Technical Information
- [<HKLM>\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] 'McAfeeUpdaterUI' = '"%ProgramFiles%\McAfee\Agent\x86\UpdaterUI.exe" /StartedFromRunKey'
- [<HKLM>\System\CurrentControlSet\Services\macmnsvc] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\macmnsvc] 'ImagePath' = '"%ProgramFiles%\McAfee\Agent\macmnsvc.exe" /ServiceStart'
- [<HKLM>\System\CurrentControlSet\Services\McAfeeFramework] 'ImagePath' = '"%ProgramFiles%\McAfee\Agent\x86\macompatsvc.exe"'
- [<HKLM>\System\CurrentControlSet\Services\masvc] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\masvc] 'ImagePath' = '"%ProgramFiles%\McAfee\Agent\masvc.exe" /ServiceStart'
- %TEMP%\mcafeelogs\frminst_agalaspoza.log
- %ProgramFiles%\mcafee\agent\x86\0411\updres.dll
- %ProgramFiles%\mcafee\agent\x86\0410\updres.dll
- %ProgramFiles%\mcafee\agent\x86\040c\updres.dll
- %ProgramFiles%\mcafee\agent\x86\040b\updres.dll
- %ProgramFiles%\mcafee\agent\x86\040a\updres.dll
- %ProgramFiles%\mcafee\agent\x86\0407\updres.dll
- %ProgramFiles%\mcafee\agent\x86\0406\updres.dll
- %ProgramFiles%\mcafee\agent\x86\0405\updres.dll
- %ProgramFiles%\mcafee\agent\x86\0404\updres.dll
- %ProgramFiles%\mcafee\agent\x86\0409\updres.dll
- %ProgramFiles%\mcafee\agent\x86\0413\updres.dll
- %ProgramFiles%\mcafee\agent\x86\0412\updres.dll
- %ProgramFiles%\mcafee\agent\x86\trex.dll
- %ProgramFiles%\mcafee\agent\x86\sqlite.dll
- %ProgramFiles%\mcafee\agent\x86\policyupgrade.exe
- %ProgramFiles%\mcafee\agent\x86\poevtinf.dll
- %ProgramFiles%\mcafee\agent\x86\nagshr32.dll
- %ProgramFiles%\mcafee\agent\x86\mxml.dll
- %ProgramFiles%\mcafee\agent\x86\0c0a\mueres.dll
- %ProgramFiles%\mcafee\agent\x86\0816\mueres.dll
- %ProgramFiles%\mcafee\agent\x86\0804\mueres.dll
- %ProgramFiles%\mcafee\agent\x86\041f\mueres.dll
- %ProgramFiles%\mcafee\agent\x86\updaterui.exe
- %ProgramFiles%\mcafee\agent\x86\marepomirror.exe
- %ProgramFiles%\mcafee\agent\x86\0414\updres.dll
- %ProgramFiles%\mcafee\agent\ma_configurator.dll
- %ProgramFiles%\mcafee\agent\ma_client.dll
- %ProgramFiles%\mcafee\agent\libuv.dll
- %ProgramFiles%\mcafee\agent\libini.dll
- %ProgramFiles%\mcafee\agent\libcurl.dll
- %ProgramFiles%\mcafee\agent\genevtinf5_64.dll
- %ProgramFiles%\mcafee\agent\cmdagent.exe
- %ProgramFiles%\mcafee\agent\cryptocme.sig
- %ProgramFiles%\mcafee\agent\cryptocme.dll
- %ProgramFiles%\mcafee\agent\ccme_asym.dll
- %ProgramFiles%\mcafee\agent\ccme_base_non_fips.dll
- %ProgramFiles%\mcafee\agent\ccme_base.dll
- %ProgramFiles%\mcafee\agent\microsoft.vc100.crt.manifest
- %ProgramFiles%\mcafee\agent\x86\zlib.dll
- %ProgramFiles%\mcafee\agent\x86\xmlwrap.dll
- %ProgramFiles%\mcafee\agent\x86\userspace.dll
- %ProgramFiles%\mcafee\agent\x86\0c0a\updres.dll
- %ProgramFiles%\mcafee\agent\x86\0816\updres.dll
- %ProgramFiles%\mcafee\agent\x86\0804\updres.dll
- %ProgramFiles%\mcafee\agent\x86\041f\updres.dll
- %ProgramFiles%\mcafee\agent\x86\041d\updres.dll
- %ProgramFiles%\mcafee\agent\x86\0419\updres.dll
- %ProgramFiles%\mcafee\agent\x86\0416\updres.dll
- %ProgramFiles%\mcafee\agent\x86\041d\mueres.dll
- %PROGRAMDATA%\mcafee\agent\update\updatemain.mcs
- %ProgramFiles%\mcafee\agent\x86\0419\mueres.dll
- %ProgramFiles%\mcafee\agent\x86\0416\mueres.dll
- %ProgramFiles%\mcafee\agent\x86\0415\mueres.dll
- %ProgramFiles%\mcafee\agent\x86\ma_repository.dll
- %PROGRAMDATA%\mcafee\agent\certstore\mfeca_2014_2017.cer
- %PROGRAMDATA%\mcafee\agent\certstore\mfeca.cer
- %PROGRAMDATA%\mcafee\agent\certstore\mfe_sia_ca_signer.pem.cer
- %PROGRAMDATA%\mcafee\agent\certstore\mfe_sia_ca_root.pem.cer
- %ProgramFiles%\mcafee\agent\x86\ma_xml.dll
- %ProgramFiles%\mcafee\agent\x86\ma_variant.dll
- %ProgramFiles%\mcafee\agent\x86\ma_utils.dll
- %ProgramFiles%\mcafee\agent\x86\ma_udp_client.dll
- %ProgramFiles%\mcafee\agent\x86\ma_service_manager_client.dll
- %ProgramFiles%\mcafee\agent\x86\ma_serialization.dll
- %ProgramFiles%\mcafee\agent\x86\ma_proxy.dll
- %PROGRAMDATA%\mcafee\agent\certstore\mfeca_sha256_2016_2019.cer
- %ProgramFiles%\mcafee\agent\x86\ma_network.dll
- %ProgramFiles%\mcafee\agent\x86\ma_msgbus_auth.sig
- %ProgramFiles%\mcafee\agent\x86\ma_msgbus.dll
- %ProgramFiles%\mcafee\agent\x86\ma_logger.dll
- %ProgramFiles%\mcafee\agent\x86\ma_datastore.dll
- %ProgramFiles%\mcafee\agent\x86\ma_database.dll
- %ProgramFiles%\mcafee\agent\x86\ma_crypto.dll
- %ProgramFiles%\mcafee\agent\x86\ma_configurator.dll
- %ProgramFiles%\mcafee\agent\x86\ma_compatplugin.dll
- %ProgramFiles%\mcafee\agent\x86\ma_compatlpc.dll
- %ProgramFiles%\mcafee\agent\ma_crypto.dll
- %ProgramFiles%\mcafee\agent\x86\0415\updres.dll
- %ProgramFiles%\mcafee\agent\x86\macompatsvc.exe
- %ProgramFiles%\mcafee\agent\x86\mctray.exe
- %PROGRAMDATA%\mcafee\agent\certstore\mfeca_sha1_2016_2019.cer
- %ProgramFiles%\mcafee\agent\x86\0414\mueres.dll
- %ProgramFiles%\mcafee\agent\x86\0413\mueres.dll
- %ProgramFiles%\mcafee\agent\x86\0412\mueres.dll
- %ProgramFiles%\mcafee\agent\x86\0411\mueres.dll
- %ProgramFiles%\mcafee\agent\x86\0410\mueres.dll
- %ProgramFiles%\mcafee\agent\x86\040c\mueres.dll
- %ProgramFiles%\mcafee\agent\x86\040b\mueres.dll
- %ProgramFiles%\mcafee\agent\x86\040a\mueres.dll
- %ProgramFiles%\mcafee\agent\x86\0407\mueres.dll
- %ProgramFiles%\mcafee\agent\x86\0406\mueres.dll
- %ProgramFiles%\mcafee\agent\x86\0405\mueres.dll
- %ProgramFiles%\mcafee\agent\x86\0404\mueres.dll
- %ProgramFiles%\mcafee\agent\x86\0409\mueres.dll
- %ProgramFiles%\mcafee\agent\x86\mue.exe
- %ProgramFiles%\mcafee\agent\x86\msvcr100.bin
- %ProgramFiles%\mcafee\agent\x86\msvcp100.bin
- %PROGRAMDATA%\mcafee\agent\ml_cacerts.cer
- %ProgramFiles%\mcafee\agent\x86\mfemactl.exe
- %ProgramFiles%\mcafee\agent\x86\mfelpc.dll
- %ProgramFiles%\mcafee\agent\x86\mfecryptc.dll
- %ProgramFiles%\mcafee\agent\x86\mfeagent_sha256.cat
- %ProgramFiles%\mcafee\agent\x86\mfeagent.cat
- %ProgramFiles%\mcafee\agent\x86\mcscancheck.exe
- %ProgramFiles%\mcafee\agent\ma_http_server.dll
- %WINDIR%\temp\cabeca4.tmp
- %ProgramFiles%\mcafee\agent\ma_logger.dll
- %PROGRAMDATA%\mcafee\agent\db\matask.db
- %PROGRAMDATA%\mcafee\agent\db\matask.db-journal
- %PROGRAMDATA%\mcafee\agent\db\mapolicy.db
- %PROGRAMDATA%\mcafee\agent\db\mapolicy.db-journal
- %TEMP%\mfe99f5.tmp\agent.in~
- %PROGRAMDATA%\mcafee\agent\db\ma.db
- %PROGRAMDATA%\mcafee\agent\db\ma.db-journal
- %PROGRAMDATA%\mcafee\agent\keystore\serverreqseckey.bin
- %PROGRAMDATA%\mcafee\agent\keystore\serverpubkey.bin
- %PROGRAMDATA%\mcafee\agent\keystore\agentprvkey.bin
- %PROGRAMDATA%\mcafee\agent\db\msgbus.db
- %PROGRAMDATA%\mcafee\agent\db\msgbus.db-journal
- %WINDIR%\installer\msi605b.tmp
- %WINDIR%\installer\msi5e18.tmp
- %PROGRAMDATA%\mcafee\agent\frameworkmanifest.xml_rollback
- %WINDIR%\installer\msi5de8.tmp
- %WINDIR%\installer\msi5d3b.tmp
- <SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\mfeagent64_sha256.cat
- %WINDIR%\installer\msi5b66.tmp
- <SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\mfeagent64.cat
- %WINDIR%\installer\msi5b26.tmp
- <SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\mfeagent_sha256.cat
- %PROGRAMDATA%\mcafee\agent\keystore\agentpubkey.bin
- %ProgramFiles%\mcafee\agent\ma_database.dll
- %PROGRAMDATA%\mcafee\agent\cabundle.cer
- %WINDIR%\installer\msicd48.tmp
- %WINDIR%\installer\msicbef.tmp
- %WINDIR%\installer\msicb80.tmp
- %WINDIR%\installer\msicb31.tmp
- %WINDIR%\installer\msicab3.tmp
- %WINDIR%\installer\fa295.msi
- %TEMP%\mcafeelogs\updaterui_agalaspoza.log
- %PROGRAMDATA%\mcafee\agent\msgbus\config.ini
- %PROGRAMDATA%\mcafee\agent\msgbus\config.in~
- %PROGRAMDATA%\mcafee\agent\logs\mfemactl.log
- %PROGRAMDATA%\mcafee\agent\logs\mfemactl_c.log
- %PROGRAMDATA%\mcafee\agent\logs\macompatsvc_agalaspoza.log
- %PROGRAMDATA%\mcafee\agent\agent.ini
- %PROGRAMDATA%\mcafee\agent\agent.in~
- %PROGRAMDATA%\mcafee\agent\logs\masvc_agalaspoza.log
- %PROGRAMDATA%\mcafee\agent\db\macmnsvc.db
- %PROGRAMDATA%\mcafee\agent\db\macmnsvc.db-journal
- %PROGRAMDATA%\mcafee\agent\logs\macmnsvc_agalaspoza.log
- %WINDIR%\installer\msi704d.tmp
- %WINDIR%\installer\msi6fa1.tmp
- %WINDIR%\installer\msi6f80.tmp
- %WINDIR%\installer\msi6d7c.tmp
- %PROGRAMDATA%\mcafee\agent\db\mascheduler.db
- %WINDIR%\installer\msi5ae7.tmp
- %TEMP%\mcafeelogs\maconfig.log
- <SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\mfeagent.cat
- %WINDIR%\installer\msi5a98.tmp
- %WINDIR%\installer\msi472e.tmp
- %ProgramFiles%\mcafee\agent\mfeagent64.cat
- %ProgramFiles%\mcafee\agent\ma_aac_service.dll
- %ProgramFiles%\mcafee\agent\zlib.dll
- %ProgramFiles%\mcafee\agent\trex.dll
- %ProgramFiles%\mcafee\agent\sqlite.dll
- %ProgramFiles%\mcafee\agent\mxml.dll
- %ProgramFiles%\mcafee\agent\msvcr100.bin
- %ProgramFiles%\mcafee\agent\msvcp100.bin
- %ProgramFiles%\mcafee\agent\mfelpc.dll
- %ProgramFiles%\mcafee\agent\mfecryptc.dll
- %ProgramFiles%\mcafee\agent\mfeagent64_sha256.cat
- %ProgramFiles%\mcafee\agent\maconfig.exe
- %ProgramFiles%\mcafee\agent\ma_datachannel_service.dll
- %ProgramFiles%\mcafee\agent\ma_xml.dll
- %ProgramFiles%\mcafee\agent\ma_variant.dll
- %ProgramFiles%\mcafee\agent\ma_utils.dll
- %ProgramFiles%\mcafee\agent\ma_service_manager_client.dll
- %ProgramFiles%\mcafee\agent\ma_serialization.dll
- %ProgramFiles%\mcafee\agent\ma_repository.dll
- %ProgramFiles%\mcafee\agent\ma_proxy.dll
- %ProgramFiles%\mcafee\agent\ma_network.dll
- %ProgramFiles%\mcafee\agent\ma_msgbus_auth.sig
- %ProgramFiles%\mcafee\agent\ma_msgbus.dll
- %ProgramFiles%\mcafee\agent\ma_datastore.dll
- %ProgramFiles%\mcafee\agent\x86\ma_compatdata.dll
- %ProgramFiles%\mcafee\agent\ma_event_service.dll
- %ProgramFiles%\mcafee\agent\ma_lockdown_service.dll
- %ProgramFiles%\mcafee\agent\ma_ahclient.dll
- %WINDIR%\installer\{265fa622-a254-49fb-b380-d9ef9abfd32d}\arpproducticon.exe
- %PROGRAMDATA%\mcafee\agent\svc_x86.cab
- %PROGRAMDATA%\mcafee\agent\svc_x64.cab
- %PROGRAMDATA%\mcafee\agent\shared64.cab
- %PROGRAMDATA%\mcafee\agent\shared.cab
- %PROGRAMDATA%\mcafee\agent\mfeagent_x64.msi
- %WINDIR%\installer\msi449d.tmp
- %ProgramFiles%\mcafee\agent\msvcr100.dll
- %ProgramFiles%\mcafee\agent\x86\msvcr100.dll
- %ProgramFiles%\mcafee\agent\msvcp100.dll
- %ProgramFiles%\mcafee\agent\x86\msvcp100.dll
- %ProgramFiles%\mcafee\agent\masvc.exe
- %ProgramFiles%\mcafee\agent\macmnsvc.exe
- %ProgramFiles%\mcafee\agent\ma_updater_service.dll
- %ProgramFiles%\mcafee\agent\ma_udp_server.dll
- %ProgramFiles%\mcafee\agent\ma_udp_client.dll
- %ProgramFiles%\mcafee\agent\ma_sensor_service.dll
- %ProgramFiles%\mcafee\agent\ma_scheduler.dll
- %ProgramFiles%\mcafee\agent\ma_repository_service.dll
- %ProgramFiles%\mcafee\agent\ma_property_service.dll
- %ProgramFiles%\mcafee\agent\ma_policy_service.dll
- %ProgramFiles%\mcafee\agent\ma_p2p.dll
- %ProgramFiles%\mcafee\agent\ma_io_service.dll
- %PROGRAMDATA%\mcafee\agent\db\mascheduler.db-journal
- %ProgramFiles%\mcafee\agent\x86\ma_compatbase.dll
- %ProgramFiles%\mcafee\agent\x86\0804\cmauires.dll
- %ProgramFiles%\mcafee\agent\x86\mctray\images\mcafee\group_folder_closed.png
- %ProgramFiles%\mcafee\agent\x86\mctray\images\mcafee\grip.png
- %ProgramFiles%\mcafee\agent\x86\mctray\images\mcafee\gray_checked.png
- %ProgramFiles%\mcafee\agent\x86\mctray\images\mcafee\gradated_background_with_mcafee_logo.png
- %ProgramFiles%\mcafee\agent\x86\mctray\images\mcafee\gradated_background.png
- %ProgramFiles%\mcafee\agent\x86\mctray\images\mcafee\folder_open.png
- %ProgramFiles%\mcafee\agent\x86\mctray\images\mcafee\folder_closed.png
- %ProgramFiles%\mcafee\agent\x86\mctray\images\mcafee\document.png
- %ProgramFiles%\mcafee\agent\x86\mctray\images\mcafee\disallow.png
- %ProgramFiles%\mcafee\agent\x86\mctray\images\mcafee\details_open_pressed.png
- %ProgramFiles%\mcafee\agent\x86\mctray\images\mcafee\main_window.ini
- %ProgramFiles%\mcafee\agent\x86\mctray\images\mcafee\inbound.png
- %ProgramFiles%\mcafee\agent\x86\mctray\images\mcafee\details_close_normal.png
- %ProgramFiles%\mcafee\agent\x86\mctray\images\mcafee\checkmark.png
- %ProgramFiles%\mcafee\agent\x86\mctray\images\mcafee\checked.png
- %ProgramFiles%\mcafee\agent\x86\mctray\images\mcafee\button_up.png
- %ProgramFiles%\mcafee\agent\x86\mctray\images\mcafee\button_hover.png
- %ProgramFiles%\mcafee\agent\x86\mctray\images\mcafee\button_down.png
- %ProgramFiles%\mcafee\agent\x86\mctray\images\mcafee\button_disabled.png
- %ProgramFiles%\mcafee\agent\x86\mctray\images\mcafee\bidirectional.png
- %ProgramFiles%\mcafee\agent\x86\mctray\images\mcafee\allow.png
- %ProgramFiles%\mcafee\agent\x86\mctray\images\mcafee\advisory_dlg.png
- %ProgramFiles%\mcafee\agent\x86\mctray\images\mcafee\details_open_normal.png
- %WINDIR%\installer\msiee90.tmp
- %ProgramFiles%\mcafee\agent\x86\mctray\images\mcafee\mcafee_m_small.png
- %ProgramFiles%\mcafee\agent\x86\040c\mctrayres.dll
- %ProgramFiles%\mcafee\agent\x86\040b\mctrayres.dll
- %ProgramFiles%\mcafee\agent\x86\040a\mctrayres.dll
- %ProgramFiles%\mcafee\agent\x86\0407\mctrayres.dll
- %ProgramFiles%\mcafee\agent\x86\0406\mctrayres.dll
- %ProgramFiles%\mcafee\agent\x86\0405\mctrayres.dll
- %ProgramFiles%\mcafee\agent\x86\0404\mctrayres.dll
- %ProgramFiles%\mcafee\agent\x86\0409\mctrayres.dll
- %ProgramFiles%\mcafee\agent\x86\mctraylegacysupportplugin32.dll
- %ProgramFiles%\mcafee\agent\x86\mctrayinterfacelib.dll
- %ProgramFiles%\mcafee\agent\x86\mctrayinstsupp.dll
- %ProgramFiles%\mcafee\agent\x86\mctray\images\mcafee\unchecked.png
- %ProgramFiles%\mcafee\agent\x86\mctray\images\mcafee\tray_menu_okay.png
- %ProgramFiles%\mcafee\agent\x86\mctray\images\mcafee\tray_menu_issue.png
- %ProgramFiles%\mcafee\agent\x86\mctray\images\mcafee\trailer.png
- %ProgramFiles%\mcafee\agent\x86\mctray\images\mcafee\system_status_warning_medium.png
- %ProgramFiles%\mcafee\agent\x86\mctray\images\mcafee\system_status_ok_medium.png
- %ProgramFiles%\mcafee\agent\x86\mctray\images\mcafee\system_status_error_medium.png
- %ProgramFiles%\mcafee\agent\x86\mctray\images\mcafee\splashscreen.png
- %ProgramFiles%\mcafee\agent\x86\mctray\images\mcafee\rule_folder_closed.png
- %ProgramFiles%\mcafee\agent\x86\mctray\images\mcafee\plus_sign.png
- %ProgramFiles%\mcafee\agent\x86\mctray\images\mcafee\outbound.png
- %ProgramFiles%\mcafee\agent\x86\mctray\images\mcafee\no_symbol.png
- %ProgramFiles%\mcafee\agent\x86\mctray\images\mcafee\advisory_dlg.ini
- %ProgramFiles%\mcafee\agent\x86\mctray\images\mcafee\details_close_pressed.png
- %ProgramFiles%\mcafee\agent\x86\mctrayeventlog.dll
- %ProgramFiles%\mcafee\agent\x86\mctrayerrorloggingplugin.dll
- %ProgramFiles%\mcafee\agent\x86\mcafeewin32guisupportdll.dll
- %TEMP%\mfe99f5.tmp\srpubkey.bin
- %TEMP%\mcafeelogs\mfeagent.msi.2019.07.18.02.42.22.log
- %TEMP%\mcafeelogs\frminst_agalaspoza_error.log
- %TEMP%\mfe99f5.tmp\hashes.xml
- %TEMP%\mfe99f5.tmp\packageinfo.xml
- %TEMP%\mfe99f5.tmp\bootstrapinfo.xml
- %TEMP%\mfe99f5.tmp\sr2048pubkey.bin
- %TEMP%\mfe99f5.tmp\req2048seckey.bin
- %TEMP%\mfe99f5.tmp\agent.ini
- %TEMP%\mfe99f5.tmp\repokeys.ini
- %TEMP%\mfe99f5.tmp\agentfipsmode
- %TEMP%\mfe99f5.tmp\sitelist.xml
- %WINDIR%\installer\msiede3.tmp
- %TEMP%\mfe99f5.tmp\reqseckey.bin
- %TEMP%\mfe99f5.tmp\svc_x86.cab
- %TEMP%\mfe99f5.tmp\svc_x64.cab
- %TEMP%\mfe99f5.tmp\shared64.cab
- %TEMP%\mfe99f5.tmp\shared.cab
- %TEMP%\mfe99f5.tmp\mfeagent_x64.msi
- %TEMP%\mfe99f5.tmp\mfeagent.msi
- %TEMP%\mfe99f5.tmp\frminst.exe
- %TEMP%\mfe99f5.tmp\cleanup.exe
- %TEMP%\mfe99f5.tmp\__temp.zip
- %ProgramFiles%\mcafee\agent\x86\0410\mctrayres.dll
- %ProgramFiles%\mcafee\agent\x86\mctray\images\mcafee\minus_sign.png
- %TEMP%\{265fa622-a254-49fb-b380-d9ef9abfd32d}\main.txt
- %WINDIR%\installer\fa293.ipi
- %WINDIR%\installer\fa290.msi
- %ProgramFiles%\mcafee\agent\x86\mcafeecommonupdaterplugin.dll
- %ProgramFiles%\mcafee\agent\x86\componentpointproduct.dll
- %WINDIR%\installer\msi3922.tmp
- %WINDIR%\installer\msi196.tmp
- %WINDIR%\installer\msif9.tmp
- %WINDIR%\installer\msife97.tmp
- %WINDIR%\installer\msife67.tmp
- %TEMP%\mcafeelogs\mfemactl.log
- %TEMP%\mcafeelogs\mfemactl_c.log
- %TEMP%\c4ff7823-6955-46ea-8a54-6c7f1356e478\mfemactl.exe
- %WINDIR%\installer\msifbb6.tmp
- %WINDIR%\installer\msifa6d.tmp
- C:\config.msi\fa294.rbs
- %WINDIR%\installer\msif163.tmp
- %TEMP%\{265fa622-a254-49fb-b380-d9ef9abfd32d}\repokeys.ini
- %TEMP%\{265fa622-a254-49fb-b380-d9ef9abfd32d}\agentfipsmode
- %TEMP%\{265fa622-a254-49fb-b380-d9ef9abfd32d}\sr2048pubkey.bin
- %TEMP%\{265fa622-a254-49fb-b380-d9ef9abfd32d}\srpubkey.bin
- %TEMP%\{265fa622-a254-49fb-b380-d9ef9abfd32d}\req2048seckey.bin
- %TEMP%\{265fa622-a254-49fb-b380-d9ef9abfd32d}\reqseckey.bin
- %WINDIR%\installer\msif133.tmp
- %WINDIR%\installer\msif076.tmp
- %WINDIR%\installer\msiefc9.tmp
- %ProgramFiles%\mcafee\agent\x86\0416\agentres.dll
- %ProgramFiles%\mcafee\agent\x86\ma_compat_subsystem.dll
- %ProgramFiles%\mcafee\agent\x86\0413\mctrayres.dll
- %ProgramFiles%\mcafee\agent\x86\0416\cmauires.dll
- %ProgramFiles%\mcafee\agent\x86\0415\cmauires.dll
- %ProgramFiles%\mcafee\agent\x86\0414\cmauires.dll
- %ProgramFiles%\mcafee\agent\x86\0413\cmauires.dll
- %ProgramFiles%\mcafee\agent\x86\0412\cmauires.dll
- %ProgramFiles%\mcafee\agent\x86\0411\cmauires.dll
- %ProgramFiles%\mcafee\agent\x86\0410\cmauires.dll
- %ProgramFiles%\mcafee\agent\x86\040c\cmauires.dll
- %ProgramFiles%\mcafee\agent\x86\040b\cmauires.dll
- %ProgramFiles%\mcafee\agent\x86\040a\cmauires.dll
- %ProgramFiles%\mcafee\agent\x86\041d\cmauires.dll
- %ProgramFiles%\mcafee\agent\x86\0419\cmauires.dll
- %ProgramFiles%\mcafee\agent\x86\0405\cmauires.dll
- %ProgramFiles%\mcafee\agent\x86\0404\cmauires.dll
- %ProgramFiles%\mcafee\agent\x86\0409\cmauires.dll
- %ProgramFiles%\mcafee\agent\x86\clientui.dll
- %ProgramFiles%\mcafee\agent\x86\cryptocme.sig
- %ProgramFiles%\mcafee\agent\x86\cryptocme.dll
- %ProgramFiles%\mcafee\agent\x86\ccme_asym.dll
- %ProgramFiles%\mcafee\agent\x86\ccme_base_non_fips.dll
- %ProgramFiles%\mcafee\agent\x86\ccme_base.dll
- %ProgramFiles%\mcafee\agent\x86\boost_thread-vc100-mt-1_39.dll
- %ProgramFiles%\mcafee\agent\x86\0407\cmauires.dll
- %ProgramFiles%\mcafee\agent\x86\0411\mctrayres.dll
- %ProgramFiles%\mcafee\agent\x86\041f\cmauires.dll
- %ProgramFiles%\mcafee\agent\x86\ma_compat_scheduler.dll
- %ProgramFiles%\mcafee\agent\x86\ma_compat_logger.dll
- %ProgramFiles%\mcafee\agent\x86\ma_compat_framework_factory.dll
- %ProgramFiles%\mcafee\agent\x86\ma_compat_agent.dll
- %ProgramFiles%\mcafee\agent\x86\ma_client.dll
- %PROGRAMDATA%\mcafee\agent\data\logging\js\json2.js
- %PROGRAMDATA%\mcafee\agent\data\logging\js\agentlog.js
- %PROGRAMDATA%\mcafee\agent\data\logging\css\desc.gif
- %PROGRAMDATA%\mcafee\agent\data\logging\css\bg.gif
- %PROGRAMDATA%\mcafee\agent\data\logging\css\asc.gif
- %PROGRAMDATA%\mcafee\agent\data\logging\css\agentlog.css
- %ProgramFiles%\mcafee\agent\license.txt
- %ProgramFiles%\mcafee\agent\x86\libuv.dll
- %ProgramFiles%\mcafee\agent\x86\libini.dll
- %ProgramFiles%\mcafee\agent\x86\libcurl.dll
- %PROGRAMDATA%\mcafee\agent\update\installmain.mcs
- %ProgramFiles%\mcafee\agent\x86\mctray\gui_redirect.ini
- %ProgramFiles%\mcafee\agent\x86\genevtinf5.dll
- %ProgramFiles%\mcafee\agent\x86\frminst.exe
- %PROGRAMDATA%\mcafee\agent\frameworkmanifest.xml
- %ProgramFiles%\mcafee\agent\x86\componentuserinterface.dll
- %ProgramFiles%\mcafee\agent\x86\0c0a\cmauires.dll
- %ProgramFiles%\mcafee\agent\x86\0816\cmauires.dll
- %ProgramFiles%\mcafee\agent\x86\boost_system-vc100-mt-1_39.dll
- %ProgramFiles%\mcafee\agent\x86\0406\cmauires.dll
- %ProgramFiles%\mcafee\agent\0c0a\agentres.ini
- %ProgramFiles%\mcafee\agent\0816\agentres.ini
- %ProgramFiles%\mcafee\agent\0804\agentres.ini
- %ProgramFiles%\mcafee\agent\x86\0409\agentres.dll
- %ProgramFiles%\mcafee\agent\x86\0412\agentres.dll
- %ProgramFiles%\mcafee\agent\x86\0411\agentres.dll
- %ProgramFiles%\mcafee\agent\x86\0410\agentres.dll
- %ProgramFiles%\mcafee\agent\x86\040c\agentres.dll
- %ProgramFiles%\mcafee\agent\x86\040b\agentres.dll
- %ProgramFiles%\mcafee\agent\x86\040a\agentres.dll
- %ProgramFiles%\mcafee\agent\x86\0407\agentres.dll
- %ProgramFiles%\mcafee\agent\x86\0406\agentres.dll
- %ProgramFiles%\mcafee\agent\x86\0405\agentres.dll
- %ProgramFiles%\mcafee\agent\x86\0404\agentres.dll
- %PROGRAMDATA%\mcafee\agent\data\logging\agentlog.html
- %ProgramFiles%\mcafee\agent\x86\0414\agentres.dll
- %ProgramFiles%\mcafee\agent\x86\microsoft.vc100.crt.manifest
- %ProgramFiles%\mcafee\agent\x86\0c0a\mctrayres.dll
- %ProgramFiles%\mcafee\agent\x86\0816\mctrayres.dll
- %ProgramFiles%\mcafee\agent\x86\0804\mctrayres.dll
- %ProgramFiles%\mcafee\agent\x86\041f\mctrayres.dll
- %ProgramFiles%\mcafee\agent\x86\041d\mctrayres.dll
- %ProgramFiles%\mcafee\agent\x86\0419\mctrayres.dll
- %ProgramFiles%\mcafee\agent\x86\0416\mctrayres.dll
- %ProgramFiles%\mcafee\agent\x86\0415\mctrayres.dll
- %ProgramFiles%\mcafee\agent\x86\0414\mctrayres.dll
- %ProgramFiles%\mcafee\agent\x86\0412\mctrayres.dll
- %ProgramFiles%\mcafee\agent\x86\ma_compat_updater.dll
- %ProgramFiles%\mcafee\agent\x86\0415\agentres.dll
- %ProgramFiles%\mcafee\agent\x86\041d\agentres.dll
- %ProgramFiles%\mcafee\agent\x86\0413\agentres.dll
- %ProgramFiles%\mcafee\agent\041f\agentres.ini
- %ProgramFiles%\mcafee\agent\041d\agentres.ini
- %ProgramFiles%\mcafee\agent\0419\agentres.ini
- %ProgramFiles%\mcafee\agent\0416\agentres.ini
- %ProgramFiles%\mcafee\agent\0415\agentres.ini
- %ProgramFiles%\mcafee\agent\0414\agentres.ini
- %ProgramFiles%\mcafee\agent\0413\agentres.ini
- %ProgramFiles%\mcafee\agent\0412\agentres.ini
- %ProgramFiles%\mcafee\agent\0411\agentres.ini
- %ProgramFiles%\mcafee\agent\0410\agentres.ini
- %ProgramFiles%\mcafee\agent\040c\agentres.ini
- %ProgramFiles%\mcafee\agent\040b\agentres.ini
- %ProgramFiles%\mcafee\agent\040a\agentres.ini
- %ProgramFiles%\mcafee\agent\0407\agentres.ini
- %ProgramFiles%\mcafee\agent\0406\agentres.ini
- %ProgramFiles%\mcafee\agent\0405\agentres.ini
- %ProgramFiles%\mcafee\agent\0404\agentres.ini
- %ProgramFiles%\mcafee\agent\0409\agentres.ini
- %ProgramFiles%\mcafee\agent\x86\0c0a\agentres.dll
- %ProgramFiles%\mcafee\agent\x86\0816\agentres.dll
- %ProgramFiles%\mcafee\agent\x86\0804\agentres.dll
- %ProgramFiles%\mcafee\agent\x86\041f\agentres.dll
- %ProgramFiles%\mcafee\agent\x86\0419\agentres.dll
- %WINDIR%\temp\tareca5.tmp
- <SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\mfeagent.cat
- <SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\mfeagent_sha256.cat
- <SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\mfeagent64.cat
- <SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\mfeagent64_sha256.cat
- %WINDIR%\installer\msiede3.tmp
- %WINDIR%\installer\msi6f80.tmp
- %WINDIR%\installer\msi6fa1.tmp
- %PROGRAMDATA%\mcafee\agent\db\macmnsvc.db-journal
- %PROGRAMDATA%\mcafee\agent\agent.in~
- %PROGRAMDATA%\mcafee\agent\msgbus\config.in~
- %WINDIR%\installer\msi704d.tmp
- %WINDIR%\installer\msicab3.tmp
- %WINDIR%\installer\msicb31.tmp
- %PROGRAMDATA%\mcafee\agent\frameworkmanifest.xml_rollback
- %WINDIR%\installer\msi605b.tmp
- %WINDIR%\installer\msi6d7c.tmp
- %WINDIR%\installer\msicb80.tmp
- C:\config.msi\fa294.rbs
- %TEMP%\{265fa622-a254-49fb-b380-d9ef9abfd32d}\agentfipsmode
- %TEMP%\{265fa622-a254-49fb-b380-d9ef9abfd32d}\main.txt
- %TEMP%\{265fa622-a254-49fb-b380-d9ef9abfd32d}\repokeys.ini
- %TEMP%\{265fa622-a254-49fb-b380-d9ef9abfd32d}\req2048seckey.bin
- %TEMP%\{265fa622-a254-49fb-b380-d9ef9abfd32d}\reqseckey.bin
- %TEMP%\{265fa622-a254-49fb-b380-d9ef9abfd32d}\sr2048pubkey.bin
- %TEMP%\{265fa622-a254-49fb-b380-d9ef9abfd32d}\srpubkey.bin
- %WINDIR%\installer\msicd48.tmp
- %WINDIR%\installer\msicbef.tmp
- %WINDIR%\installer\msif076.tmp
- %PROGRAMDATA%\mcafee\agent\db\mascheduler.db-journal
- %PROGRAMDATA%\mcafee\agent\db\msgbus.db-journal
- %PROGRAMDATA%\mcafee\agent\db\matask.db-journal
- %WINDIR%\installer\msiefc9.tmp
- %WINDIR%\installer\msif133.tmp
- %WINDIR%\installer\msif163.tmp
- %WINDIR%\installer\msifa6d.tmp
- %WINDIR%\installer\msifbb6.tmp
- %WINDIR%\installer\msife67.tmp
- %WINDIR%\installer\msife97.tmp
- %WINDIR%\installer\msif9.tmp
- %WINDIR%\installer\msi196.tmp
- %WINDIR%\installer\msi3922.tmp
- %WINDIR%\installer\msiee90.tmp
- %WINDIR%\installer\msi449d.tmp
- %WINDIR%\installer\msi5a98.tmp
- %WINDIR%\installer\msi5ae7.tmp
- %WINDIR%\installer\msi5b26.tmp
- %WINDIR%\installer\msi5b66.tmp
- %WINDIR%\installer\msi5d3b.tmp
- %WINDIR%\installer\msi5de8.tmp
- %WINDIR%\installer\msi5e18.tmp
- %PROGRAMDATA%\mcafee\agent\db\ma.db-journal
- %TEMP%\mfe99f5.tmp\agent.in~
- %PROGRAMDATA%\mcafee\agent\db\mapolicy.db-journal
- %WINDIR%\installer\msi472e.tmp
- %WINDIR%\temp\cabeca4.tmp
- %WINDIR%\temp\tareca5.tmp
- from <SYSTEM32>\catroot2\edb00562.log to <SYSTEM32>\catroot2\edbtmp.log
- from <SYSTEM32>\catroot2\edb.log to <SYSTEM32>\catroot2\edb00563.log
- %PROGRAMDATA%\mcafee\agent\db\ma.db-journal
- %PROGRAMDATA%\mcafee\agent\db\msgbus.db-journal
- %PROGRAMDATA%\mcafee\agent\db\mapolicy.db-journal
- %PROGRAMDATA%\mcafee\agent\db\mascheduler.db-journal
- %PROGRAMDATA%\mcafee\agent\db\macmnsvc.db-journal
- '%TEMP%\mfe99f5.tmp\frminst.exe' /FramePkg /OriginalFramePkg="<Full path to file>" /Cleanup="%TEMP%\mfe99F5.tmp" /LOGDIR="%TEMP%\McAfeeLogs" /EmbeddedUsername="" /EmbeddedDomain="" /EmbeddedPassword=""
- '%TEMP%\c4ff7823-6955-46ea-8a54-6c7f1356e478\mfemactl.exe' --log "%TEMP%\McAfeeLogs" --ppid 2156 --interface 4D454F57010000000000000000000000C000000000000046000000000500000080198B10A12A8C992261698E3CC23D29040800006C089006902DF20752C0111100000000
- '%TEMP%\c4ff7823-6955-46ea-8a54-6c7f1356e478\mfemactl.exe' --log "%TEMP%\McAfeeLogs" --ppid 2156 --interface 4D454F57010000000000000000000000C0000000000000460000000005000000E8134345B906F97D5FA9321D9EDB959C086000006C0884066F0E1D7DEFD2C64E00000000
- '%ProgramFiles%\mcafee\agent\x86\updaterui.exe' /StartedFromRunKey
- '%ProgramFiles%\mcafee\agent\x86\mfemactl.exe' --log "%PROGRAMDATA%\McAfee\Agent\logs" --ppid 968 --interface 4D454F57010000000000000000000000C00000000000004600000000050000002E8CF1843799273A9C21C558B0ACE81604540000C8037C0A51721DCF4C72C20600...
- '%ProgramFiles%\mcafee\agent\x86\macompatsvc.exe'
- '%ProgramFiles%\mcafee\agent\masvc.exe' /ServiceStart
- '%ProgramFiles%\mcafee\agent\macmnsvc.exe' /ServiceStart
- '%ProgramFiles%\mcafee\agent\maconfig.exe' -provision -managed -dir "%TEMP%\mfe99F5.tmp" -logdir "%TEMP%\McAfeeLogs" -nostart -check
- '%ProgramFiles%\mcafee\agent\maconfig.exe' -writenotifyregistrykey
- '%ProgramFiles%\mcafee\agent\x86\macompatsvc.exe' /Service
- '%WINDIR%\syswow64\tasklist.exe' /FI "IMAGENAME eq Mue_InUse.exe" /FO CSV /NH' (with hidden window)
- '%WINDIR%\syswow64\tasklist.exe' /FI "IMAGENAME eq macmnsvc.exe" /FO CSV /NH' (with hidden window)
- '%ProgramFiles%\mcafee\agent\maconfig.exe' -provision -managed -dir "%TEMP%\mfe99F5.tmp" -logdir "%TEMP%\McAfeeLogs" -nostart -check' (with hidden window)
- '%WINDIR%\syswow64\tasklist.exe' /FI "IMAGENAME eq macompatsvc.exe" /FO CSV /NH' (with hidden window)
- '%WINDIR%\syswow64\tasklist.exe' /FI "IMAGENAME eq masvc.exe" /FO CSV /NH' (with hidden window)
- '%WINDIR%\syswow64\tasklist.exe' /FI "IMAGENAME eq UdaterUI.exe" /FO CSV /NH' (with hidden window)
- '%WINDIR%\syswow64\tasklist.exe' /FI "IMAGENAME eq UpdaterUI.exe" /FO CSV /NH' (with hidden window)
- '%WINDIR%\syswow64\tasklist.exe' /FI "IMAGENAME eq McScript_InUse.exe" /FO CSV /NH' (with hidden window)
- '%WINDIR%\syswow64\tasklist.exe' /FO CSV /NH' (with hidden window)
- '%ProgramFiles%\mcafee\agent\maconfig.exe' -writenotifyregistrykey' (with hidden window)
- '%WINDIR%\syswow64\msiexec.exe' /i "%TEMP%\mfe99F5.tmp\MFEagent_x64.msi" ADDLOCAL=Main,Agent,Svc_x64 TRANSFORMS=:1033.mst /qb+ /l+*v "%TEMP%\McAfeeLogs\MFEagent.msi.2019.07.18.02.42.22.log" SITELISTINFO="%TEMP%\mfe99F5.tmp" P...
- '%WINDIR%\syswow64\msiexec.exe' /Y "%ProgramFiles%\McAfee\Agent\x86\UserSpace.Dll"
- '%WINDIR%\syswow64\msiexec.exe' /Y "%ProgramFiles%\McAfee\Agent\x86\ma_compat_updater.dll"
- '%WINDIR%\syswow64\msiexec.exe' /Y "%ProgramFiles%\McAfee\Agent\x86\ma_compat_subsystem.dll"
- '%WINDIR%\syswow64\msiexec.exe' /Y "%ProgramFiles%\McAfee\Agent\x86\ma_compat_scheduler.dll"
- '%WINDIR%\syswow64\msiexec.exe' /Y "%ProgramFiles%\McAfee\Agent\x86\ma_compat_logger.dll"
- '%WINDIR%\syswow64\msiexec.exe' /Y "%ProgramFiles%\McAfee\Agent\x86\ma_compat_framework_factory.dll"
- '%WINDIR%\syswow64\msiexec.exe' /Y "%ProgramFiles%\McAfee\Agent\x86\ma_compat_agent.dll"
- '%WINDIR%\syswow64\msiexec.exe' /Y "%ProgramFiles%\McAfee\Agent\x86\ComponentUserInterface.dll"
- '%WINDIR%\syswow64\msiexec.exe' /Y "%ProgramFiles%\McAfee\Agent\x86\genevtinf5.dll"
- '%WINDIR%\syswow64\tasklist.exe' /FI "IMAGENAME eq macompatsvc.exe" /FO CSV /NH
- '%WINDIR%\syswow64\tasklist.exe' /FI "IMAGENAME eq masvc.exe" /FO CSV /NH
- '%WINDIR%\syswow64\tasklist.exe' /FI "IMAGENAME eq UdaterUI.exe" /FO CSV /NH
- '%WINDIR%\syswow64\tasklist.exe' /FI "IMAGENAME eq UpdaterUI.exe" /FO CSV /NH
- '%WINDIR%\syswow64\tasklist.exe' /FI "IMAGENAME eq McScript_InUse.exe" /FO CSV /NH
- '%WINDIR%\syswow64\tasklist.exe' /FO CSV /NH
- '%WINDIR%\syswow64\tasklist.exe' /FI "IMAGENAME eq Mue_InUse.exe" /FO CSV /NH
- '%WINDIR%\syswow64\msiexec.exe' -Embedding A47D53DF810324E3A3DE890EE147AD77 M Global\MSI0000
- '%WINDIR%\syswow64\msiexec.exe' -Embedding C12E51FCDCFCF1D74EDBB62446290027
- '%WINDIR%\syswow64\tasklist.exe' /FI "IMAGENAME eq macmnsvc.exe" /FO CSV /NH
- '<SYSTEM32>\msiexec.exe' /Y "%ProgramFiles%\McAfee\Agent\genevtinf5_64.dll"