-
June 8th, 2008, 05:16 AM
#1
Member
Un auth.uninstal of avg antivirus on a workstation
Good morning guys and gals,
I work at a plant nursery in the Netherlands were someone did a illegal uninstal of avg antivirus on a work station(we have no admin to control things)I checked the log of the windows xp pro to see how late it was done.
I only found out the last day it was still working.
Is there a way to find out the time it was uninstalled?
Grtz and thanks.
-
June 8th, 2008, 09:16 AM
#2
Hi there HotSpot,
I am not aware of any logging in XP that would tell you when something was uninstalled.
The most certain tool for this is eNcase, which is a law enforcement forensics tool. It is very expensive but you might be able to get a time limited trial.
Otherwise I would suggest that you look at data recovery tools which should find the deleted application and give you "last modified" information, which should be the time and date of deletion.
//off topic
I work at a plant nursery in the Netherlands
Do you sell cacti and succulents, and do you export to the United Kingdom?
-
June 8th, 2008, 09:38 AM
#3
Member
Thx nihil!
EnCase would be nice.(no money)
Data recovery would do the trick,i think.
Thx thx
-
June 8th, 2008, 11:26 AM
#4
-
June 8th, 2008, 12:24 PM
#5
Member
We think,someone trying to harm the guy who s playing our admin his good name(wich he isn t officially)
And maybe a failed update from 7.5 to 8.0,but it looked like avg was never installed(no map left over on c)is this pos.after a failed update?
-
June 8th, 2008, 02:01 PM
#6
Originally Posted by HotSpot
We think,someone trying to harm the guy who s playing our admin his good name(wich he isn t officially)
And maybe a failed update from 7.5 to 8.0,but it looked like avg was never installed(no map left over on c)is this pos.after a failed update?
Someone trying to do harm could do a whole lot worse than installing AVG.
“Everybody is ignorant, only on different subjects.” — Will Rogers
-
June 8th, 2008, 02:52 PM
#7
Member
thx guys for all the info....i think,we wait en see if this also happens without updating to another version.Grtz all
-
June 8th, 2008, 05:40 PM
#8
Hi HotSpot,
I have just done the update and it does uninstall 7.5 first. I then ran a file recovery tool and it did show the old file and when it got deleted.
-
June 8th, 2008, 07:17 PM
#9
Try looking in system restore. Usually things such as installation or uninstallation are recorded there.
Similar Threads
-
By cheyenne1212 in forum Miscellaneous Security Discussions
Replies: 7
Last Post: February 1st, 2012, 02:51 PM
-
By dalek in forum Spyware / Adware
Replies: 9
Last Post: December 15th, 2005, 11:37 PM
-
By TSR in forum AntiVirus Discussions
Replies: 0
Last Post: July 3rd, 2004, 09:19 PM
-
By hellforgedangel in forum Newbie Security Questions
Replies: 13
Last Post: April 29th, 2004, 10:58 PM
-
By muffinman in forum AntiOnline's General Chit Chat
Replies: 0
Last Post: May 29th, 2003, 04:52 PM
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|