM::UnRegisterAMWSC - Ended with result =
9026
1,3,20190701,11:12:05.844,10304,,0,ProductAM::ManualCleanup - Ended with result = 0
Suite\CA Anti-Virus Plus\*.*
1,3,20190701,11:12:05.859,10304,,0,ProductAM::RemoveRegistryData - Started
1,3,20190701,11:12:05.859,10304,,0,ProductAM::RemoveRegistryData - Ended with
result = 0
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\am\Name" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\am\Files" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\am\Path" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\am\Generation" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\am\CommonVersion" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\am\Group" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\am\Type" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\am\Version" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\am"
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CA\CA Desktop DNA Migrator\*.*
Suite\CA Desktop DNA Migrator\*.*
Suite\CA Backup and Migration\*.*
1,3,20190701,11:12:05.959,10304,,0,Deleting reg value "SOFTWARE\WOW6432Node\CA\CA
Desktop DNA Migrator\ProgramGroup" - Result = 0.
"SOFTWARE\WOW6432Node\CA\CA Desktop DNA Migrator"
"SOFTWARE\WOW6432Node\CA"
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\dm\Name" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\dm\Files" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\dm\Path" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\dm\Generation" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\dm\CommonVersion" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\dm\Group" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\dm\Type" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\dm\Version" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\dm"
1,3,20190701,11:12:06.044,10304,,0,ProductFW::ManualCleanup - Started
1,3,20190701,11:12:06.060,10304,,0,ProductFW::RemoveObsoleteFiles - Started
1,3,20190701,11:12:06.060,10304,,0,ProductFW::RemoveObsoleteFiles - Ended
1,3,20190701,11:12:06.060,10304,,0,ProductFW::ManualCleanup - Ended with result = 0
1,3,20190701,11:12:06.075,10304,,0,ProductFW::RemoveObsoleteLicenseData - Started
1,3,20190701,11:12:06.075,10304,,0,Deleting reg value "SOFTWARE\Zone
Labs\ZoneAlarm\Registration\ShareTypeCZ" - Result = 0.
Labs\ZoneAlarm\Registration\SharePhaseCZ" - Result = 0.
"SOFTWARE\Zone Labs\ZoneAlarm\Registration"
"SOFTWARE\Zone Labs\ZoneAlarm"
"SOFTWARE\Zone Labs"
1,3,20190701,11:12:06.097,10304,,0,ProductFW::RemoveObsoleteLicenseData - Ended
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eTrust EZ Armor\EZ
Firewall\*.*
Firewall\*.*
Personal Firewall\*.*
Suite\eTrust Personal Firewall\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CA\CA Security Center\CA
Suite\CA Personal Firewall\*.*
1,3,20190701,11:12:06.144,10304,,0,ProductFW::RemoveRegistryData - Started
1,3,20190701,11:12:06.160,10304,,0,ProductFW::RemoveRegistryData - Ended with
result = 0
1,3,20190701,11:12:06.160,10304,,0,Deleting reg key
"SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{BDBAAB1B-B364-465E-931D-
4E2E2F0E609A}" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\pfw\Name" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\pfw\Files" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\pfw\Path" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\pfw\Generation" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\pfw\CommonVersion" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\pfw\Group" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\pfw\Type" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\pfw\Version" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\pfw"
C:\windows\system32\ZoneLabs\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eTrust EZ Armor\EZ
Firewall\*.*
Firewall\*.*
Suite\eTrust Personal Firewall\*.*
1,3,20190701,11:12:06.282,10304,,0,Deleting reg value "SOFTWARE\Zone Labs\Group" -
Result = 0.
1,3,20190701,11:12:06.298,10304,,0,Deleting reg value "SOFTWARE\Zone Labs\HU100" -
Result = 0.
Labs\IsUnified" - Result = 0.
1,3,20190701,11:12:06.298,10304,,0,Deleting reg value "SOFTWARE\Zone Labs\OEM" -
Result = 0.
"SOFTWARE\Zone Labs"
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\fw\Name" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\fw\Files" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\fw\Path" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\fw\Generation" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\fw\CommonVersion" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\fw\Group" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\fw\Type" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\fw\Version" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\fw"
1,3,20190701,11:12:06.382,10304,,0,Cleaning up obsolete files
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eTrust EZ Armor\*.*
Suite\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CA\CA Security Center\*.*
Suite\*.*
1,3,20190701,11:12:06.414,10304,,0,Removing contents. - = C:\CA\caiss\*.*
C:\ProgramData\CA\Consumer\SystemReport\*.*
C:\ProgramData\CA\Consumer\ISS\*.*
"(null)\C:\ProgramData\CA\Consumer\ISS\casc.log"
1,3,20190701,11:12:06.429,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\ISS\casc.log" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\ISS\caschelp.log"
1,3,20190701,11:12:06.445,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\ISS\caschelp.log" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\ISS\CCUpdate.Log"
1,3,20190701,11:12:06.461,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\ISS\CCUpdate.Log" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\ISS\ccupgrade.txt"
1,3,20190701,11:12:06.483,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\ISS\ccupgrade.txt" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\ISS\commonbo.log"
1,3,20190701,11:12:06.498,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\ISS\commonbo.log" - Result = 1.
C:\ProgramData\CA\Consumer\ISS\FeedStore\*.*
"(null)\C:\ProgramData\CA\Consumer\ISS\FeedStore\feedLog.txt"
1,3,20190701,11:12:06.514,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\ISS\FeedStore\feedLog.txt" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\ISS\FeedStore\MY_COMPUTER"
1,3,20190701,11:12:06.530,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\ISS\FeedStore\MY_COMPUTER" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\ISS\FeedStore\MY_FILES"
1,3,20190701,11:12:06.545,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\ISS\FeedStore\MY_FILES" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\ISS\FeedStore\MY_INTERNET"
1,3,20190701,11:12:06.561,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\ISS\FeedStore\MY_INTERNET" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\ISS\FeedStore\MY_KIDS"
1,3,20190701,11:12:06.583,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\ISS\FeedStore\MY_KIDS" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\ISS\FeedStore\OLB_ACTIVATE_NOW"
1,3,20190701,11:12:06.599,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\ISS\FeedStore\OLB_ACTIVATE_NOW" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\ISS\FeedStore\OLB_BUYSPACE_NOW"
1,3,20190701,11:12:06.614,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\ISS\FeedStore\OLB_BUYSPACE_NOW" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\ISS\FeedStore\OLB_SUGGEST_BUYSPACE_NOW"
1,3,20190701,11:12:06.630,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\ISS\FeedStore\OLB_SUGGEST_BUYSPACE_NOW" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\ISS\FeedStore\OLB_UPSELL"
1,3,20190701,11:12:06.645,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\ISS\FeedStore\OLB_UPSELL" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\ISS\FeedStore\TUNEUP_POST_SCAN_UPSELL"
1,3,20190701,11:12:06.661,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\ISS\FeedStore\TUNEUP_POST_SCAN_UPSELL" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\ISS\FeedStore\TUNEUP_PRE_SCAN_UPSELL"
1,3,20190701,11:12:06.661,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\ISS\FeedStore\TUNEUP_PRE_SCAN_UPSELL" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\ISS\FeedStore\TUNEUP_SCAN_ACTIVATE_NOW"
1,3,20190701,11:12:06.683,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\ISS\FeedStore\TUNEUP_SCAN_ACTIVATE_NOW" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\ISS\FeedStore\TUNEUP_SCHEDULAR_ACTIVATE_NOW"
1,3,20190701,11:12:06.699,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\ISS\FeedStore\TUNEUP_SCHEDULAR_ACTIVATE_NOW" - Result =
1.
"(null)\C:\ProgramData\CA\Consumer\ISS\FeedStore\TUNEUP_SCHEDULAR_UPSELL"
1,3,20190701,11:12:06.714,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\ISS\FeedStore\TUNEUP_SCHEDULAR_UPSELL" - Result = 1.
C:\ProgramData\CA\Consumer\ISS\KASubmissions\*.*
"(null)\C:\ProgramData\CA\Consumer\ISS\KASubmissions\cckasubmit.log"
1,3,20190701,11:12:06.730,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\ISS\KASubmissions\cckasubmit.log" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\ISS\SESSIONINFO_CCUpdate.txt"
1,3,20190701,11:12:06.746,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\ISS\SESSIONINFO_CCUpdate.txt" - Result = 1.
C:\ProgramData\CA\Consumer\CCube\tmp\*.*
C:\ProgramData\CA\Consumer\CCube\*.*
"(null)\C:\ProgramData\CA\Consumer\CCube\caEntitlementLog.txt"
1,3,20190701,11:12:06.777,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\CCube\caEntitlementLog.txt" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\CCube\CAScheduleTasks.JOB"
1,3,20190701,11:12:06.783,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\CCube\CAScheduleTasks.JOB" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\CCube\cawsclog.txt"
1,3,20190701,11:12:06.799,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\CCube\cawsclog.txt" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\CCube\ccevtmgr.lck"
1,3,20190701,11:12:06.815,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\CCube\ccevtmgr.lck" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\CCube\ccevtmgr.log"
1,3,20190701,11:12:06.830,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\CCube\ccevtmgr.log" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\CCube\ccmsgfrm.log"
1,3,20190701,11:12:06.846,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\CCube\ccmsgfrm.log" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\CCube\ccSchedulerLog.txt"
1,3,20190701,11:12:06.862,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\CCube\ccSchedulerLog.txt" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\CCube\ccupdateLog.txt"
1,3,20190701,11:12:06.877,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\CCube\ccupdateLog.txt" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\CCube\ccupdatevLog.txt"
1,3,20190701,11:12:06.884,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\CCube\ccupdatevLog.txt" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\CCube\ccupdatevLogBD.txt"
1,3,20190701,11:12:06.899,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\CCube\ccupdatevLogBD.txt" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\CCube\ccWatcherLog.txt"
1,3,20190701,11:12:06.915,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\CCube\ccWatcherLog.txt" - Result = 1.
C:\ProgramData\CA\Consumer\CCube\evtlog\*.*
"(null)\C:\ProgramData\CA\Consumer\CCube\evtlog\backupCloud.dat"
1,3,20190701,11:12:06.931,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\CCube\evtlog\backupCloud.dat" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\CCube\evtlog\IDTheftReport.db"
1,3,20190701,11:12:06.946,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\CCube\evtlog\IDTheftReport.db" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\CCube\evtlog\MyInternet.db"
1,3,20190701,11:12:06.962,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\CCube\evtlog\MyInternet.db" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\CCube\evtlog\MyKids.db"
1,3,20190701,11:12:06.984,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\CCube\evtlog\MyKids.db" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\CCube\evtlog\reports.db"
1,3,20190701,11:12:07.000,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\CCube\evtlog\reports.db" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\CCube\evtlog\restoreCloud.dat"
1,3,20190701,11:12:07.000,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\CCube\evtlog\restoreCloud.dat" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\CCube\evtlog\upd.dat"
1,3,20190701,11:12:07.015,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\CCube\evtlog\upd.dat" - Result = 1.
C:\ProgramData\CA\Consumer\CCube\ProgramAccess\*.*
"(null)\C:\ProgramData\CA\Consumer\CCube\ProgramAccess\pgm_access.db"
1,3,20190701,11:12:07.046,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\CCube\ProgramAccess\pgm_access.db" - Result = 1.
C:\ProgramData\CA\Consumer\CCube\*.*
1,3,20190701,11:12:07.062,10304,,0,Removing contents. - = C:\Program Files
(x86)\CA\SharedComponents\*.*
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\BranchTypeCASP" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\BranchPhaseCASP" - Result = 0.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eTrust EZ Armor\*.*
Suite\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CA\CA Security Center\*.*
Suite\*.*
"SOFTWARE\Microsoft\Windows\CurrentVersion\Run\cctray" - Result = 0.
"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\caiss_tutorial" - Result = 0.
"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\eISS_licreg" - Result = 0.
"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\eISS_TrustList" - Result = 0.
"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\ccube_Enrollment" - Result = 0.
1,3,20190701,11:12:07.147,10304,,0,Deleting reg key "S-1-5-21-617538823-4210613608-
3376558081-1001\SOFTWARE\ComputerAssociates\eTrust Suite Personal\mr" - Result = 0.
1,3,20190701,11:12:07.147,10304,,0,Result = 2 - Deleting empty reg key "S-1-5-21-
617538823-4210613608-3376558081-1001\SOFTWARE\ComputerAssociates\eTrust Suite
Personal\mr"
1,3,20190701,11:12:07.147,10304,,0,failed - Deleting empty reg key. "S-1-5-21-
617538823-4210613608-3376558081-1001\SOFTWARE\ComputerAssociates\eTrust Suite
Personal"
"SOFTWARE\ComputerAssociates\Shared\CCube\JoinedThreatNetwork" - Result = 0.
"SOFTWARE\ComputerAssociates\Shared\CCube"
"SOFTWARE\ComputerAssociates\Shared"
"SOFTWARE\ComputerAssociates\Shared"
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\BranchPhaseCASP" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\BranchTypeCASP" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\Generation" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\CommonVersion" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\Group" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\FirstTime" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\Path" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\Version" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\UserKey" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\OEM_SYSBUILDER" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\suiteType" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\suiteTypeNew" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\suiteTypeHistory" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\CloudBackup" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\buildType" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\productType" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\campaignCode" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\InstallerPath" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\SetupDir" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\SetupLang" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\CompanyName" - Result = 0.
"SOFTWARE\WOW6432Node\ComputerAssociates\eTrust Suite Personal\Path" - Result = 0.
"SOFTWARE\WOW6432Node\ComputerAssociates\eTrust Suite Personal"
"SOFTWARE\WOW6432Node\ComputerAssociates"
"SYSTEM\CurrentControlSet\Services\EventLog\Application\CaCCProvSP\EventMessageFile
" - Result = 0.
"SYSTEM\CurrentControlSet\Services\EventLog\Application\CaCCProvSP\TypesSupported"
- Result = 0.
"SYSTEM\CurrentControlSet\Services\EventLog\Application\CaCCProvSP"
"SYSTEM\CurrentControlSet\Services\EventLog\Application"
".DEFAULT\Software\Wow6432Node\ComputerAssociates"
1,3,20190701,11:12:07.447,10304,,0,Result = 2 - Deleting empty reg key "S-1-5-
19\Software\Wow6432Node\ComputerAssociates"
617538823-4210613608-3376558081-1001\Software\Wow6432Node\ComputerAssociates"
617538823-4210613608-3376558081-
1001_Classes\Software\Wow6432Node\ComputerAssociates"
C:\ProgramData\CA\Consumer\*.*
C:\ProgramData\CA\Consumer\APH\*.*
C:\ProgramData\CA\Consumer\APH\data_source\*.*
"(null)\C:\ProgramData\CA\Consumer\APH\data_source\brightcloud.map"
1,3,20190701,11:12:07.585,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\APH\data_source\brightcloud.map" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\APH\data_source\categories.txt"
1,3,20190701,11:12:07.601,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\APH\data_source\categories.txt" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\APH\data_source\custom.urls"
1,3,20190701,11:12:07.617,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\APH\data_source\custom.urls" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\APH\data_source\customdb"
1,3,20190701,11:12:07.632,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\APH\data_source\customdb" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\APH\data_source\customdb.lock"
1,3,20190701,11:12:07.648,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\APH\data_source\customdb.lock" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\APH\data_source\dia.key"
1,3,20190701,11:12:07.663,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\APH\data_source\dia.key" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\APH\data_source\diadb"
1,3,20190701,11:12:07.686,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\APH\data_source\diadb" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\APH\data_source\diadb.lock"
1,3,20190701,11:12:07.701,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\APH\data_source\diadb.lock" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\APH\data_source\initialize.lock"
1,3,20190701,11:12:07.717,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\APH\data_source\initialize.lock" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\APH\data_source\kidswatch.map"
1,3,20190701,11:12:07.732,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\APH\data_source\kidswatch.map" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\APH\data_source\reputation.map"
1,3,20190701,11:12:07.748,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\APH\data_source\reputation.map" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\APH\data_source\rulespace.map"
1,3,20190701,11:12:07.764,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\APH\data_source\rulespace.map" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\APH\data_source\sc-smartfilter.map"
1,3,20190701,11:12:07.779,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\APH\data_source\sc-smartfilter.map" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\APH\data_source\security.map"
1,3,20190701,11:12:07.786,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\APH\data_source\security.map" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\APH\data_source\sitefilter-ext.map"
1,3,20190701,11:12:07.801,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\APH\data_source\sitefilter-ext.map" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\APH\data_source\sitefilter-v2.map"
1,3,20190701,11:12:07.817,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\APH\data_source\sitefilter-v2.map" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\APH\data_source\sitefilter-v3.map"
1,3,20190701,11:12:07.833,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\APH\data_source\sitefilter-v3.map" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\APH\data_source\surfcontrol.map"
1,3,20190701,11:12:07.848,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\APH\data_source\surfcontrol.map" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\APH\data_source\urldb.lock"
1,3,20190701,11:12:07.864,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\APH\data_source\urldb.lock" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\APH\data_source\websense.map"
1,3,20190701,11:12:07.886,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\APH\data_source\websense.map" - Result = 1.
"(null)\C:\ProgramData\CA\Consumer\cazz_1545874946.exe"
1,3,20190701,11:12:07.902,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\cazz_1545874946.exe" - Result = 1.
C:\ProgramData\CA\Consumer\FW\*.*
"(null)\C:\ProgramData\CA\Consumer\FW\casansbo.log"
1,3,20190701,11:12:07.917,10304,,0,Deleting
"C:\ProgramData\CA\Consumer\FW\casansbo.log" - Result = 1.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\suite\Name" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\suite\Files" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\suite\Path" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\suite\Generation" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\suite\CommonVersion" - Result =
0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\suite\Group" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\suite\Type" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\suite\Version" - Result = 0.
"SOFTWARE\ComputerAssociates\eTrust Suite Personal\suite"

Calog

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Calog

Uploaded by

Copyright:

Available Formats

1,3,20181226,17:26:34.

You might also like