ошибка 1714 не удается удалить более раннюю версию

9 ноября, 2016

При установке Kaspersky Endpoint Security 10 (10.2.2.10535)

Выдает ошибку:

При установки произошла неисправимая ошибка 1714, не удается удалить более раннюю версию программы

обратите в службу технической поддержки

kavremvr пользовался

реестр чистил... ( если можно напишите более подробно какие ветки нужно удалять)

ошибка все равно не пропадает

GSI http://www.getsystem...3b91f4edf919e00

Изменено 10 ноября, 2016 пользователем sadmin

9 ноября, 2016

Здравствуйте,

приложите, пожалуйста, полный GSI с проблемной машины.

Спасибо.

9 ноября, 2016

kavremvr пользовался

в безопасном режиме?

9 ноября, 2016

kavremvr пользовался
в безопасном режиме?

да

Здравствуйте,

приложите, пожалуйста, полный GSI с проблемной машины.

Спасибо.

Сообщение от модератора Mark D. Pearlstone

Файлы к сообщению нужно прикреплять, а не в файловый архив. Удалено.

9 ноября, 2016

@sadmin, почему не установите сразу версию 10.2.5.3201: http://support.kaspersky.ru/12758

Ссылка на ваш отчет: https://www.getsysteminfo.com/read.php?file=3d3c75c6e167dad217002720502b889c&ms=1

Соберите отчет с помощью GetsystemInfo 6: http://media.kaspersky.com/utilities/ConsumerUtilities/GetSystemInfo6.1.exe

Какая версия антивируса до этого стояла?

9 ноября, 2016

ранее стояла версия 10.1.* точно не помню какая

Ссылка на отчет http://www.getsysteminfo.com/read.php?file=393fc3473b5d50bec3b91f4edf919e00

GetSystemInfoServiceLog не смог прикрепить пишет Вы не можете загружать файлы подобного типа.

в спойлере его содержимое

log:

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Kaspersky Lab
Kaspersky Get System Info 6.1.0.51
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:15:23 INFO StartupPath: C:\Users\sadmin1\AppData\Local\Temp\s3ak

10.11.2016 9:15:23 INFO Current culture: ru-RU

10.11.2016 9:15:23 INFO SilentMode: True

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:15:23 INFO Temp environment for "Get System Information" tool is created.

10.11.2016 9:15:23 INFO 34 application modules were loaded:

ModuleName: "Load module" Enabled: Getting System Information Priority:True
ModuleName: "Load module" Enabled: Executing AVZ Priority:True
ModuleName: "Load module" Enabled: Overview of Kaspersky Lab files in Application Data Priority:True
ModuleName: "Load module" Enabled: Getting information about versions of databases files for Kaspersky Lab products Priority:True
ModuleName: "Load module" Enabled: Getting information about versions of drivers of Kaspersky Lab products Priority:True
ModuleName: "Load module" Enabled: Getting information about versions of modules of Kaspersky Lab products Priority:True
ModuleName: "Load module" Enabled: Getting information about versions of modules from Program Data of Kaspersky Lab products Priority:True
ModuleName: "Load module" Enabled: Collecting console output of "klnagchk.exe" Priority:True
ModuleName: "Load module" Enabled: Collecting the "avp.com" settings Priority:True
ModuleName: "Load module" Enabled: Collecting the "avp.com" task statistics Priority:True
ModuleName: "Load module" Enabled: Collecting "Kavremover" logs Priority:True
ModuleName: "Load module" Enabled: Collecting tiny dumps Priority:True
ModuleName: "Load module" Enabled: Collecting logs of patches of Kaspersky Lab products Priority:True
ModuleName: "Load module" Enabled: Collecting logs of Kaspersky Lab products Priority:True
ModuleName: "Load module" Enabled: Collecting update status files Priority:True
ModuleName: "Load module" Enabled: Overview of Kaspersky Security Center dump files Priority:True
ModuleName: "Load module" Enabled: Collecting NTFS junction points from Application Data Priority:True
ModuleName: "Load module" Enabled: Collecting "Kleaner" logs Priority:True
ModuleName: "Load module" Enabled: Collecting error logs of Microsoft SQL Server Priority:True
ModuleName: "Load module" Enabled: Collecting Microsoft .NET Framework setup logs Priority:True
ModuleName: "Load module" Enabled: Collecting versions of hotfixes of Kaspersky Lab products Priority:True
ModuleName: "Load module" Enabled: ControlRegistryPathExtractor Priority:True
ModuleName: "Load module" Enabled: ServicesRegistryPathExtractor Priority:True
ModuleName: "Load module" Enabled: ProductRegistryPathExtraction Priority:True
ModuleName: "Load module" Enabled: Getting information about versions of plug-ins of Kaspersky Security Center Priority:True
ModuleName: "Load module" Enabled: Collecting setup API logs Priority:True
ModuleName: "Load module" Enabled: Collecting Windows event logs Priority:True
ModuleName: "Load module" Enabled: ChromeFeatureExtractor Priority:False
ModuleName: "Load module" Enabled: MSIESearchScopes Priority:True
ModuleName: "Load module" Enabled: IEFeaturesExtractor Priority:True
ModuleName: "Load module" Enabled: MSIERegistryPathExtractor Priority:True
ModuleName: "Load module" Enabled: FirefoxFeatureExtractor Priority:True
ModuleName: "Load module" Enabled: Collecting Mozilla Firefox files Priority:True
ModuleName: "Load module" Enabled: Detecting of incompatible software Priority:True
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:15:38 INFO Enter to critical area...

10.11.2016 9:15:38 INFO Data extracting started.

10.11.2016 9:15:38 INFO Starting module: Getting System Information

10.11.2016 9:15:38 INFO Old Get System Info arguments: "/EULA=1 /qn /l=3 /path="C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo""

10.11.2016 9:15:38 INFO The old version of the Get System Information managed wrapper is started.

10.11.2016 9:15:38 INFO The old version of Get System Information PE is extracted at path: "C:\Users\sadmin1\AppData\Local\Temp\s3ak\GetSystemInfo.exe"

10.11.2016 9:15:38 INFO The old version of Get System Information PE is started.

10.11.2016 9:16:59 INFO The old version of Get System Information PE is finished.

10.11.2016 9:16:59 INFO Finished module: Getting System Information

10.11.2016 9:16:59 INFO Starting module: Executing AVZ

10.11.2016 9:16:59 INFO The old version of the Get System Information managed wrapper is started.

10.11.2016 9:16:59 INFO The old version of Get System Information PE is extracted at path: "C:\Users\sadmin1\AppData\Local\Temp\s3ak\GetSystemInfo.exe"

10.11.2016 9:16:59 INFO The old version of Get System Information PE is started.

10.11.2016 9:16:59 INFO The old version of Get System Information PE is finished.

10.11.2016 9:16:59 INFO AVZ extracted at path C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfoDllCache\avz

10.11.2016 9:18:16 INFO File "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfoDllCache\avz\avz.exe" executed with arguments "Script="C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfoDllCache\avz\asa.avz" HiddenMode="3" SpoolLog="C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\avz.log" TempFolder="C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\AvzTemp" ".

10.11.2016 9:18:16 INFO Finished module: Executing AVZ

10.11.2016 9:18:16 INFO Starting module: Overview of Kaspersky Lab files in Application Data

10.11.2016 9:18:17 INFO Overview of Kaspersky Lab files in Application Data: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:17 INFO List of templates to collect:

SearchPattern:C:\ProgramData\Kaspersky Lab\*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*;DisableWow64Redirect:False;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:17 INFO Finished module: Overview of Kaspersky Lab files in Application Data

10.11.2016 9:18:17 INFO Starting module: Getting information about versions of databases files for Kaspersky Lab products

10.11.2016 9:18:17 INFO ExtractData started:

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:17 INFO NeedWow64FsRedirectionDisable:False

10.11.2016 9:18:17 INFO FilesSearchOptions:AllDirectories

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:17 INFO The scope of the "C:\ProgramData\Kaspersky Lab\*\Bases\Cache\" directory

10.11.2016 9:18:17 INFO At path "C:\ProgramData\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.dll.*".

10.11.2016 9:18:17 INFO At path "C:\ProgramData\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.exe.*".

10.11.2016 9:18:17 INFO At path "C:\ProgramData\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.sys.*".

10.11.2016 9:18:17 INFO At path "C:\ProgramData\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.kdl.*".

10.11.2016 9:18:17 INFO At path "C:\ProgramData\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.enc1.*".

10.11.2016 9:18:17 INFO The scope of the "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*\Bases\Cache\" directory

10.11.2016 9:18:17 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.dll.*".

10.11.2016 9:18:17 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.exe.*".

10.11.2016 9:18:17 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.sys.*".

10.11.2016 9:18:17 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.kdl.*".

10.11.2016 9:18:17 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.enc1.*".

10.11.2016 9:18:17 INFO Finished module: Getting information about versions of databases files for Kaspersky Lab products

10.11.2016 9:18:17 INFO Starting module: Getting information about versions of drivers of Kaspersky Lab products

10.11.2016 9:18:17 INFO ExtractData started:

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:17 INFO NeedWow64FsRedirectionDisable:True

10.11.2016 9:18:17 INFO FilesSearchOptions:TopDirectoryOnly

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:17 INFO The scope of the "C:\Windows\system32\drivers" directory

10.11.2016 9:18:17 INFO At path "C:\Windows\system32\drivers" found 0 files for pattern "kl*.sys".

10.11.2016 9:18:17 INFO At path "C:\Windows\system32\drivers" found 0 files for pattern "kneps.sys".

10.11.2016 9:18:17 INFO At path "C:\Windows\system32\drivers" found 0 files for pattern "cm_km*.sys".

10.11.2016 9:18:17 INFO Finished module: Getting information about versions of drivers of Kaspersky Lab products

10.11.2016 9:18:17 INFO Starting module: Getting information about versions of modules of Kaspersky Lab products

10.11.2016 9:18:17 INFO ExtractData started:

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:17 INFO NeedWow64FsRedirectionDisable:False

10.11.2016 9:18:17 INFO FilesSearchOptions:TopDirectoryOnly

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:17 INFO The scope of the "C:\Program Files\Kaspersky Lab\*\*" directory

10.11.2016 9:18:17 INFO At path "C:\Program Files\Kaspersky Lab\*\*" found 0 files for pattern "*.dll".

10.11.2016 9:18:17 INFO At path "C:\Program Files\Kaspersky Lab\*\*" found 0 files for pattern "*.exe".

10.11.2016 9:18:17 INFO At path "C:\Program Files\Kaspersky Lab\*\*" found 0 files for pattern "*.sys".

10.11.2016 9:18:17 INFO At path "C:\Program Files\Kaspersky Lab\*\*" found 0 files for pattern "*.kdl".

10.11.2016 9:18:17 INFO At path "C:\Program Files\Kaspersky Lab\*\*" found 0 files for pattern "*.enc1".

10.11.2016 9:18:17 INFO The scope of the "C:\Program Files\Kaspersky Lab\*\*\*" directory

10.11.2016 9:18:17 INFO At path "C:\Program Files\Kaspersky Lab\*\*\*" found 0 files for pattern "*.dll".

10.11.2016 9:18:17 INFO At path "C:\Program Files\Kaspersky Lab\*\*\*" found 0 files for pattern "*.exe".

10.11.2016 9:18:17 INFO At path "C:\Program Files\Kaspersky Lab\*\*\*" found 0 files for pattern "*.sys".

10.11.2016 9:18:17 INFO At path "C:\Program Files\Kaspersky Lab\*\*\*" found 0 files for pattern "*.kdl".

10.11.2016 9:18:17 INFO At path "C:\Program Files\Kaspersky Lab\*\*\*" found 0 files for pattern "*.enc1".

10.11.2016 9:18:17 INFO The scope of the "C:\Program Files (x86)\Kaspersky Lab\*\*" directory

10.11.2016 9:18:17 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*" found 0 files for pattern "*.dll".

10.11.2016 9:18:17 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*" found 0 files for pattern "*.exe".

10.11.2016 9:18:17 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*" found 0 files for pattern "*.sys".

10.11.2016 9:18:17 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*" found 0 files for pattern "*.kdl".

10.11.2016 9:18:17 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*" found 0 files for pattern "*.enc1".

10.11.2016 9:18:17 INFO The scope of the "C:\Program Files (x86)\Kaspersky Lab\*\*\*" directory

10.11.2016 9:18:17 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*\*" found 0 files for pattern "*.dll".

10.11.2016 9:18:17 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*\*" found 0 files for pattern "*.exe".

10.11.2016 9:18:17 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*\*" found 0 files for pattern "*.sys".

10.11.2016 9:18:17 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*\*" found 0 files for pattern "*.kdl".

10.11.2016 9:18:17 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*\*" found 0 files for pattern "*.enc1".

10.11.2016 9:18:17 INFO Finished module: Getting information about versions of modules of Kaspersky Lab products

10.11.2016 9:18:17 INFO Starting module: Getting information about versions of modules from Program Data of Kaspersky Lab products

10.11.2016 9:18:17 INFO ExtractData started:

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:17 INFO NeedWow64FsRedirectionDisable:False

10.11.2016 9:18:17 INFO FilesSearchOptions:TopDirectoryOnly

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:17 INFO The scope of the "C:\ProgramData\Kaspersky Lab\*" directory

10.11.2016 9:18:17 INFO At path "C:\ProgramData\Kaspersky Lab\*" found 0 files for pattern "*.dll".

10.11.2016 9:18:17 INFO At path "C:\ProgramData\Kaspersky Lab\*" found 0 files for pattern "*.exe".

10.11.2016 9:18:17 INFO At path "C:\ProgramData\Kaspersky Lab\*" found 0 files for pattern "*.sys".

10.11.2016 9:18:17 INFO At path "C:\ProgramData\Kaspersky Lab\*" found 0 files for pattern "*.kdl".

10.11.2016 9:18:17 INFO At path "C:\ProgramData\Kaspersky Lab\*" found 0 files for pattern "*.enc1".

10.11.2016 9:18:17 INFO The scope of the "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*" directory

10.11.2016 9:18:17 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*" found 0 files for pattern "*.dll".

10.11.2016 9:18:17 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*" found 0 files for pattern "*.exe".

10.11.2016 9:18:17 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*" found 0 files for pattern "*.sys".

10.11.2016 9:18:17 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*" found 0 files for pattern "*.kdl".

10.11.2016 9:18:17 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*" found 0 files for pattern "*.enc1".

10.11.2016 9:18:17 INFO Finished module: Getting information about versions of modules from Program Data of Kaspersky Lab products

10.11.2016 9:18:17 INFO Starting module: Collecting console output of "klnagchk.exe"

10.11.2016 9:18:17 INFO Finished module: Collecting console output of "klnagchk.exe"

10.11.2016 9:18:17 INFO Starting module: Collecting the "avp.com" settings

10.11.2016 9:18:17 INFO Start searching for "avp.com" in "C:\Program Files".

10.11.2016 9:18:17 INFO The "C:\Program Files" directory exists.

10.11.2016 9:18:17 INFO Search avp.com pattern: "C:\Program Files\*\avp.com"

10.11.2016 9:18:19 WARNING An exception skipped: System.UnauthorizedAccessException: Отказано в доступе по пути "C:\Program Files\Windows NT\Стандартные".
в System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
в System.IO.FileSystemEnumerableIterator`1.AddSearchableDirsToStack(SearchData localSearchData)
в System.IO.FileSystemEnumerableIterator`1.MoveNext()
в System.Collections.Generic.List`1..ctor(IEnumerable`1 collection)
в System.IO.Directory.GetFiles(String path, String searchPattern, SearchOption searchOption)
в KasperskySystemInspector.Model.CommonUtilites.StandardClassesExtensions.PathUtilites.GetFilesByPattern(String pattern, SearchOption searchOptionrOption)

for files search for path
10.11.2016 9:18:19 INFO Founded 0 avp.com files.

10.11.2016 9:18:19 INFO Start searching for "avp.com" in "C:\Program Files (x86)".

10.11.2016 9:18:19 INFO The "avp.com" file is not found.

10.11.2016 9:18:19 INFO Finished module: Collecting the "avp.com" settings

10.11.2016 9:18:19 INFO Starting module: Collecting the "avp.com" task statistics

10.11.2016 9:18:19 INFO The "avp.com" file is not found.

10.11.2016 9:18:19 INFO Finished module: Collecting the "avp.com" task statistics

10.11.2016 9:18:19 INFO Starting module: Collecting "Kavremover" logs

10.11.2016 9:18:19 INFO Collecting "Kavremover" logs: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:19 INFO List of templates to collect:

SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\kavrem*.log;DisableWow64Redirect:True;AdditionalData:
SearchPattern:C:\Windows\Temp\kavrem*.log;DisableWow64Redirect:True;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\kavrem*.log;DisableWow64Redirect:True;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:20 INFO Collecting "Kavremover" logs: ExtractData(Action setProgressValue): Data extracting finished. Collected 0 files.

10.11.2016 9:18:20 INFO Finished module: Collecting "Kavremover" logs

10.11.2016 9:18:20 INFO Starting module: Collecting tiny dumps

10.11.2016 9:18:20 INFO Collecting tiny dumps: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:20 INFO List of templates to collect:

SearchPattern:C:\ProgramData\Kaspersky Lab\*.tiny.dmp*;DisableWow64Redirect:True;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:20 INFO Collecting tiny dumps: ExtractData(Action setProgressValue): Data extracting finished. Collected 0 files.

10.11.2016 9:18:20 INFO Finished module: Collecting tiny dumps

10.11.2016 9:18:20 INFO Starting module: Collecting logs of patches of Kaspersky Lab products

10.11.2016 9:18:20 INFO Collecting logs of patches of Kaspersky Lab products: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:20 INFO List of templates to collect:

SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\kavpatcher.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\KESpatch*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\ak_patch*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\Temp\kavpatcher.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\Temp\KESpatch*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\Temp\ak_patch*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\kavpatcher.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\KESpatch*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\ak_patch*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\ProgramData\Kaspersky Lab\kavpatcher.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\ProgramData\Kaspersky Lab\KESpatch*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\ProgramData\Kaspersky Lab\ak_patch*;DisableWow64Redirect:False;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:20 INFO Copy file from "C:\Windows\Temp\ak_patch2016-11-09-12-43-05.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Patches Install Logs\ak_patch2016-11-09-12-43-05.log"

10.11.2016 9:18:20 INFO Copy file from "C:\Windows\Temp\ak_patch2016-11-09-12-43-47.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Patches Install Logs\ak_patch2016-11-09-12-43-47.log"

10.11.2016 9:18:20 INFO Copy file from "C:\Windows\Temp\ak_patch_sfx2016-11-09-12-43-46.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Patches Install Logs\ak_patch_sfx2016-11-09-12-43-46.log"

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:20 INFO Collecting logs of patches of Kaspersky Lab products: ExtractData(Action setProgressValue): Data extracting finished. Collected 3 files.

10.11.2016 9:18:20 INFO Finished module: Collecting logs of patches of Kaspersky Lab products

10.11.2016 9:18:20 INFO Starting module: Collecting logs of Kaspersky Lab products

10.11.2016 9:18:20 INFO Collecting logs of Kaspersky Lab products: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:20 INFO List of templates to collect:

SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\kl*.log*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\$kl*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\kav8wsee*.log*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\Temp\kl*.log*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\Temp\$kl*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\Temp\kav8wsee*.log*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\kl*.log*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\$kl*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\kav8wsee*.log*;DisableWow64Redirect:False;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:20 INFO Copy file from "C:\Users\sadmin1\AppData\Local\Temp\kl-install-2016-11-09-13-46-37.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\kl-install-2016-11-09-13-46-37.log"

10.11.2016 9:18:21 INFO Copy file from "C:\Users\sadmin1\AppData\Local\Temp\kl-setup-2016-11-09-13-46-18.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\kl-setup-2016-11-09-13-46-18.log"

10.11.2016 9:18:21 INFO Copy file from "C:\Users\sadmin1\AppData\Local\Temp\kl-update-2016-11-09-13-47-20.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\kl-update-2016-11-09-13-47-20.log"

10.11.2016 9:18:21 INFO Copy file from "C:\Users\sadmin1\AppData\Local\Temp\kl-update-2016-11-09-13-50-07.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\kl-update-2016-11-09-13-50-07.log"

10.11.2016 9:18:21 INFO Copy file from "C:\Users\sadmin1\AppData\Local\Temp\$klpkinst.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klpkinst.log"

10.11.2016 9:18:21 INFO Copy file from "C:\Users\sadmin1\AppData\Local\Temp\$klrbtagt.txt" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klrbtagt.txt"

10.11.2016 9:18:21 INFO Copy file from "C:\Users\sadmin1\AppData\Local\Temp\$klriwrp.txt" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klriwrp.txt"

10.11.2016 9:18:22 INFO Copy file from "C:\Windows\Temp\kl-install-2016-11-09-12-47-40.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\kl-install-2016-11-09-12-47-40.log"

10.11.2016 9:18:22 INFO Copy file from "C:\Windows\Temp\kl-setup-2016-11-09-12-47-36.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\kl-setup-2016-11-09-12-47-36.log"

10.11.2016 9:18:22 INFO Copy file from "C:\Windows\Temp\kl-update-2016-11-09-12-48-43.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\kl-update-2016-11-09-12-48-43.log"

10.11.2016 9:18:22 INFO Copy file from "C:\Windows\Temp\kl-update-2016-11-09-12-53-13.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\kl-update-2016-11-09-12-53-13.log"

10.11.2016 9:18:23 INFO Copy file from "C:\Windows\Temp\$klnagent-2016-11-09-12-42-48.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klnagent-2016-11-09-12-42-48.log"

10.11.2016 9:18:23 INFO Copy file from "C:\Windows\Temp\$klnagent-setup-2016-11-09-12-42-48.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klnagent-setup-2016-11-09-12-42-48.log"

10.11.2016 9:18:23 INFO Copy file from "C:\Windows\Temp\$klnagent-uninstall.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klnagent-uninstall.log"

10.11.2016 9:18:23 INFO Copy file from "C:\Windows\Temp\$klrbtagt.bak" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klrbtagt.bak"

10.11.2016 9:18:23 INFO File duplicate "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klrbtagt.txt" at destination folder "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs"

10.11.2016 9:18:23 INFO File rename to C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klrbtagt d1ftbkrl.lub.txt.

10.11.2016 9:18:23 INFO Copy file from "C:\Windows\Temp\$klrbtagt.txt" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klrbtagt d1ftbkrl.lub.txt"

10.11.2016 9:18:23 INFO Copy file from "C:\Windows\Temp\$klriwrp.bak" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klriwrp.bak"

10.11.2016 9:18:23 INFO File duplicate "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klriwrp.txt" at destination folder "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs"

10.11.2016 9:18:23 INFO File rename to C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klriwrp 04yrl0la.dyx.txt.

10.11.2016 9:18:23 INFO Copy file from "C:\Windows\Temp\$klriwrp.txt" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klriwrp 04yrl0la.dyx.txt"

10.11.2016 9:18:24 INFO Copy file from "C:\Windows\Temp\$klssinstlib.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klssinstlib.log"

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:24 INFO Collecting logs of Kaspersky Lab products: ExtractData(Action setProgressValue): Data extracting finished. Collected 19 files.

10.11.2016 9:18:24 INFO Finished module: Collecting logs of Kaspersky Lab products

10.11.2016 9:18:24 INFO Starting module: Collecting update status files

10.11.2016 9:18:24 INFO Collecting update status files : ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:24 INFO List of templates to collect:

SearchPattern:C:\ProgramData\Kaspersky Lab\*\Data\u0607g.xml;DisableWow64Redirect:True;AdditionalData:
SearchPattern:C:\ProgramData\Kaspersky Lab\*\Data\u1313g.xml;DisableWow64Redirect:True;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:24 INFO Copy file from "C:\ProgramData\Kaspersky Lab\KES10SP1\Data\u1313g.xml" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\u1313g_KES10SP1_RT-35.xml"

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:24 INFO Collecting update status files : ExtractData(Action setProgressValue): Data extracting finished. Collected 1 files.

10.11.2016 9:18:24 INFO Finished module: Collecting update status files

10.11.2016 9:18:24 INFO Starting module: Overview of Kaspersky Security Center dump files

10.11.2016 9:18:24 INFO Overview of Kaspersky Security Center dump files: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:24 INFO List of templates to collect:

SearchPattern:C:\Windows\*.dmp;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\Minidump\*.dmp;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Program Files\Kaspersky Lab\Kaspersky Security Center\~dumps\*.dmp;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Program Files\Kaspersky Lab\Kaspersky Security Center\~dumps\*.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Program Files\Kaspersky Lab\Kaspersky Security Center\~dumps\*.txt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Program Files\Kaspersky Lab\Kaspersky Security Center\~dumps\*.enc1;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Center\~dumps\*.dmp;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Center\~dumps\*.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Center\~dumps\*.txt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Center\~dumps\*.enc1;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\ProgramData\Kaspersky Lab\*.dmp;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\ProgramData\Kaspersky Lab\*.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\ProgramData\Kaspersky Lab\*.txt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\ProgramData\Kaspersky Lab\*.enc1;DisableWow64Redirect:False;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:24 INFO Finished module: Overview of Kaspersky Security Center dump files

10.11.2016 9:18:24 INFO Starting module: Collecting NTFS junction points from Application Data

10.11.2016 9:18:24 INFO Junction points collection is started for the "C:\ProgramData" directory.

10.11.2016 9:18:24 INFO Drive "C:\" has File System "NTFS"

10.11.2016 9:18:24 INFO "C:\ProgramData\Application Data" is Junction Point

10.11.2016 9:18:24 INFO "C:\ProgramData\Application Data" targeted to "C:\ProgramData"

10.11.2016 9:18:24 INFO "C:\ProgramData\Desktop" is Junction Point

10.11.2016 9:18:24 INFO "C:\ProgramData\Desktop" targeted to "C:\Users\Public\Desktop"

10.11.2016 9:18:24 INFO "C:\ProgramData\Documents" is Junction Point

10.11.2016 9:18:24 INFO "C:\ProgramData\Documents" targeted to "C:\Users\Public\Documents"

10.11.2016 9:18:24 INFO "C:\ProgramData\Favorites" is Junction Point

10.11.2016 9:18:24 INFO "C:\ProgramData\Favorites" targeted to "C:\Users\Public\Favorites"

10.11.2016 9:18:24 INFO "C:\ProgramData\Start Menu" is Junction Point

10.11.2016 9:18:24 INFO "C:\ProgramData\Start Menu" targeted to "C:\ProgramData\Microsoft\Windows\Start Menu"

10.11.2016 9:18:24 INFO "C:\ProgramData\Templates" is Junction Point

10.11.2016 9:18:24 INFO "C:\ProgramData\Templates" targeted to "C:\ProgramData\Microsoft\Windows\Templates"

10.11.2016 9:18:24 INFO "C:\ProgramData\Главное меню" is Junction Point

10.11.2016 9:18:24 INFO "C:\ProgramData\Главное меню" targeted to "C:\ProgramData\Microsoft\Windows\Start Menu"

10.11.2016 9:18:24 INFO "C:\ProgramData\Документы" is Junction Point

10.11.2016 9:18:24 INFO "C:\ProgramData\Документы" targeted to "C:\Users\Public\Documents"

10.11.2016 9:18:24 INFO "C:\ProgramData\Избранное" is Junction Point

10.11.2016 9:18:24 INFO "C:\ProgramData\Избранное" targeted to "C:\Users\Public\Favorites"

10.11.2016 9:18:24 INFO "C:\ProgramData\Рабочий стол" is Junction Point

10.11.2016 9:18:24 INFO "C:\ProgramData\Рабочий стол" targeted to "C:\Users\Public\Desktop"

10.11.2016 9:18:24 INFO "C:\ProgramData\Шаблоны" is Junction Point

10.11.2016 9:18:24 INFO "C:\ProgramData\Шаблоны" targeted to "C:\ProgramData\Microsoft\Windows\Templates"

10.11.2016 9:18:24 INFO Junction points list is written to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Junction_ProgramData_RT-35.txt" file.

10.11.2016 9:18:24 INFO Execution of NtfsJunctionListCollectorBase::ExtractData for "C:\ProgramData" directory is complete.

10.11.2016 9:18:24 INFO Finished module: Collecting NTFS junction points from Application Data

10.11.2016 9:18:24 INFO Starting module: Collecting "Kleaner" logs

10.11.2016 9:18:24 INFO Collecting "Kleaner" logs: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:24 INFO List of templates to collect:

SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\kleaner*.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\Temp\kleaner*.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\kleaner*.log;DisableWow64Redirect:False;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:24 INFO Collecting "Kleaner" logs: ExtractData(Action setProgressValue): Data extracting finished. Collected 0 files.

10.11.2016 9:18:24 INFO Finished module: Collecting "Kleaner" logs

10.11.2016 9:18:24 INFO Starting module: Collecting error logs of Microsoft SQL Server

10.11.2016 9:18:24 INFO Collecting error logs of Microsoft SQL Server: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:24 INFO List of templates to collect:

SearchPattern:C:\Program Files\Microsoft SQL Server\*\MSSQL\Log\ERRORLOG*;DisableWow64Redirect:True;AdditionalData:X64
SearchPattern:C:\Program Files (x86)\Microsoft SQL Server\*\MSSQL\Log\ERRORLOG*;DisableWow64Redirect:False;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:24 INFO Collecting error logs of Microsoft SQL Server: ExtractData(Action setProgressValue): Data extracting finished. Collected 0 files.

10.11.2016 9:18:24 INFO Finished module: Collecting error logs of Microsoft SQL Server

10.11.2016 9:18:24 INFO Starting module: Collecting Microsoft .NET Framework setup logs

10.11.2016 9:18:24 INFO Collecting Microsoft .NET Framework setup logs : ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:24 INFO List of templates to collect:

SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\dd_dotNetFx*_*_x86_x64_decompression_log.txt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\dd_SetupUtility.txt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\Microsoft .NET Framework *Setup*.txt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\Microsoft .NET Framework *Setup*.html;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\dd_dotNetFx*_*_x86_x64_decompression_log.txt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\dd_SetupUtility.txt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\Microsoft .NET Framework *Setup*.txt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\Microsoft .NET Framework *Setup*.html;DisableWow64Redirect:False;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:24 INFO Collecting Microsoft .NET Framework setup logs : ExtractData(Action setProgressValue): Data extracting finished. Collected 0 files.

10.11.2016 9:18:24 INFO Finished module: Collecting Microsoft .NET Framework setup logs

10.11.2016 9:18:24 INFO Starting module: Collecting versions of hotfixes of Kaspersky Lab products

10.11.2016 9:18:24 INFO Products info collector start.

10.11.2016 9:18:24 INFO Environment registry keys:

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:24 INFO Execution of ProductInfoCollector is complete.

10.11.2016 9:18:24 INFO Finished module: Collecting versions of hotfixes of Kaspersky Lab products

10.11.2016 9:18:24 INFO Starting module: ControlRegistryPathExtractor

10.11.2016 9:18:24 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKLM_System_CurrentControlSet_Control.reg" file.

10.11.2016 9:18:25 INFO Extraction of registry image is complete.

10.11.2016 9:18:25 INFO Finished module: ControlRegistryPathExtractor

10.11.2016 9:18:25 INFO Starting module: ServicesRegistryPathExtractor

10.11.2016 9:18:25 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKLM_System_CurrentControlSet_Services.reg" file.

10.11.2016 9:18:25 INFO Extraction of registry image is complete.

10.11.2016 9:18:25 INFO Finished module: ServicesRegistryPathExtractor

10.11.2016 9:18:25 INFO Starting module: ProductRegistryPathExtraction

10.11.2016 9:18:25 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\Software\KasperskyLab\" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKLM_Software_KasperskyLab.reg" file.

10.11.2016 9:18:25 INFO Extraction of registry image is complete.

10.11.2016 9:18:25 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\Software\Wow6432Node\KasperskyLab\" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKLM_Software_Wow6432Node_KasperskyLab.reg" file.

10.11.2016 9:18:25 INFO Extraction of registry image is complete.

10.11.2016 9:18:25 INFO Extracting registry image from "HKEY_CURRENT_USER\Software\KasperskyLab\" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKCU_Software_KasperskyLab.reg" file.

10.11.2016 9:18:25 INFO Extraction of registry image is complete.

10.11.2016 9:18:25 INFO Extracting registry image from "HKEY_CURRENT_USER\Software\Wow6432Node\KasperskyLab\" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKCU_Software_Wow6432Node_KasperskyLab.reg" file.

10.11.2016 9:18:25 INFO Extraction of registry image is complete.

10.11.2016 9:18:25 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\Software\Kaspersky Lab\" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKLM_Software_Kaspersky_Lab.reg" file.

10.11.2016 9:18:25 INFO Extraction of registry image is complete.

10.11.2016 9:18:25 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\Software\Wow6432Node\Kaspersky Lab\" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKLM_Software_Wow6432Node_Kaspersky_Lab.reg" file.

10.11.2016 9:18:25 INFO Extraction of registry image is complete.

10.11.2016 9:18:25 INFO Extracting registry image from "HKEY_CURRENT_USER\Software\Kaspersky Lab\" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKCU_Software_Kaspersky_Lab.reg" file.

10.11.2016 9:18:25 INFO Extraction of registry image is complete.

10.11.2016 9:18:25 INFO Extracting registry image from "HKEY_CURRENT_USER\Software\Wow6432Node\Kaspersky Lab\" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKCU_Software_Wow6432Node_Kaspersky_Lab.reg" file.

10.11.2016 9:18:25 INFO Extraction of registry image is complete.

10.11.2016 9:18:25 INFO Finished module: ProductRegistryPathExtraction

10.11.2016 9:18:25 INFO Starting module: Getting information about versions of plug-ins of Kaspersky Security Center

10.11.2016 9:18:25 INFO Security Center plugins info extracting started...

10.11.2016 9:18:25 INFO Getting information about Kaspersky Security Center plug-ins is complete.

10.11.2016 9:18:25 INFO Finished module: Getting information about versions of plug-ins of Kaspersky Security Center

10.11.2016 9:18:25 INFO Starting module: Collecting setup API logs

10.11.2016 9:18:25 INFO Collecting setup API logs: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:25 INFO List of templates to collect:

SearchPattern:C:\Windows\inf\setupapi.*.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\setup*.log;DisableWow64Redirect:False;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:25 INFO Copy file from "C:\Windows\inf\setupapi.app.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Setupapi\setupapi.app.log"

10.11.2016 9:18:25 INFO Copy file from "C:\Windows\inf\setupapi.dev.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Setupapi\setupapi.dev.log"

10.11.2016 9:18:25 INFO Copy file from "C:\Windows\inf\setupapi.offline.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Setupapi\setupapi.offline.log"

10.11.2016 9:18:25 INFO Copy file from "C:\Windows\setupact.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Setupapi\setupact.log"

10.11.2016 9:18:25 INFO Copy file from "C:\Windows\setuperr.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Setupapi\setuperr.log"

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:25 INFO Collecting setup API logs: ExtractData(Action setProgressValue): Data extracting finished. Collected 5 files.

10.11.2016 9:18:25 INFO Finished module: Collecting setup API logs

10.11.2016 9:18:25 INFO Starting module: MSIESearchScopes

10.11.2016 9:18:25 INFO Extracting registry image from "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Microsoft Internet Explorer\Search Scopes\SearchScopes.reg" file.

10.11.2016 9:18:25 INFO Extraction of registry image is complete.

10.11.2016 9:18:25 INFO Finished module: MSIESearchScopes

10.11.2016 9:18:25 INFO Starting module: IEFeaturesExtractor

10.11.2016 9:18:25 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfoDllCache\HKLM_IE_OBTAINED.reg" file.

10.11.2016 9:18:25 INFO Extraction of registry image is complete.

10.11.2016 9:18:26 INFO Extracting registry image from "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfoDllCache\HLCU_IE_OBTAINED.reg" file.

10.11.2016 9:18:26 INFO Extraction of registry image is complete.

10.11.2016 9:18:26 INFO Finished module: IEFeaturesExtractor

10.11.2016 9:18:26 INFO Starting module: MSIERegistryPathExtractor

10.11.2016 9:18:26 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Microsoft Internet Explorer\Extensions (registry images)\HKLM_IE_Toolbar.reg" file.

10.11.2016 9:18:26 INFO Extraction of registry image is complete.

10.11.2016 9:18:26 INFO Extracting registry image from "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Microsoft Internet Explorer\Extensions (registry images)\HKCU_IE_Toolbar.reg" file.

10.11.2016 9:18:26 INFO Extraction of registry image is complete.

10.11.2016 9:18:26 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Explorer Bars" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Microsoft Internet Explorer\Extensions (registry images)\HKLM_IE_Explorer_Bars.reg" file.

10.11.2016 9:18:26 INFO Extraction of registry image is complete.

10.11.2016 9:18:26 INFO Extracting registry image from "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Microsoft Internet Explorer\Extensions (registry images)\HKCU_IE_Explorer_Bars.reg" file.

10.11.2016 9:18:26 INFO Extraction of registry image is complete.

10.11.2016 9:18:26 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\MenuExt" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Microsoft Internet Explorer\Extensions (registry images)\HKLM_IE_MenuExt.reg" file.

10.11.2016 9:18:26 INFO Extraction of registry image is complete.

10.11.2016 9:18:26 INFO Extracting registry image from "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Microsoft Internet Explorer\Extensions (registry images)\HKCU_IE_MenuExt.reg" file.

10.11.2016 9:18:26 INFO Extraction of registry image is complete.

10.11.2016 9:18:26 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Microsoft Internet Explorer\Extensions (registry images)\HKLM_IE_Extensions.reg" file.

10.11.2016 9:18:26 INFO Extraction of registry image is complete.

10.11.2016 9:18:26 INFO Finished module: MSIERegistryPathExtractor

10.11.2016 9:18:26 INFO Starting module: FirefoxFeatureExtractor

10.11.2016 9:18:26 INFO Finished module: FirefoxFeatureExtractor

10.11.2016 9:18:26 INFO Starting module: Collecting Mozilla Firefox files

10.11.2016 9:18:26 INFO Collecting Mozilla Firefox files: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:26 INFO List of templates to collect:

SearchPattern:C:\Users\sadmin1\AppData\Roaming\Mozilla\Firefox\Profiles\*\prefs.js;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Roaming\Mozilla\Firefox\Profiles\*\user.js;DisableWow64Redirect:False;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:26 INFO Collecting Mozilla Firefox files: ExtractData(Action setProgressValue): Data extracting finished. Collected 0 files.

10.11.2016 9:18:26 INFO Finished module: Collecting Mozilla Firefox files

10.11.2016 9:18:26 INFO Starting module: Detecting of incompatible software

10.11.2016 9:18:33 INFO Finished module: Detecting of incompatible software

10.11.2016 9:18:33 INFO Data extracting finished.

10.11.2016 9:18:33 INFO Creating archived report started on path: W:\IT\report\GSI6_RT-35_sadmin1_11_10_2016_09_15_23.zip

10.11.2016 9:18:33 INFO The old version of the Get System Information managed wrapper is started.

10.11.2016 9:18:33 INFO The old version of Get System Information PE is extracted at path: "C:\Users\sadmin1\AppData\Local\Temp\s3ak\GetSystemInfo.exe"

10.11.2016 9:18:33 INFO The old version of Get System Information PE is started.

10.11.2016 9:18:36 INFO The old version of Get System Information PE is finished.

10.11.2016 9:18:36 INFO UnSubscribeModuleProgressListener start...

10.11.2016 9:18:36 INFO UnSubscribeModuleProgressListener completed.

10.11.2016 9:18:36 INFO Raise OnDataExtractionCompleted()

10.11.2016 9:18:36 INFO Raised event OnDataExtractionCompleted()

10.11.2016 9:18:36 INFO Exit from critical area...

10.11.2016 9:22:44 INFO Enter to critical area...

10.11.2016 9:22:44 INFO Data extracting started.

10.11.2016 9:22:44 INFO Starting module: Getting System Information

10.11.2016 9:22:44 INFO Old Get System Info arguments: "/EULA=1 /qn /l=3 /path="C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo""

10.11.2016 9:22:44 INFO The old version of the Get System Information managed wrapper is started.

10.11.2016 9:22:44 INFO The old version of Get System Information PE is extracted at path: "C:\Users\sadmin1\AppData\Local\Temp\s3ak\GetSystemInfo.exe"

10.11.2016 9:22:44 INFO The old version of Get System Information PE is started.

10.11.2016 9:24:15 INFO The old version of Get System Information PE is finished.

10.11.2016 9:24:15 INFO Finished module: Getting System Information

10.11.2016 9:24:15 INFO Starting module: Executing AVZ

10.11.2016 9:24:15 INFO The old version of the Get System Information managed wrapper is started.

10.11.2016 9:24:15 INFO The old version of Get System Information PE is extracted at path: "C:\Users\sadmin1\AppData\Local\Temp\s3ak\GetSystemInfo.exe"

10.11.2016 9:24:15 INFO The old version of Get System Information PE is started.

10.11.2016 9:24:15 INFO The old version of Get System Information PE is finished.

10.11.2016 9:24:15 INFO AVZ extracted at path C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfoDllCache\avz

10.11.2016 9:25:15 INFO File "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfoDllCache\avz\avz.exe" executed with arguments "Script="C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfoDllCache\avz\asa.avz" HiddenMode="3" SpoolLog="C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\avz.log" TempFolder="C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\AvzTemp" ".

10.11.2016 9:25:15 INFO Finished module: Executing AVZ

10.11.2016 9:25:15 INFO Starting module: Overview of Kaspersky Lab files in Application Data

10.11.2016 9:25:15 INFO Overview of Kaspersky Lab files in Application Data: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:15 INFO List of templates to collect:

SearchPattern:C:\ProgramData\Kaspersky Lab\*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*;DisableWow64Redirect:False;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:15 INFO Finished module: Overview of Kaspersky Lab files in Application Data

10.11.2016 9:25:15 INFO Starting module: Getting information about versions of databases files for Kaspersky Lab products

10.11.2016 9:25:15 INFO ExtractData started:

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:15 INFO NeedWow64FsRedirectionDisable:False

10.11.2016 9:25:15 INFO FilesSearchOptions:AllDirectories

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:15 INFO The scope of the "C:\ProgramData\Kaspersky Lab\*\Bases\Cache\" directory

10.11.2016 9:25:15 INFO At path "C:\ProgramData\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.dll.*".

10.11.2016 9:25:15 INFO At path "C:\ProgramData\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.exe.*".

10.11.2016 9:25:15 INFO At path "C:\ProgramData\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.sys.*".

10.11.2016 9:25:15 INFO At path "C:\ProgramData\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.kdl.*".

10.11.2016 9:25:15 INFO At path "C:\ProgramData\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.enc1.*".

10.11.2016 9:25:15 INFO The scope of the "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*\Bases\Cache\" directory

10.11.2016 9:25:15 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.dll.*".

10.11.2016 9:25:15 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.exe.*".

10.11.2016 9:25:15 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.sys.*".

10.11.2016 9:25:15 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.kdl.*".

10.11.2016 9:25:15 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.enc1.*".

10.11.2016 9:25:15 INFO Finished module: Getting information about versions of databases files for Kaspersky Lab products

10.11.2016 9:25:15 INFO Starting module: Getting information about versions of drivers of Kaspersky Lab products

10.11.2016 9:25:15 INFO ExtractData started:

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:15 INFO NeedWow64FsRedirectionDisable:True

10.11.2016 9:25:15 INFO FilesSearchOptions:TopDirectoryOnly

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:15 INFO The scope of the "C:\Windows\system32\drivers" directory

10.11.2016 9:25:15 INFO At path "C:\Windows\system32\drivers" found 0 files for pattern "kl*.sys".

10.11.2016 9:25:15 INFO At path "C:\Windows\system32\drivers" found 0 files for pattern "kneps.sys".

10.11.2016 9:25:15 INFO At path "C:\Windows\system32\drivers" found 0 files for pattern "cm_km*.sys".

10.11.2016 9:25:15 INFO Finished module: Getting information about versions of drivers of Kaspersky Lab products

10.11.2016 9:25:15 INFO Starting module: Getting information about versions of modules of Kaspersky Lab products

10.11.2016 9:25:15 INFO ExtractData started:

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:15 INFO NeedWow64FsRedirectionDisable:False

10.11.2016 9:25:15 INFO FilesSearchOptions:TopDirectoryOnly

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:15 INFO The scope of the "C:\Program Files\Kaspersky Lab\*\*" directory

10.11.2016 9:25:15 INFO At path "C:\Program Files\Kaspersky Lab\*\*" found 0 files for pattern "*.dll".

10.11.2016 9:25:15 INFO At path "C:\Program Files\Kaspersky Lab\*\*" found 0 files for pattern "*.exe".

10.11.2016 9:25:15 INFO At path "C:\Program Files\Kaspersky Lab\*\*" found 0 files for pattern "*.sys".

10.11.2016 9:25:15 INFO At path "C:\Program Files\Kaspersky Lab\*\*" found 0 files for pattern "*.kdl".

10.11.2016 9:25:15 INFO At path "C:\Program Files\Kaspersky Lab\*\*" found 0 files for pattern "*.enc1".

10.11.2016 9:25:15 INFO The scope of the "C:\Program Files\Kaspersky Lab\*\*\*" directory

10.11.2016 9:25:15 INFO At path "C:\Program Files\Kaspersky Lab\*\*\*" found 0 files for pattern "*.dll".

10.11.2016 9:25:15 INFO At path "C:\Program Files\Kaspersky Lab\*\*\*" found 0 files for pattern "*.exe".

10.11.2016 9:25:15 INFO At path "C:\Program Files\Kaspersky Lab\*\*\*" found 0 files for pattern "*.sys".

10.11.2016 9:25:15 INFO At path "C:\Program Files\Kaspersky Lab\*\*\*" found 0 files for pattern "*.kdl".

10.11.2016 9:25:15 INFO At path "C:\Program Files\Kaspersky Lab\*\*\*" found 0 files for pattern "*.enc1".

10.11.2016 9:25:15 INFO The scope of the "C:\Program Files (x86)\Kaspersky Lab\*\*" directory

10.11.2016 9:25:15 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*" found 0 files for pattern "*.dll".

10.11.2016 9:25:15 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*" found 0 files for pattern "*.exe".

10.11.2016 9:25:15 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*" found 0 files for pattern "*.sys".

10.11.2016 9:25:15 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*" found 0 files for pattern "*.kdl".

10.11.2016 9:25:15 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*" found 0 files for pattern "*.enc1".

10.11.2016 9:25:15 INFO The scope of the "C:\Program Files (x86)\Kaspersky Lab\*\*\*" directory

10.11.2016 9:25:15 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*\*" found 0 files for pattern "*.dll".

10.11.2016 9:25:15 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*\*" found 0 files for pattern "*.exe".

10.11.2016 9:25:15 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*\*" found 0 files for pattern "*.sys".

10.11.2016 9:25:15 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*\*" found 0 files for pattern "*.kdl".

10.11.2016 9:25:15 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*\*" found 0 files for pattern "*.enc1".

10.11.2016 9:25:15 INFO Finished module: Getting information about versions of modules of Kaspersky Lab products

10.11.2016 9:25:15 INFO Starting module: Getting information about versions of modules from Program Data of Kaspersky Lab products

10.11.2016 9:25:15 INFO ExtractData started:

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:15 INFO NeedWow64FsRedirectionDisable:False

10.11.2016 9:25:15 INFO FilesSearchOptions:TopDirectoryOnly

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:15 INFO The scope of the "C:\ProgramData\Kaspersky Lab\*" directory

10.11.2016 9:25:15 INFO At path "C:\ProgramData\Kaspersky Lab\*" found 0 files for pattern "*.dll".

10.11.2016 9:25:15 INFO At path "C:\ProgramData\Kaspersky Lab\*" found 0 files for pattern "*.exe".

10.11.2016 9:25:15 INFO At path "C:\ProgramData\Kaspersky Lab\*" found 0 files for pattern "*.sys".

10.11.2016 9:25:15 INFO At path "C:\ProgramData\Kaspersky Lab\*" found 0 files for pattern "*.kdl".

10.11.2016 9:25:15 INFO At path "C:\ProgramData\Kaspersky Lab\*" found 0 files for pattern "*.enc1".

10.11.2016 9:25:15 INFO The scope of the "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*" directory

10.11.2016 9:25:15 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*" found 0 files for pattern "*.dll".

10.11.2016 9:25:15 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*" found 0 files for pattern "*.exe".

10.11.2016 9:25:15 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*" found 0 files for pattern "*.sys".

10.11.2016 9:25:15 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*" found 0 files for pattern "*.kdl".

10.11.2016 9:25:15 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*" found 0 files for pattern "*.enc1".

10.11.2016 9:25:15 INFO Finished module: Getting information about versions of modules from Program Data of Kaspersky Lab products

10.11.2016 9:25:15 INFO Starting module: Collecting console output of "klnagchk.exe"

10.11.2016 9:25:15 INFO Finished module: Collecting console output of "klnagchk.exe"

10.11.2016 9:25:15 INFO Starting module: Collecting the "avp.com" settings

10.11.2016 9:25:15 INFO The "avp.com" file is not found.

10.11.2016 9:25:15 INFO Finished module: Collecting the "avp.com" settings

10.11.2016 9:25:15 INFO Starting module: Collecting the "avp.com" task statistics

10.11.2016 9:25:15 INFO The "avp.com" file is not found.

10.11.2016 9:25:15 INFO Finished module: Collecting the "avp.com" task statistics

10.11.2016 9:25:15 INFO Starting module: Collecting "Kavremover" logs

10.11.2016 9:25:15 INFO Collecting "Kavremover" logs: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:15 INFO List of templates to collect:

SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\kavrem*.log;DisableWow64Redirect:True;AdditionalData:
SearchPattern:C:\Windows\Temp\kavrem*.log;DisableWow64Redirect:True;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\kavrem*.log;DisableWow64Redirect:True;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:15 INFO Collecting "Kavremover" logs: ExtractData(Action setProgressValue): Data extracting finished. Collected 0 files.

10.11.2016 9:25:15 INFO Finished module: Collecting "Kavremover" logs

10.11.2016 9:25:15 INFO Starting module: Collecting tiny dumps

10.11.2016 9:25:15 INFO Collecting tiny dumps: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:15 INFO List of templates to collect:

SearchPattern:C:\ProgramData\Kaspersky Lab\*.tiny.dmp*;DisableWow64Redirect:True;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:15 INFO Collecting tiny dumps: ExtractData(Action setProgressValue): Data extracting finished. Collected 0 files.

10.11.2016 9:25:15 INFO Finished module: Collecting tiny dumps

10.11.2016 9:25:15 INFO Starting module: Collecting logs of patches of Kaspersky Lab products

10.11.2016 9:25:15 INFO Collecting logs of patches of Kaspersky Lab products: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:15 INFO List of templates to collect:

SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\kavpatcher.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\KESpatch*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\ak_patch*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\Temp\kavpatcher.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\Temp\KESpatch*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\Temp\ak_patch*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\kavpatcher.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\KESpatch*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\ak_patch*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\ProgramData\Kaspersky Lab\kavpatcher.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\ProgramData\Kaspersky Lab\KESpatch*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\ProgramData\Kaspersky Lab\ak_patch*;DisableWow64Redirect:False;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:15 INFO Copy file from "C:\Windows\Temp\ak_patch2016-11-09-12-43-05.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Patches Install Logs\ak_patch2016-11-09-12-43-05.log"

10.11.2016 9:25:15 INFO Copy file from "C:\Windows\Temp\ak_patch2016-11-09-12-43-47.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Patches Install Logs\ak_patch2016-11-09-12-43-47.log"

10.11.2016 9:25:15 INFO Copy file from "C:\Windows\Temp\ak_patch_sfx2016-11-09-12-43-46.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Patches Install Logs\ak_patch_sfx2016-11-09-12-43-46.log"

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:15 INFO Collecting logs of patches of Kaspersky Lab products: ExtractData(Action setProgressValue): Data extracting finished. Collected 3 files.

10.11.2016 9:25:15 INFO Finished module: Collecting logs of patches of Kaspersky Lab products

10.11.2016 9:25:15 INFO Starting module: Collecting logs of Kaspersky Lab products

10.11.2016 9:25:15 INFO Collecting logs of Kaspersky Lab products: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:15 INFO List of templates to collect:

SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\kl*.log*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\$kl*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\kav8wsee*.log*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\Temp\kl*.log*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\Temp\$kl*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\Temp\kav8wsee*.log*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\kl*.log*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\$kl*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\kav8wsee*.log*;DisableWow64Redirect:False;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:16 INFO Copy file from "C:\Users\sadmin1\AppData\Local\Temp\kl-install-2016-11-09-13-46-37.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\kl-install-2016-11-09-13-46-37.log"

10.11.2016 9:25:16 INFO Copy file from "C:\Users\sadmin1\AppData\Local\Temp\kl-setup-2016-11-09-13-46-18.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\kl-setup-2016-11-09-13-46-18.log"

10.11.2016 9:25:16 INFO Copy file from "C:\Users\sadmin1\AppData\Local\Temp\kl-update-2016-11-09-13-47-20.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\kl-update-2016-11-09-13-47-20.log"

10.11.2016 9:25:16 INFO Copy file from "C:\Users\sadmin1\AppData\Local\Temp\kl-update-2016-11-09-13-50-07.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\kl-update-2016-11-09-13-50-07.log"

10.11.2016 9:25:16 INFO Copy file from "C:\Users\sadmin1\AppData\Local\Temp\$klpkinst.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klpkinst.log"

10.11.2016 9:25:16 INFO Copy file from "C:\Users\sadmin1\AppData\Local\Temp\$klrbtagt.txt" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klrbtagt.txt"

10.11.2016 9:25:16 INFO Copy file from "C:\Users\sadmin1\AppData\Local\Temp\$klriwrp.txt" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klriwrp.txt"

10.11.2016 9:25:17 INFO Copy file from "C:\Windows\Temp\kl-install-2016-11-09-12-47-40.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\kl-install-2016-11-09-12-47-40.log"

10.11.2016 9:25:17 INFO Copy file from "C:\Windows\Temp\kl-setup-2016-11-09-12-47-36.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\kl-setup-2016-11-09-12-47-36.log"

10.11.2016 9:25:17 INFO Copy file from "C:\Windows\Temp\kl-update-2016-11-09-12-48-43.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\kl-update-2016-11-09-12-48-43.log"

10.11.2016 9:25:18 INFO Copy file from "C:\Windows\Temp\kl-update-2016-11-09-12-53-13.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\kl-update-2016-11-09-12-53-13.log"

10.11.2016 9:25:18 INFO Copy file from "C:\Windows\Temp\$klnagent-2016-11-09-12-42-48.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klnagent-2016-11-09-12-42-48.log"

10.11.2016 9:25:18 INFO Copy file from "C:\Windows\Temp\$klnagent-setup-2016-11-09-12-42-48.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klnagent-setup-2016-11-09-12-42-48.log"

10.11.2016 9:25:18 INFO Copy file from "C:\Windows\Temp\$klnagent-uninstall.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klnagent-uninstall.log"

10.11.2016 9:25:18 INFO Copy file from "C:\Windows\Temp\$klrbtagt.bak" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klrbtagt.bak"

10.11.2016 9:25:18 INFO File duplicate "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klrbtagt.txt" at destination folder "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs"

10.11.2016 9:25:18 INFO File rename to C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klrbtagt jc3lmrm5.sph.txt.

10.11.2016 9:25:18 INFO Copy file from "C:\Windows\Temp\$klrbtagt.txt" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klrbtagt jc3lmrm5.sph.txt"

10.11.2016 9:25:18 INFO Copy file from "C:\Windows\Temp\$klriwrp.bak" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klriwrp.bak"

10.11.2016 9:25:18 INFO File duplicate "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klriwrp.txt" at destination folder "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs"

10.11.2016 9:25:18 INFO File rename to C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klriwrp mkwysgae.xh2.txt.

10.11.2016 9:25:18 INFO Copy file from "C:\Windows\Temp\$klriwrp.txt" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klriwrp mkwysgae.xh2.txt"

10.11.2016 9:25:19 INFO Copy file from "C:\Windows\Temp\$klssinstlib.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klssinstlib.log"

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:19 INFO Collecting logs of Kaspersky Lab products: ExtractData(Action setProgressValue): Data extracting finished. Collected 19 files.

10.11.2016 9:25:19 INFO Finished module: Collecting logs of Kaspersky Lab products

10.11.2016 9:25:19 INFO Starting module: Collecting update status files

10.11.2016 9:25:19 INFO Collecting update status files : ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:19 INFO List of templates to collect:

SearchPattern:C:\ProgramData\Kaspersky Lab\*\Data\u0607g.xml;DisableWow64Redirect:True;AdditionalData:
SearchPattern:C:\ProgramData\Kaspersky Lab\*\Data\u1313g.xml;DisableWow64Redirect:True;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:19 INFO Copy file from "C:\ProgramData\Kaspersky Lab\KES10SP1\Data\u1313g.xml" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\u1313g_KES10SP1_RT-35.xml"

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:19 INFO Collecting update status files : ExtractData(Action setProgressValue): Data extracting finished. Collected 1 files.

10.11.2016 9:25:19 INFO Finished module: Collecting update status files

10.11.2016 9:25:19 INFO Starting module: Overview of Kaspersky Security Center dump files

10.11.2016 9:25:19 INFO Overview of Kaspersky Security Center dump files: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:19 INFO List of templates to collect:

SearchPattern:C:\Windows\*.dmp;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\Minidump\*.dmp;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Program Files\Kaspersky Lab\Kaspersky Security Center\~dumps\*.dmp;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Program Files\Kaspersky Lab\Kaspersky Security Center\~dumps\*.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Program Files\Kaspersky Lab\Kaspersky Security Center\~dumps\*.txt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Program Files\Kaspersky Lab\Kaspersky Security Center\~dumps\*.enc1;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Center\~dumps\*.dmp;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Center\~dumps\*.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Center\~dumps\*.txt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Center\~dumps\*.enc1;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\ProgramData\Kaspersky Lab\*.dmp;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\ProgramData\Kaspersky Lab\*.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\ProgramData\Kaspersky Lab\*.txt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\ProgramData\Kaspersky Lab\*.enc1;DisableWow64Redirect:False;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:19 INFO Finished module: Overview of Kaspersky Security Center dump files

10.11.2016 9:25:19 INFO Starting module: Collecting NTFS junction points from Application Data

10.11.2016 9:25:19 INFO Junction points collection is started for the "C:\ProgramData" directory.

10.11.2016 9:25:19 INFO Drive "C:\" has File System "NTFS"

10.11.2016 9:25:19 INFO "C:\ProgramData\Application Data" is Junction Point

10.11.2016 9:25:19 INFO "C:\ProgramData\Application Data" targeted to "C:\ProgramData"

10.11.2016 9:25:19 INFO "C:\ProgramData\Desktop" is Junction Point

10.11.2016 9:25:19 INFO "C:\ProgramData\Desktop" targeted to "C:\Users\Public\Desktop"

10.11.2016 9:25:19 INFO "C:\ProgramData\Documents" is Junction Point

10.11.2016 9:25:19 INFO "C:\ProgramData\Documents" targeted to "C:\Users\Public\Documents"

10.11.2016 9:25:19 INFO "C:\ProgramData\Favorites" is Junction Point

10.11.2016 9:25:19 INFO "C:\ProgramData\Favorites" targeted to "C:\Users\Public\Favorites"

10.11.2016 9:25:19 INFO "C:\ProgramData\Start Menu" is Junction Point

10.11.2016 9:25:19 INFO "C:\ProgramData\Start Menu" targeted to "C:\ProgramData\Microsoft\Windows\Start Menu"

10.11.2016 9:25:19 INFO "C:\ProgramData\Templates" is Junction Point

10.11.2016 9:25:19 INFO "C:\ProgramData\Templates" targeted to "C:\ProgramData\Microsoft\Windows\Templates"

10.11.2016 9:25:19 INFO "C:\ProgramData\Главное меню" is Junction Point

10.11.2016 9:25:19 INFO "C:\ProgramData\Главное меню" targeted to "C:\ProgramData\Microsoft\Windows\Start Menu"

10.11.2016 9:25:19 INFO "C:\ProgramData\Документы" is Junction Point

10.11.2016 9:25:19 INFO "C:\ProgramData\Документы" targeted to "C:\Users\Public\Documents"

10.11.2016 9:25:19 INFO "C:\ProgramData\Избранное" is Junction Point

10.11.2016 9:25:19 INFO "C:\ProgramData\Избранное" targeted to "C:\Users\Public\Favorites"

10.11.2016 9:25:19 INFO "C:\ProgramData\Рабочий стол" is Junction Point

10.11.2016 9:25:19 INFO "C:\ProgramData\Рабочий стол" targeted to "C:\Users\Public\Desktop"

10.11.2016 9:25:19 INFO "C:\ProgramData\Шаблоны" is Junction Point

10.11.2016 9:25:19 INFO "C:\ProgramData\Шаблоны" targeted to "C:\ProgramData\Microsoft\Windows\Templates"

10.11.2016 9:25:19 INFO Junction points list is written to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Junction_ProgramData_RT-35.txt" file.

10.11.2016 9:25:19 INFO Execution of NtfsJunctionListCollectorBase::ExtractData for "C:\ProgramData" directory is complete.

10.11.2016 9:25:19 INFO Finished module: Collecting NTFS junction points from Application Data

10.11.2016 9:25:19 INFO Starting module: Collecting "Kleaner" logs

10.11.2016 9:25:19 INFO Collecting "Kleaner" logs: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:19 INFO List of templates to collect:

SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\kleaner*.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\Temp\kleaner*.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\kleaner*.log;DisableWow64Redirect:False;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:19 INFO Collecting "Kleaner" logs: ExtractData(Action setProgressValue): Data extracting finished. Collected 0 files.

10.11.2016 9:25:19 INFO Finished module: Collecting "Kleaner" logs

10.11.2016 9:25:19 INFO Starting module: Collecting error logs of Microsoft SQL Server

10.11.2016 9:25:19 INFO Collecting error logs of Microsoft SQL Server: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:19 INFO List of templates to collect:

SearchPattern:C:\Program Files\Microsoft SQL Server\*\MSSQL\Log\ERRORLOG*;DisableWow64Redirect:True;AdditionalData:X64
SearchPattern:C:\Program Files (x86)\Microsoft SQL Server\*\MSSQL\Log\ERRORLOG*;DisableWow64Redirect:False;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:19 INFO Collecting error logs of Microsoft SQL Server: ExtractData(Action setProgressValue): Data extracting finished. Collected 0 files.

10.11.2016 9:25:19 INFO Finished module: Collecting error logs of Microsoft SQL Server

10.11.2016 9:25:19 INFO Starting module: Collecting Microsoft .NET Framework setup logs

10.11.2016 9:25:19 INFO Collecting Microsoft .NET Framework setup logs : ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:19 INFO List of templates to collect:

SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\dd_dotNetFx*_*_x86_x64_decompression_log.txt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\dd_SetupUtility.txt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\Microsoft .NET Framework *Setup*.txt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\Microsoft .NET Framework *Setup*.html;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\dd_dotNetFx*_*_x86_x64_decompression_log.txt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\dd_SetupUtility.txt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\Microsoft .NET Framework *Setup*.txt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\Microsoft .NET Framework *Setup*.html;DisableWow64Redirect:False;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:19 INFO Collecting Microsoft .NET Framework setup logs : ExtractData(Action setProgressValue): Data extracting finished. Collected 0 files.

10.11.2016 9:25:19 INFO Finished module: Collecting Microsoft .NET Framework setup logs

10.11.2016 9:25:19 INFO Starting module: Collecting versions of hotfixes of Kaspersky Lab products

10.11.2016 9:25:19 INFO Products info collector start.

10.11.2016 9:25:19 INFO Environment registry keys:

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:19 INFO Execution of ProductInfoCollector is complete.

10.11.2016 9:25:19 INFO Finished module: Collecting versions of hotfixes of Kaspersky Lab products

10.11.2016 9:25:19 INFO Starting module: ControlRegistryPathExtractor

10.11.2016 9:25:19 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKLM_System_CurrentControlSet_Control.reg" file.

10.11.2016 9:25:19 INFO Extraction of registry image is complete.

10.11.2016 9:25:19 INFO Finished module: ControlRegistryPathExtractor

10.11.2016 9:25:19 INFO Starting module: ServicesRegistryPathExtractor

10.11.2016 9:25:19 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKLM_System_CurrentControlSet_Services.reg" file.

10.11.2016 9:25:19 INFO Extraction of registry image is complete.

10.11.2016 9:25:19 INFO Finished module: ServicesRegistryPathExtractor

10.11.2016 9:25:19 INFO Starting module: ProductRegistryPathExtraction

10.11.2016 9:25:19 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\Software\KasperskyLab\" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKLM_Software_KasperskyLab.reg" file.

10.11.2016 9:25:19 INFO Extraction of registry image is complete.

10.11.2016 9:25:19 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\Software\Wow6432Node\KasperskyLab\" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKLM_Software_Wow6432Node_KasperskyLab.reg" file.

10.11.2016 9:25:19 INFO Extraction of registry image is complete.

10.11.2016 9:25:19 INFO Extracting registry image from "HKEY_CURRENT_USER\Software\KasperskyLab\" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKCU_Software_KasperskyLab.reg" file.

10.11.2016 9:25:19 INFO Extraction of registry image is complete.

10.11.2016 9:25:19 INFO Extracting registry image from "HKEY_CURRENT_USER\Software\Wow6432Node\KasperskyLab\" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKCU_Software_Wow6432Node_KasperskyLab.reg" file.

10.11.2016 9:25:19 INFO Extraction of registry image is complete.

10.11.2016 9:25:19 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\Software\Kaspersky Lab\" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKLM_Software_Kaspersky_Lab.reg" file.

10.11.2016 9:25:19 INFO Extraction of registry image is complete.

10.11.2016 9:25:19 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\Software\Wow6432Node\Kaspersky Lab\" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKLM_Software_Wow6432Node_Kaspersky_Lab.reg" file.

10.11.2016 9:25:19 INFO Extraction of registry image is complete.

10.11.2016 9:25:19 INFO Extracting registry image from "HKEY_CURRENT_USER\Software\Kaspersky Lab\" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKCU_Software_Kaspersky_Lab.reg" file.

10.11.2016 9:25:19 INFO Extraction of registry image is complete.

10.11.2016 9:25:19 INFO Extracting registry image from "HKEY_CURRENT_USER\Software\Wow6432Node\Kaspersky Lab\" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKCU_Software_Wow6432Node_Kaspersky_Lab.reg" file.

10.11.2016 9:25:19 INFO Extraction of registry image is complete.

10.11.2016 9:25:19 INFO Finished module: ProductRegistryPathExtraction

10.11.2016 9:25:19 INFO Starting module: Getting information about versions of plug-ins of Kaspersky Security Center

10.11.2016 9:25:19 INFO Security Center plugins info extracting started...

10.11.2016 9:25:19 INFO Getting information about Kaspersky Security Center plug-ins is complete.

10.11.2016 9:25:19 INFO Finished module: Getting information about versions of plug-ins of Kaspersky Security Center

10.11.2016 9:25:19 INFO Starting module: Collecting setup API logs

10.11.2016 9:25:19 INFO Collecting setup API logs: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:19 INFO List of templates to collect:

SearchPattern:C:\Windows\inf\setupapi.*.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\setup*.log;DisableWow64Redirect:False;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:20 INFO Copy file from "C:\Windows\inf\setupapi.app.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Setupapi\setupapi.app.log"

10.11.2016 9:25:20 INFO Copy file from "C:\Windows\inf\setupapi.dev.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Setupapi\setupapi.dev.log"

10.11.2016 9:25:20 INFO Copy file from "C:\Windows\inf\setupapi.offline.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Setupapi\setupapi.offline.log"

10.11.2016 9:25:20 INFO Copy file from "C:\Windows\setupact.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Setupapi\setupact.log"

10.11.2016 9:25:20 INFO Copy file from "C:\Windows\setuperr.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Setupapi\setuperr.log"

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:20 INFO Collecting setup API logs: ExtractData(Action setProgressValue): Data extracting finished. Collected 5 files.

10.11.2016 9:25:20 INFO Finished module: Collecting setup API logs

10.11.2016 9:25:20 INFO Starting module: Collecting Windows event logs

10.11.2016 9:25:20 INFO Collecting Windows event logs: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:20 INFO List of templates to collect:

SearchPattern:C:\Windows\system32\winevt\Logs\System.evtx;DisableWow64Redirect:True;AdditionalData:
SearchPattern:C:\Windows\system32\winevt\Logs\Application.evtx;DisableWow64Redirect:True;AdditionalData:
SearchPattern:C:\Windows\system32\winevt\Logs\Kaspersky*.evtx;DisableWow64Redirect:True;AdditionalData:
SearchPattern:C:\Windows\system32\Config\System.evt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\system32\Config\Application.evt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\system32\Config\SysEvent.evt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\system32\Config\AppEvent.evt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\system32\Config\Kaspersky*.evt;DisableWow64Redirect:False;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:20 INFO Copy file from "C:\Windows\System32\winevt\Logs\System.evtx" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Eventlogs\System.evtx"

10.11.2016 9:25:20 INFO Copy file from "C:\Windows\System32\winevt\Logs\Application.evtx" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Eventlogs\Application.evtx"

10.11.2016 9:25:20 INFO Copy file from "C:\Windows\System32\winevt\Logs\Kaspersky Event Log.evtx" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Eventlogs\Kaspersky Event Log.evtx"

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:20 INFO Collecting Windows event logs: ExtractData(Action setProgressValue): Data extracting finished. Collected 3 files.

10.11.2016 9:25:20 INFO Finished module: Collecting Windows event logs

10.11.2016 9:25:20 INFO Starting module: MSIESearchScopes

10.11.2016 9:25:20 INFO Extracting registry image from "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Microsoft Internet Explorer\Search Scopes\SearchScopes.reg" file.

10.11.2016 9:25:20 INFO Extraction of registry image is complete.

10.11.2016 9:25:20 INFO Finished module: MSIESearchScopes

10.11.2016 9:25:20 INFO Starting module: IEFeaturesExtractor

10.11.2016 9:25:20 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfoDllCache\HKLM_IE_OBTAINED.reg" file.

10.11.2016 9:25:20 INFO Extraction of registry image is complete.

10.11.2016 9:25:21 INFO Extracting registry image from "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfoDllCache\HLCU_IE_OBTAINED.reg" file.

10.11.2016 9:25:21 INFO Extraction of registry image is complete.

10.11.2016 9:25:21 INFO Finished module: IEFeaturesExtractor

10.11.2016 9:25:21 INFO Starting module: MSIERegistryPathExtractor

10.11.2016 9:25:21 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Microsoft Internet Explorer\Extensions (registry images)\HKLM_IE_Toolbar.reg" file.

10.11.2016 9:25:21 INFO Extraction of registry image is complete.

10.11.2016 9:25:21 INFO Extracting registry image from "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Microsoft Internet Explorer\Extensions (registry images)\HKCU_IE_Toolbar.reg" file.

10.11.2016 9:25:21 INFO Extraction of registry image is complete.

10.11.2016 9:25:21 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Explorer Bars" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Microsoft Internet Explorer\Extensions (registry images)\HKLM_IE_Explorer_Bars.reg" file.

10.11.2016 9:25:21 INFO Extraction of registry image is complete.

10.11.2016 9:25:21 INFO Extracting registry image from "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Microsoft Internet Explorer\Extensions (registry images)\HKCU_IE_Explorer_Bars.reg" file.

10.11.2016 9:25:21 INFO Extraction of registry image is complete.

10.11.2016 9:25:21 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\MenuExt" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Microsoft Internet Explorer\Extensions (registry images)\HKLM_IE_MenuExt.reg" file.

10.11.2016 9:25:21 INFO Extraction of registry image is complete.

10.11.2016 9:25:21 INFO Extracting registry image from "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Microsoft Internet Explorer\Extensions (registry images)\HKCU_IE_MenuExt.reg" file.

10.11.2016 9:25:21 INFO Extraction of registry image is complete.

10.11.2016 9:25:21 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Microsoft Internet Explorer\Extensions (registry images)\HKLM_IE_Extensions.reg" file.

10.11.2016 9:25:21 INFO Extraction of registry image is complete.

10.11.2016 9:25:21 INFO Finished module: MSIERegistryPathExtractor

10.11.2016 9:25:21 INFO Starting module: FirefoxFeatureExtractor

10.11.2016 9:25:21 INFO Finished module: FirefoxFeatureExtractor

10.11.2016 9:25:21 INFO Starting module: Collecting Mozilla Firefox files

10.11.2016 9:25:21 INFO Collecting Mozilla Firefox files: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:21 INFO List of templates to collect:

SearchPattern:C:\Users\sadmin1\AppData\Roaming\Mozilla\Firefox\Profiles\*\prefs.js;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Roaming\Mozilla\Firefox\Profiles\*\user.js;DisableWow64Redirect:False;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:21 INFO Collecting Mozilla Firefox files: ExtractData(Action setProgressValue): Data extracting finished. Collected 0 files.

10.11.2016 9:25:21 INFO Finished module: Collecting Mozilla Firefox files

10.11.2016 9:25:21 INFO Starting module: Detecting of incompatible software

10.11.2016 9:25:27 INFO Finished module: Detecting of incompatible software

10.11.2016 9:25:27 INFO Data extracting finished.

Изменено 10 ноября, 2016 пользователем sadmin

10 ноября, 2016

10.11.2016 9:18:19 WARNING An exception skipped: System.UnauthorizedAccessException: Отказано в доступе по пути "C:\Program Files\Windows NT\Стандартные"

и в конце:

10.11.2016 9:25:27 INFO Finished module: Detecting of incompatible software

**тогда выложите архив на сторонний ресурс и ссылку сюда. Изучать такой лог нет возможности

10 ноября, 2016

sadmin,

нужет весь zip-овский файл, который сформировала утилита, а не отдельные файлы из него.

Сделайте проверку системных файлов - в командной строке, запущенной от имени администратора, выполните:

sfc /scannow

10 ноября, 2016

10.11.2016 9:18:19 WARNING An exception skipped: System.UnauthorizedAccessException: Отказано в доступе по пути "C:\Program Files\Windows NT\Стандартные"
и в конце:

10.11.2016 9:25:27 INFO Finished module: Detecting of incompatible software

**тогда выложите архив на сторонний ресурс и ссылку сюда. Изучать такой лог нет возможности

https://yadi.sk/d/q0ksQ78lyKiPX

10 ноября, 2016

Результаты автоматического анализа настроек SPI

Ошибка LSP NameSpace: "WindowsLive NSP" --> отсутствует файл C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL Ошибка LSP NameSpace: "WindowsLive Local NSP" --> отсутствует файл C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL Внимание ! Обнаружены ошибки в LSP. Количество ошибок - 2 Возможны проблемы при работе с сетью и Интернет

1. Создайте точку восстановления системы.

2. Скачайте утилиту AVZ http://z-oleg.com/avz4.zip

3. Распакуйте, запустите от имени администратора.

4. Меню "Файл" - Восстановление системы.

5. Отметьте пункты 14 и 15 и нажмите "Выполнить отмеченные операции".

6. Перезагрузитесь.

7. Очистите папку C:\Users\sadmin1\AppData\Local\Temp

8. Скачайте и установите KES 10.2.5.3201 http://www.kaspersky.ru/downloads-endpoint-security-windows

ошибка 1714 не удается удалить более раннюю версию

Рекомендуемые сообщения

sadmin

Ссылка на комментарий

Поделиться на другие сайты

eremeev

Ссылка на комментарий

Поделиться на другие сайты

oit

Ссылка на комментарий

Поделиться на другие сайты

sadmin

Ссылка на комментарий

Поделиться на другие сайты

Friend

Ссылка на комментарий

Поделиться на другие сайты

sadmin

Ссылка на комментарий

Поделиться на другие сайты

oit

Ссылка на комментарий

Поделиться на другие сайты

andrew75

Ссылка на комментарий

Поделиться на другие сайты

sadmin

Ссылка на комментарий

Поделиться на другие сайты

andrew75

Ссылка на комментарий

Поделиться на другие сайты

Пожалуйста, войдите, чтобы комментировать

Похожий контент

Обзор

Активность

Магазин

Поддержка

Kaspersky Support Forum