Перейти к содержанию

ошибка 1714 не удается удалить более раннюю версию

sadmin

Автор sadmin
в Помощь по персональным продуктам

 Поделиться

Рекомендуемые сообщения

sadmin

sadmin

Опубликовано
Опубликовано (изменено)

При установке Kaspersky Endpoint Security 10 (10.2.2.10535)

Выдает ошибку:

При установки произошла неисправимая ошибка 1714, не удается удалить более раннюю версию программы

обратите в службу технической поддержки 

 

kavremvr пользовался

реестр чистил... ( если можно напишите более подробно какие ветки нужно удалять)

ошибка все равно не пропадает 

 

GSI http://www.getsystem...3b91f4edf919e00

Изменено пользователем sadmin
eremeev

eremeev

Опубликовано
Опубликовано

Здравствуйте,

 

приложите, пожалуйста, полный GSI с проблемной машины.

Спасибо.

sadmin

sadmin

Опубликовано
  • Автор
Опубликовано

 

kavremvr пользовался

в безопасном режиме?

 

да

 

 

Здравствуйте,

 

приложите, пожалуйста, полный GSI с проблемной машины.

Спасибо.

Сообщение от модератора Mark D. Pearlstone
Файлы к сообщению нужно прикреплять, а не в файловый архив. Удалено.
Friend

Friend

Опубликовано
Опубликовано

@sadmin, почему не установите сразу версию 10.2.5.3201: http://support.kaspersky.ru/12758

Ссылка на ваш отчет: https://www.getsysteminfo.com/read.php?file=3d3c75c6e167dad217002720502b889c&ms=1

Соберите отчет с помощью GetsystemInfo 6: http://media.kaspersky.com/utilities/ConsumerUtilities/GetSystemInfo6.1.exe

Какая версия антивируса до этого стояла?

sadmin

sadmin

Опубликовано
  • Автор
Опубликовано (изменено)

ранее стояла версия 10.1.* точно не помню какая

Ссылка на отчет http://www.getsysteminfo.com/read.php?file=393fc3473b5d50bec3b91f4edf919e00

 

GetSystemInfoServiceLog не смог прикрепить пишет Вы не можете загружать файлы подобного типа.

в спойлере его содержимое

 

log:

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Kaspersky Lab
Kaspersky Get System Info 6.1.0.51
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:15:23 INFO StartupPath: C:\Users\sadmin1\AppData\Local\Temp\s3ak

10.11.2016 9:15:23 INFO Current culture: ru-RU

10.11.2016 9:15:23 INFO SilentMode: True

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:15:23 INFO Temp environment for "Get System Information" tool is created.

10.11.2016 9:15:23 INFO 34 application modules were loaded:

ModuleName: "Load module" Enabled: Getting System Information Priority:True
ModuleName: "Load module" Enabled: Executing AVZ Priority:True
ModuleName: "Load module" Enabled: Overview of Kaspersky Lab files in Application Data Priority:True
ModuleName: "Load module" Enabled: Getting information about versions of databases files for Kaspersky Lab products Priority:True
ModuleName: "Load module" Enabled: Getting information about versions of drivers of Kaspersky Lab products Priority:True
ModuleName: "Load module" Enabled: Getting information about versions of modules of Kaspersky Lab products Priority:True
ModuleName: "Load module" Enabled: Getting information about versions of modules from Program Data of Kaspersky Lab products Priority:True
ModuleName: "Load module" Enabled: Collecting console output of "klnagchk.exe" Priority:True
ModuleName: "Load module" Enabled: Collecting the "avp.com" settings Priority:True
ModuleName: "Load module" Enabled: Collecting the "avp.com" task statistics Priority:True
ModuleName: "Load module" Enabled: Collecting "Kavremover" logs Priority:True
ModuleName: "Load module" Enabled: Collecting tiny dumps Priority:True
ModuleName: "Load module" Enabled: Collecting logs of patches of Kaspersky Lab products Priority:True
ModuleName: "Load module" Enabled: Collecting logs of Kaspersky Lab products Priority:True
ModuleName: "Load module" Enabled: Collecting update status files Priority:True
ModuleName: "Load module" Enabled: Overview of Kaspersky Security Center dump files Priority:True
ModuleName: "Load module" Enabled: Collecting NTFS junction points from Application Data Priority:True
ModuleName: "Load module" Enabled: Collecting "Kleaner" logs Priority:True
ModuleName: "Load module" Enabled: Collecting error logs of Microsoft SQL Server Priority:True
ModuleName: "Load module" Enabled: Collecting Microsoft .NET Framework setup logs Priority:True
ModuleName: "Load module" Enabled: Collecting versions of hotfixes of Kaspersky Lab products Priority:True
ModuleName: "Load module" Enabled: ControlRegistryPathExtractor Priority:True
ModuleName: "Load module" Enabled: ServicesRegistryPathExtractor Priority:True
ModuleName: "Load module" Enabled: ProductRegistryPathExtraction Priority:True
ModuleName: "Load module" Enabled: Getting information about versions of plug-ins of Kaspersky Security Center Priority:True
ModuleName: "Load module" Enabled: Collecting setup API logs Priority:True
ModuleName: "Load module" Enabled: Collecting Windows event logs Priority:True
ModuleName: "Load module" Enabled: ChromeFeatureExtractor Priority:False
ModuleName: "Load module" Enabled: MSIESearchScopes Priority:True
ModuleName: "Load module" Enabled: IEFeaturesExtractor Priority:True
ModuleName: "Load module" Enabled: MSIERegistryPathExtractor Priority:True
ModuleName: "Load module" Enabled: FirefoxFeatureExtractor Priority:True
ModuleName: "Load module" Enabled: Collecting Mozilla Firefox files Priority:True
ModuleName: "Load module" Enabled: Detecting of incompatible software Priority:True
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:15:38 INFO Enter to critical area...

10.11.2016 9:15:38 INFO Data extracting started.

10.11.2016 9:15:38 INFO Starting module: Getting System Information

10.11.2016 9:15:38 INFO Old Get System Info arguments: "/EULA=1 /qn /l=3 /path="C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo""

10.11.2016 9:15:38 INFO The old version of the Get System Information managed wrapper is started.

10.11.2016 9:15:38 INFO The old version of Get System Information PE is extracted at path: "C:\Users\sadmin1\AppData\Local\Temp\s3ak\GetSystemInfo.exe"

10.11.2016 9:15:38 INFO The old version of Get System Information PE is started.

10.11.2016 9:16:59 INFO The old version of Get System Information PE is finished.

10.11.2016 9:16:59 INFO Finished module: Getting System Information

10.11.2016 9:16:59 INFO Starting module: Executing AVZ

10.11.2016 9:16:59 INFO The old version of the Get System Information managed wrapper is started.

10.11.2016 9:16:59 INFO The old version of Get System Information PE is extracted at path: "C:\Users\sadmin1\AppData\Local\Temp\s3ak\GetSystemInfo.exe"

10.11.2016 9:16:59 INFO The old version of Get System Information PE is started.

10.11.2016 9:16:59 INFO The old version of Get System Information PE is finished.

10.11.2016 9:16:59 INFO AVZ extracted at path C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfoDllCache\avz

10.11.2016 9:18:16 INFO File "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfoDllCache\avz\avz.exe" executed with arguments "Script="C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfoDllCache\avz\asa.avz" HiddenMode="3" SpoolLog="C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\avz.log" TempFolder="C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\AvzTemp" ".

10.11.2016 9:18:16 INFO Finished module: Executing AVZ

10.11.2016 9:18:16 INFO Starting module: Overview of Kaspersky Lab files in Application Data

10.11.2016 9:18:17 INFO Overview of Kaspersky Lab files in Application Data: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:17 INFO List of templates to collect:

SearchPattern:C:\ProgramData\Kaspersky Lab\*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*;DisableWow64Redirect:False;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:17 INFO Finished module: Overview of Kaspersky Lab files in Application Data

10.11.2016 9:18:17 INFO Starting module: Getting information about versions of databases files for Kaspersky Lab products

10.11.2016 9:18:17 INFO ExtractData started:

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:17 INFO NeedWow64FsRedirectionDisable:False

10.11.2016 9:18:17 INFO FilesSearchOptions:AllDirectories

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:17 INFO The scope of the "C:\ProgramData\Kaspersky Lab\*\Bases\Cache\" directory

10.11.2016 9:18:17 INFO At path "C:\ProgramData\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.dll.*".

10.11.2016 9:18:17 INFO At path "C:\ProgramData\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.exe.*".

10.11.2016 9:18:17 INFO At path "C:\ProgramData\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.sys.*".

10.11.2016 9:18:17 INFO At path "C:\ProgramData\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.kdl.*".

10.11.2016 9:18:17 INFO At path "C:\ProgramData\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.enc1.*".

10.11.2016 9:18:17 INFO The scope of the "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*\Bases\Cache\" directory

10.11.2016 9:18:17 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.dll.*".

10.11.2016 9:18:17 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.exe.*".

10.11.2016 9:18:17 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.sys.*".

10.11.2016 9:18:17 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.kdl.*".

10.11.2016 9:18:17 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.enc1.*".

10.11.2016 9:18:17 INFO Finished module: Getting information about versions of databases files for Kaspersky Lab products

10.11.2016 9:18:17 INFO Starting module: Getting information about versions of drivers of Kaspersky Lab products

10.11.2016 9:18:17 INFO ExtractData started:

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:17 INFO NeedWow64FsRedirectionDisable:True

10.11.2016 9:18:17 INFO FilesSearchOptions:TopDirectoryOnly

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:17 INFO The scope of the "C:\Windows\system32\drivers" directory

10.11.2016 9:18:17 INFO At path "C:\Windows\system32\drivers" found 0 files for pattern "kl*.sys".

10.11.2016 9:18:17 INFO At path "C:\Windows\system32\drivers" found 0 files for pattern "kneps.sys".

10.11.2016 9:18:17 INFO At path "C:\Windows\system32\drivers" found 0 files for pattern "cm_km*.sys".

10.11.2016 9:18:17 INFO Finished module: Getting information about versions of drivers of Kaspersky Lab products

10.11.2016 9:18:17 INFO Starting module: Getting information about versions of modules of Kaspersky Lab products

10.11.2016 9:18:17 INFO ExtractData started:

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:17 INFO NeedWow64FsRedirectionDisable:False

10.11.2016 9:18:17 INFO FilesSearchOptions:TopDirectoryOnly

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:17 INFO The scope of the "C:\Program Files\Kaspersky Lab\*\*" directory

10.11.2016 9:18:17 INFO At path "C:\Program Files\Kaspersky Lab\*\*" found 0 files for pattern "*.dll".

10.11.2016 9:18:17 INFO At path "C:\Program Files\Kaspersky Lab\*\*" found 0 files for pattern "*.exe".

10.11.2016 9:18:17 INFO At path "C:\Program Files\Kaspersky Lab\*\*" found 0 files for pattern "*.sys".

10.11.2016 9:18:17 INFO At path "C:\Program Files\Kaspersky Lab\*\*" found 0 files for pattern "*.kdl".

10.11.2016 9:18:17 INFO At path "C:\Program Files\Kaspersky Lab\*\*" found 0 files for pattern "*.enc1".

10.11.2016 9:18:17 INFO The scope of the "C:\Program Files\Kaspersky Lab\*\*\*" directory

10.11.2016 9:18:17 INFO At path "C:\Program Files\Kaspersky Lab\*\*\*" found 0 files for pattern "*.dll".

10.11.2016 9:18:17 INFO At path "C:\Program Files\Kaspersky Lab\*\*\*" found 0 files for pattern "*.exe".

10.11.2016 9:18:17 INFO At path "C:\Program Files\Kaspersky Lab\*\*\*" found 0 files for pattern "*.sys".

10.11.2016 9:18:17 INFO At path "C:\Program Files\Kaspersky Lab\*\*\*" found 0 files for pattern "*.kdl".

10.11.2016 9:18:17 INFO At path "C:\Program Files\Kaspersky Lab\*\*\*" found 0 files for pattern "*.enc1".

10.11.2016 9:18:17 INFO The scope of the "C:\Program Files (x86)\Kaspersky Lab\*\*" directory

10.11.2016 9:18:17 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*" found 0 files for pattern "*.dll".

10.11.2016 9:18:17 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*" found 0 files for pattern "*.exe".

10.11.2016 9:18:17 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*" found 0 files for pattern "*.sys".

10.11.2016 9:18:17 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*" found 0 files for pattern "*.kdl".

10.11.2016 9:18:17 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*" found 0 files for pattern "*.enc1".

10.11.2016 9:18:17 INFO The scope of the "C:\Program Files (x86)\Kaspersky Lab\*\*\*" directory

10.11.2016 9:18:17 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*\*" found 0 files for pattern "*.dll".

10.11.2016 9:18:17 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*\*" found 0 files for pattern "*.exe".

10.11.2016 9:18:17 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*\*" found 0 files for pattern "*.sys".

10.11.2016 9:18:17 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*\*" found 0 files for pattern "*.kdl".

10.11.2016 9:18:17 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*\*" found 0 files for pattern "*.enc1".

10.11.2016 9:18:17 INFO Finished module: Getting information about versions of modules of Kaspersky Lab products

10.11.2016 9:18:17 INFO Starting module: Getting information about versions of modules from Program Data of Kaspersky Lab products

10.11.2016 9:18:17 INFO ExtractData started:

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:17 INFO NeedWow64FsRedirectionDisable:False

10.11.2016 9:18:17 INFO FilesSearchOptions:TopDirectoryOnly

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:17 INFO The scope of the "C:\ProgramData\Kaspersky Lab\*" directory

10.11.2016 9:18:17 INFO At path "C:\ProgramData\Kaspersky Lab\*" found 0 files for pattern "*.dll".

10.11.2016 9:18:17 INFO At path "C:\ProgramData\Kaspersky Lab\*" found 0 files for pattern "*.exe".

10.11.2016 9:18:17 INFO At path "C:\ProgramData\Kaspersky Lab\*" found 0 files for pattern "*.sys".

10.11.2016 9:18:17 INFO At path "C:\ProgramData\Kaspersky Lab\*" found 0 files for pattern "*.kdl".

10.11.2016 9:18:17 INFO At path "C:\ProgramData\Kaspersky Lab\*" found 0 files for pattern "*.enc1".

10.11.2016 9:18:17 INFO The scope of the "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*" directory

10.11.2016 9:18:17 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*" found 0 files for pattern "*.dll".

10.11.2016 9:18:17 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*" found 0 files for pattern "*.exe".

10.11.2016 9:18:17 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*" found 0 files for pattern "*.sys".

10.11.2016 9:18:17 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*" found 0 files for pattern "*.kdl".

10.11.2016 9:18:17 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*" found 0 files for pattern "*.enc1".

10.11.2016 9:18:17 INFO Finished module: Getting information about versions of modules from Program Data of Kaspersky Lab products

10.11.2016 9:18:17 INFO Starting module: Collecting console output of "klnagchk.exe"

10.11.2016 9:18:17 INFO Finished module: Collecting console output of "klnagchk.exe"

10.11.2016 9:18:17 INFO Starting module: Collecting the "avp.com" settings

10.11.2016 9:18:17 INFO Start searching for "avp.com" in "C:\Program Files".

10.11.2016 9:18:17 INFO The "C:\Program Files" directory exists.

10.11.2016 9:18:17 INFO Search avp.com pattern: "C:\Program Files\*\avp.com"

10.11.2016 9:18:19 WARNING An exception skipped: System.UnauthorizedAccessException: Отказано в доступе по пути "C:\Program Files\Windows NT\Стандартные".
в System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
в System.IO.FileSystemEnumerableIterator`1.AddSearchableDirsToStack(SearchData localSearchData)
в System.IO.FileSystemEnumerableIterator`1.MoveNext()
в System.Collections.Generic.List`1..ctor(IEnumerable`1 collection)
в System.IO.Directory.GetFiles(String path, String searchPattern, SearchOption searchOption)
в KasperskySystemInspector.Model.CommonUtilites.StandardClassesExtensions.PathUtilites.GetFilesByPattern(String pattern, SearchOption searchOptionrOption)

for files search for path
10.11.2016 9:18:19 INFO Founded 0 avp.com files.

10.11.2016 9:18:19 INFO Start searching for "avp.com" in "C:\Program Files (x86)".

10.11.2016 9:18:19 INFO The "avp.com" file is not found.

10.11.2016 9:18:19 INFO Finished module: Collecting the "avp.com" settings

10.11.2016 9:18:19 INFO Starting module: Collecting the "avp.com" task statistics

10.11.2016 9:18:19 INFO The "avp.com" file is not found.

10.11.2016 9:18:19 INFO Finished module: Collecting the "avp.com" task statistics

10.11.2016 9:18:19 INFO Starting module: Collecting "Kavremover" logs

10.11.2016 9:18:19 INFO Collecting "Kavremover" logs: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:19 INFO List of templates to collect:

SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\kavrem*.log;DisableWow64Redirect:True;AdditionalData:
SearchPattern:C:\Windows\Temp\kavrem*.log;DisableWow64Redirect:True;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\kavrem*.log;DisableWow64Redirect:True;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:20 INFO Collecting "Kavremover" logs: ExtractData(Action setProgressValue): Data extracting finished. Collected 0 files.

10.11.2016 9:18:20 INFO Finished module: Collecting "Kavremover" logs

10.11.2016 9:18:20 INFO Starting module: Collecting tiny dumps

10.11.2016 9:18:20 INFO Collecting tiny dumps: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:20 INFO List of templates to collect:

SearchPattern:C:\ProgramData\Kaspersky Lab\*.tiny.dmp*;DisableWow64Redirect:True;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:20 INFO Collecting tiny dumps: ExtractData(Action setProgressValue): Data extracting finished. Collected 0 files.

10.11.2016 9:18:20 INFO Finished module: Collecting tiny dumps

10.11.2016 9:18:20 INFO Starting module: Collecting logs of patches of Kaspersky Lab products

10.11.2016 9:18:20 INFO Collecting logs of patches of Kaspersky Lab products: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:20 INFO List of templates to collect:

SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\kavpatcher.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\KESpatch*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\ak_patch*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\Temp\kavpatcher.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\Temp\KESpatch*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\Temp\ak_patch*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\kavpatcher.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\KESpatch*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\ak_patch*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\ProgramData\Kaspersky Lab\kavpatcher.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\ProgramData\Kaspersky Lab\KESpatch*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\ProgramData\Kaspersky Lab\ak_patch*;DisableWow64Redirect:False;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:20 INFO Copy file from "C:\Windows\Temp\ak_patch2016-11-09-12-43-05.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Patches Install Logs\ak_patch2016-11-09-12-43-05.log"

10.11.2016 9:18:20 INFO Copy file from "C:\Windows\Temp\ak_patch2016-11-09-12-43-47.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Patches Install Logs\ak_patch2016-11-09-12-43-47.log"

10.11.2016 9:18:20 INFO Copy file from "C:\Windows\Temp\ak_patch_sfx2016-11-09-12-43-46.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Patches Install Logs\ak_patch_sfx2016-11-09-12-43-46.log"

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:20 INFO Collecting logs of patches of Kaspersky Lab products: ExtractData(Action setProgressValue): Data extracting finished. Collected 3 files.

10.11.2016 9:18:20 INFO Finished module: Collecting logs of patches of Kaspersky Lab products

10.11.2016 9:18:20 INFO Starting module: Collecting logs of Kaspersky Lab products

10.11.2016 9:18:20 INFO Collecting logs of Kaspersky Lab products: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:20 INFO List of templates to collect:

SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\kl*.log*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\$kl*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\kav8wsee*.log*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\Temp\kl*.log*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\Temp\$kl*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\Temp\kav8wsee*.log*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\kl*.log*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\$kl*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\kav8wsee*.log*;DisableWow64Redirect:False;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:20 INFO Copy file from "C:\Users\sadmin1\AppData\Local\Temp\kl-install-2016-11-09-13-46-37.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\kl-install-2016-11-09-13-46-37.log"

10.11.2016 9:18:21 INFO Copy file from "C:\Users\sadmin1\AppData\Local\Temp\kl-setup-2016-11-09-13-46-18.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\kl-setup-2016-11-09-13-46-18.log"

10.11.2016 9:18:21 INFO Copy file from "C:\Users\sadmin1\AppData\Local\Temp\kl-update-2016-11-09-13-47-20.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\kl-update-2016-11-09-13-47-20.log"

10.11.2016 9:18:21 INFO Copy file from "C:\Users\sadmin1\AppData\Local\Temp\kl-update-2016-11-09-13-50-07.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\kl-update-2016-11-09-13-50-07.log"

10.11.2016 9:18:21 INFO Copy file from "C:\Users\sadmin1\AppData\Local\Temp\$klpkinst.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klpkinst.log"

10.11.2016 9:18:21 INFO Copy file from "C:\Users\sadmin1\AppData\Local\Temp\$klrbtagt.txt" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klrbtagt.txt"

10.11.2016 9:18:21 INFO Copy file from "C:\Users\sadmin1\AppData\Local\Temp\$klriwrp.txt" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klriwrp.txt"

10.11.2016 9:18:22 INFO Copy file from "C:\Windows\Temp\kl-install-2016-11-09-12-47-40.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\kl-install-2016-11-09-12-47-40.log"

10.11.2016 9:18:22 INFO Copy file from "C:\Windows\Temp\kl-setup-2016-11-09-12-47-36.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\kl-setup-2016-11-09-12-47-36.log"

10.11.2016 9:18:22 INFO Copy file from "C:\Windows\Temp\kl-update-2016-11-09-12-48-43.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\kl-update-2016-11-09-12-48-43.log"

10.11.2016 9:18:22 INFO Copy file from "C:\Windows\Temp\kl-update-2016-11-09-12-53-13.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\kl-update-2016-11-09-12-53-13.log"

10.11.2016 9:18:23 INFO Copy file from "C:\Windows\Temp\$klnagent-2016-11-09-12-42-48.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klnagent-2016-11-09-12-42-48.log"

10.11.2016 9:18:23 INFO Copy file from "C:\Windows\Temp\$klnagent-setup-2016-11-09-12-42-48.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klnagent-setup-2016-11-09-12-42-48.log"

10.11.2016 9:18:23 INFO Copy file from "C:\Windows\Temp\$klnagent-uninstall.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klnagent-uninstall.log"

10.11.2016 9:18:23 INFO Copy file from "C:\Windows\Temp\$klrbtagt.bak" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klrbtagt.bak"

10.11.2016 9:18:23 INFO File duplicate "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klrbtagt.txt" at destination folder "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs"

10.11.2016 9:18:23 INFO File rename to C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klrbtagt d1ftbkrl.lub.txt.

10.11.2016 9:18:23 INFO Copy file from "C:\Windows\Temp\$klrbtagt.txt" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klrbtagt d1ftbkrl.lub.txt"

10.11.2016 9:18:23 INFO Copy file from "C:\Windows\Temp\$klriwrp.bak" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klriwrp.bak"

10.11.2016 9:18:23 INFO File duplicate "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klriwrp.txt" at destination folder "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs"

10.11.2016 9:18:23 INFO File rename to C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klriwrp 04yrl0la.dyx.txt.

10.11.2016 9:18:23 INFO Copy file from "C:\Windows\Temp\$klriwrp.txt" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klriwrp 04yrl0la.dyx.txt"

10.11.2016 9:18:24 INFO Copy file from "C:\Windows\Temp\$klssinstlib.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klssinstlib.log"

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:24 INFO Collecting logs of Kaspersky Lab products: ExtractData(Action setProgressValue): Data extracting finished. Collected 19 files.

10.11.2016 9:18:24 INFO Finished module: Collecting logs of Kaspersky Lab products

10.11.2016 9:18:24 INFO Starting module: Collecting update status files

10.11.2016 9:18:24 INFO Collecting update status files : ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:24 INFO List of templates to collect:

SearchPattern:C:\ProgramData\Kaspersky Lab\*\Data\u0607g.xml;DisableWow64Redirect:True;AdditionalData:
SearchPattern:C:\ProgramData\Kaspersky Lab\*\Data\u1313g.xml;DisableWow64Redirect:True;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:24 INFO Copy file from "C:\ProgramData\Kaspersky Lab\KES10SP1\Data\u1313g.xml" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\u1313g_KES10SP1_RT-35.xml"

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:24 INFO Collecting update status files : ExtractData(Action setProgressValue): Data extracting finished. Collected 1 files.

10.11.2016 9:18:24 INFO Finished module: Collecting update status files

10.11.2016 9:18:24 INFO Starting module: Overview of Kaspersky Security Center dump files

10.11.2016 9:18:24 INFO Overview of Kaspersky Security Center dump files: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:24 INFO List of templates to collect:

SearchPattern:C:\Windows\*.dmp;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\Minidump\*.dmp;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Program Files\Kaspersky Lab\Kaspersky Security Center\~dumps\*.dmp;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Program Files\Kaspersky Lab\Kaspersky Security Center\~dumps\*.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Program Files\Kaspersky Lab\Kaspersky Security Center\~dumps\*.txt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Program Files\Kaspersky Lab\Kaspersky Security Center\~dumps\*.enc1;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Center\~dumps\*.dmp;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Center\~dumps\*.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Center\~dumps\*.txt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Center\~dumps\*.enc1;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\ProgramData\Kaspersky Lab\*.dmp;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\ProgramData\Kaspersky Lab\*.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\ProgramData\Kaspersky Lab\*.txt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\ProgramData\Kaspersky Lab\*.enc1;DisableWow64Redirect:False;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:24 INFO Finished module: Overview of Kaspersky Security Center dump files

10.11.2016 9:18:24 INFO Starting module: Collecting NTFS junction points from Application Data

10.11.2016 9:18:24 INFO Junction points collection is started for the "C:\ProgramData" directory.

10.11.2016 9:18:24 INFO Drive "C:\" has File System "NTFS"

10.11.2016 9:18:24 INFO "C:\ProgramData\Application Data" is Junction Point

10.11.2016 9:18:24 INFO "C:\ProgramData\Application Data" targeted to "C:\ProgramData"

10.11.2016 9:18:24 INFO "C:\ProgramData\Desktop" is Junction Point

10.11.2016 9:18:24 INFO "C:\ProgramData\Desktop" targeted to "C:\Users\Public\Desktop"

10.11.2016 9:18:24 INFO "C:\ProgramData\Documents" is Junction Point

10.11.2016 9:18:24 INFO "C:\ProgramData\Documents" targeted to "C:\Users\Public\Documents"

10.11.2016 9:18:24 INFO "C:\ProgramData\Favorites" is Junction Point

10.11.2016 9:18:24 INFO "C:\ProgramData\Favorites" targeted to "C:\Users\Public\Favorites"

10.11.2016 9:18:24 INFO "C:\ProgramData\Start Menu" is Junction Point

10.11.2016 9:18:24 INFO "C:\ProgramData\Start Menu" targeted to "C:\ProgramData\Microsoft\Windows\Start Menu"

10.11.2016 9:18:24 INFO "C:\ProgramData\Templates" is Junction Point

10.11.2016 9:18:24 INFO "C:\ProgramData\Templates" targeted to "C:\ProgramData\Microsoft\Windows\Templates"

10.11.2016 9:18:24 INFO "C:\ProgramData\Главное меню" is Junction Point

10.11.2016 9:18:24 INFO "C:\ProgramData\Главное меню" targeted to "C:\ProgramData\Microsoft\Windows\Start Menu"

10.11.2016 9:18:24 INFO "C:\ProgramData\Документы" is Junction Point

10.11.2016 9:18:24 INFO "C:\ProgramData\Документы" targeted to "C:\Users\Public\Documents"

10.11.2016 9:18:24 INFO "C:\ProgramData\Избранное" is Junction Point

10.11.2016 9:18:24 INFO "C:\ProgramData\Избранное" targeted to "C:\Users\Public\Favorites"

10.11.2016 9:18:24 INFO "C:\ProgramData\Рабочий стол" is Junction Point

10.11.2016 9:18:24 INFO "C:\ProgramData\Рабочий стол" targeted to "C:\Users\Public\Desktop"

10.11.2016 9:18:24 INFO "C:\ProgramData\Шаблоны" is Junction Point

10.11.2016 9:18:24 INFO "C:\ProgramData\Шаблоны" targeted to "C:\ProgramData\Microsoft\Windows\Templates"

10.11.2016 9:18:24 INFO Junction points list is written to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Junction_ProgramData_RT-35.txt" file.

10.11.2016 9:18:24 INFO Execution of NtfsJunctionListCollectorBase::ExtractData for "C:\ProgramData" directory is complete.

10.11.2016 9:18:24 INFO Finished module: Collecting NTFS junction points from Application Data

10.11.2016 9:18:24 INFO Starting module: Collecting "Kleaner" logs

10.11.2016 9:18:24 INFO Collecting "Kleaner" logs: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:24 INFO List of templates to collect:

SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\kleaner*.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\Temp\kleaner*.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\kleaner*.log;DisableWow64Redirect:False;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:24 INFO Collecting "Kleaner" logs: ExtractData(Action setProgressValue): Data extracting finished. Collected 0 files.

10.11.2016 9:18:24 INFO Finished module: Collecting "Kleaner" logs

10.11.2016 9:18:24 INFO Starting module: Collecting error logs of Microsoft SQL Server

10.11.2016 9:18:24 INFO Collecting error logs of Microsoft SQL Server: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:24 INFO List of templates to collect:

SearchPattern:C:\Program Files\Microsoft SQL Server\*\MSSQL\Log\ERRORLOG*;DisableWow64Redirect:True;AdditionalData:X64
SearchPattern:C:\Program Files (x86)\Microsoft SQL Server\*\MSSQL\Log\ERRORLOG*;DisableWow64Redirect:False;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:24 INFO Collecting error logs of Microsoft SQL Server: ExtractData(Action setProgressValue): Data extracting finished. Collected 0 files.

10.11.2016 9:18:24 INFO Finished module: Collecting error logs of Microsoft SQL Server

10.11.2016 9:18:24 INFO Starting module: Collecting Microsoft .NET Framework setup logs

10.11.2016 9:18:24 INFO Collecting Microsoft .NET Framework setup logs : ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:24 INFO List of templates to collect:

SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\dd_dotNetFx*_*_x86_x64_decompression_log.txt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\dd_SetupUtility.txt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\Microsoft .NET Framework *Setup*.txt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\Microsoft .NET Framework *Setup*.html;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\dd_dotNetFx*_*_x86_x64_decompression_log.txt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\dd_SetupUtility.txt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\Microsoft .NET Framework *Setup*.txt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\Microsoft .NET Framework *Setup*.html;DisableWow64Redirect:False;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:24 INFO Collecting Microsoft .NET Framework setup logs : ExtractData(Action setProgressValue): Data extracting finished. Collected 0 files.

10.11.2016 9:18:24 INFO Finished module: Collecting Microsoft .NET Framework setup logs

10.11.2016 9:18:24 INFO Starting module: Collecting versions of hotfixes of Kaspersky Lab products

10.11.2016 9:18:24 INFO Products info collector start.

10.11.2016 9:18:24 INFO Environment registry keys:

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:24 INFO Execution of ProductInfoCollector is complete.

10.11.2016 9:18:24 INFO Finished module: Collecting versions of hotfixes of Kaspersky Lab products

10.11.2016 9:18:24 INFO Starting module: ControlRegistryPathExtractor

10.11.2016 9:18:24 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKLM_System_CurrentControlSet_Control.reg" file.

10.11.2016 9:18:25 INFO Extraction of registry image is complete.

10.11.2016 9:18:25 INFO Finished module: ControlRegistryPathExtractor

10.11.2016 9:18:25 INFO Starting module: ServicesRegistryPathExtractor

10.11.2016 9:18:25 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKLM_System_CurrentControlSet_Services.reg" file.

10.11.2016 9:18:25 INFO Extraction of registry image is complete.

10.11.2016 9:18:25 INFO Finished module: ServicesRegistryPathExtractor

10.11.2016 9:18:25 INFO Starting module: ProductRegistryPathExtraction

10.11.2016 9:18:25 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\Software\KasperskyLab\" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKLM_Software_KasperskyLab.reg" file.

10.11.2016 9:18:25 INFO Extraction of registry image is complete.

10.11.2016 9:18:25 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\Software\Wow6432Node\KasperskyLab\" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKLM_Software_Wow6432Node_KasperskyLab.reg" file.

10.11.2016 9:18:25 INFO Extraction of registry image is complete.

10.11.2016 9:18:25 INFO Extracting registry image from "HKEY_CURRENT_USER\Software\KasperskyLab\" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKCU_Software_KasperskyLab.reg" file.

10.11.2016 9:18:25 INFO Extraction of registry image is complete.

10.11.2016 9:18:25 INFO Extracting registry image from "HKEY_CURRENT_USER\Software\Wow6432Node\KasperskyLab\" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKCU_Software_Wow6432Node_KasperskyLab.reg" file.

10.11.2016 9:18:25 INFO Extraction of registry image is complete.

10.11.2016 9:18:25 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\Software\Kaspersky Lab\" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKLM_Software_Kaspersky_Lab.reg" file.

10.11.2016 9:18:25 INFO Extraction of registry image is complete.

10.11.2016 9:18:25 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\Software\Wow6432Node\Kaspersky Lab\" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKLM_Software_Wow6432Node_Kaspersky_Lab.reg" file.

10.11.2016 9:18:25 INFO Extraction of registry image is complete.

10.11.2016 9:18:25 INFO Extracting registry image from "HKEY_CURRENT_USER\Software\Kaspersky Lab\" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKCU_Software_Kaspersky_Lab.reg" file.

10.11.2016 9:18:25 INFO Extraction of registry image is complete.

10.11.2016 9:18:25 INFO Extracting registry image from "HKEY_CURRENT_USER\Software\Wow6432Node\Kaspersky Lab\" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKCU_Software_Wow6432Node_Kaspersky_Lab.reg" file.

10.11.2016 9:18:25 INFO Extraction of registry image is complete.

10.11.2016 9:18:25 INFO Finished module: ProductRegistryPathExtraction

10.11.2016 9:18:25 INFO Starting module: Getting information about versions of plug-ins of Kaspersky Security Center

10.11.2016 9:18:25 INFO Security Center plugins info extracting started...

10.11.2016 9:18:25 INFO Getting information about Kaspersky Security Center plug-ins is complete.

10.11.2016 9:18:25 INFO Finished module: Getting information about versions of plug-ins of Kaspersky Security Center

10.11.2016 9:18:25 INFO Starting module: Collecting setup API logs

10.11.2016 9:18:25 INFO Collecting setup API logs: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:25 INFO List of templates to collect:

SearchPattern:C:\Windows\inf\setupapi.*.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\setup*.log;DisableWow64Redirect:False;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:25 INFO Copy file from "C:\Windows\inf\setupapi.app.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Setupapi\setupapi.app.log"

10.11.2016 9:18:25 INFO Copy file from "C:\Windows\inf\setupapi.dev.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Setupapi\setupapi.dev.log"

10.11.2016 9:18:25 INFO Copy file from "C:\Windows\inf\setupapi.offline.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Setupapi\setupapi.offline.log"

10.11.2016 9:18:25 INFO Copy file from "C:\Windows\setupact.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Setupapi\setupact.log"

10.11.2016 9:18:25 INFO Copy file from "C:\Windows\setuperr.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Setupapi\setuperr.log"

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:25 INFO Collecting setup API logs: ExtractData(Action setProgressValue): Data extracting finished. Collected 5 files.

10.11.2016 9:18:25 INFO Finished module: Collecting setup API logs

10.11.2016 9:18:25 INFO Starting module: MSIESearchScopes

10.11.2016 9:18:25 INFO Extracting registry image from "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Microsoft Internet Explorer\Search Scopes\SearchScopes.reg" file.

10.11.2016 9:18:25 INFO Extraction of registry image is complete.

10.11.2016 9:18:25 INFO Finished module: MSIESearchScopes

10.11.2016 9:18:25 INFO Starting module: IEFeaturesExtractor

10.11.2016 9:18:25 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfoDllCache\HKLM_IE_OBTAINED.reg" file.

10.11.2016 9:18:25 INFO Extraction of registry image is complete.

10.11.2016 9:18:26 INFO Extracting registry image from "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfoDllCache\HLCU_IE_OBTAINED.reg" file.

10.11.2016 9:18:26 INFO Extraction of registry image is complete.

10.11.2016 9:18:26 INFO Finished module: IEFeaturesExtractor

10.11.2016 9:18:26 INFO Starting module: MSIERegistryPathExtractor

10.11.2016 9:18:26 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Microsoft Internet Explorer\Extensions (registry images)\HKLM_IE_Toolbar.reg" file.

10.11.2016 9:18:26 INFO Extraction of registry image is complete.

10.11.2016 9:18:26 INFO Extracting registry image from "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Microsoft Internet Explorer\Extensions (registry images)\HKCU_IE_Toolbar.reg" file.

10.11.2016 9:18:26 INFO Extraction of registry image is complete.

10.11.2016 9:18:26 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Explorer Bars" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Microsoft Internet Explorer\Extensions (registry images)\HKLM_IE_Explorer_Bars.reg" file.

10.11.2016 9:18:26 INFO Extraction of registry image is complete.

10.11.2016 9:18:26 INFO Extracting registry image from "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Microsoft Internet Explorer\Extensions (registry images)\HKCU_IE_Explorer_Bars.reg" file.

10.11.2016 9:18:26 INFO Extraction of registry image is complete.

10.11.2016 9:18:26 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\MenuExt" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Microsoft Internet Explorer\Extensions (registry images)\HKLM_IE_MenuExt.reg" file.

10.11.2016 9:18:26 INFO Extraction of registry image is complete.

10.11.2016 9:18:26 INFO Extracting registry image from "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Microsoft Internet Explorer\Extensions (registry images)\HKCU_IE_MenuExt.reg" file.

10.11.2016 9:18:26 INFO Extraction of registry image is complete.

10.11.2016 9:18:26 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Microsoft Internet Explorer\Extensions (registry images)\HKLM_IE_Extensions.reg" file.

10.11.2016 9:18:26 INFO Extraction of registry image is complete.

10.11.2016 9:18:26 INFO Finished module: MSIERegistryPathExtractor

10.11.2016 9:18:26 INFO Starting module: FirefoxFeatureExtractor

10.11.2016 9:18:26 INFO Finished module: FirefoxFeatureExtractor

10.11.2016 9:18:26 INFO Starting module: Collecting Mozilla Firefox files

10.11.2016 9:18:26 INFO Collecting Mozilla Firefox files: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:26 INFO List of templates to collect:

SearchPattern:C:\Users\sadmin1\AppData\Roaming\Mozilla\Firefox\Profiles\*\prefs.js;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Roaming\Mozilla\Firefox\Profiles\*\user.js;DisableWow64Redirect:False;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:18:26 INFO Collecting Mozilla Firefox files: ExtractData(Action setProgressValue): Data extracting finished. Collected 0 files.

10.11.2016 9:18:26 INFO Finished module: Collecting Mozilla Firefox files

10.11.2016 9:18:26 INFO Starting module: Detecting of incompatible software

10.11.2016 9:18:33 INFO Finished module: Detecting of incompatible software

10.11.2016 9:18:33 INFO Data extracting finished.

10.11.2016 9:18:33 INFO Creating archived report started on path: W:\IT\report\GSI6_RT-35_sadmin1_11_10_2016_09_15_23.zip

10.11.2016 9:18:33 INFO The old version of the Get System Information managed wrapper is started.

10.11.2016 9:18:33 INFO The old version of Get System Information PE is extracted at path: "C:\Users\sadmin1\AppData\Local\Temp\s3ak\GetSystemInfo.exe"

10.11.2016 9:18:33 INFO The old version of Get System Information PE is started.

10.11.2016 9:18:36 INFO The old version of Get System Information PE is finished.

10.11.2016 9:18:36 INFO UnSubscribeModuleProgressListener start...

10.11.2016 9:18:36 INFO UnSubscribeModuleProgressListener completed.

10.11.2016 9:18:36 INFO Raise OnDataExtractionCompleted()

10.11.2016 9:18:36 INFO Raised event OnDataExtractionCompleted()

10.11.2016 9:18:36 INFO Exit from critical area...

10.11.2016 9:22:44 INFO Enter to critical area...

10.11.2016 9:22:44 INFO Data extracting started.

10.11.2016 9:22:44 INFO Starting module: Getting System Information

10.11.2016 9:22:44 INFO Old Get System Info arguments: "/EULA=1 /qn /l=3 /path="C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo""

10.11.2016 9:22:44 INFO The old version of the Get System Information managed wrapper is started.

10.11.2016 9:22:44 INFO The old version of Get System Information PE is extracted at path: "C:\Users\sadmin1\AppData\Local\Temp\s3ak\GetSystemInfo.exe"

10.11.2016 9:22:44 INFO The old version of Get System Information PE is started.

10.11.2016 9:24:15 INFO The old version of Get System Information PE is finished.

10.11.2016 9:24:15 INFO Finished module: Getting System Information

10.11.2016 9:24:15 INFO Starting module: Executing AVZ

10.11.2016 9:24:15 INFO The old version of the Get System Information managed wrapper is started.

10.11.2016 9:24:15 INFO The old version of Get System Information PE is extracted at path: "C:\Users\sadmin1\AppData\Local\Temp\s3ak\GetSystemInfo.exe"

10.11.2016 9:24:15 INFO The old version of Get System Information PE is started.

10.11.2016 9:24:15 INFO The old version of Get System Information PE is finished.

10.11.2016 9:24:15 INFO AVZ extracted at path C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfoDllCache\avz

10.11.2016 9:25:15 INFO File "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfoDllCache\avz\avz.exe" executed with arguments "Script="C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfoDllCache\avz\asa.avz" HiddenMode="3" SpoolLog="C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\avz.log" TempFolder="C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\AvzTemp" ".

10.11.2016 9:25:15 INFO Finished module: Executing AVZ

10.11.2016 9:25:15 INFO Starting module: Overview of Kaspersky Lab files in Application Data

10.11.2016 9:25:15 INFO Overview of Kaspersky Lab files in Application Data: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:15 INFO List of templates to collect:

SearchPattern:C:\ProgramData\Kaspersky Lab\*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*;DisableWow64Redirect:False;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:15 INFO Finished module: Overview of Kaspersky Lab files in Application Data

10.11.2016 9:25:15 INFO Starting module: Getting information about versions of databases files for Kaspersky Lab products

10.11.2016 9:25:15 INFO ExtractData started:

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:15 INFO NeedWow64FsRedirectionDisable:False

10.11.2016 9:25:15 INFO FilesSearchOptions:AllDirectories

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:15 INFO The scope of the "C:\ProgramData\Kaspersky Lab\*\Bases\Cache\" directory

10.11.2016 9:25:15 INFO At path "C:\ProgramData\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.dll.*".

10.11.2016 9:25:15 INFO At path "C:\ProgramData\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.exe.*".

10.11.2016 9:25:15 INFO At path "C:\ProgramData\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.sys.*".

10.11.2016 9:25:15 INFO At path "C:\ProgramData\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.kdl.*".

10.11.2016 9:25:15 INFO At path "C:\ProgramData\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.enc1.*".

10.11.2016 9:25:15 INFO The scope of the "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*\Bases\Cache\" directory

10.11.2016 9:25:15 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.dll.*".

10.11.2016 9:25:15 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.exe.*".

10.11.2016 9:25:15 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.sys.*".

10.11.2016 9:25:15 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.kdl.*".

10.11.2016 9:25:15 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*\Bases\Cache\" found 0 files for pattern "*.enc1.*".

10.11.2016 9:25:15 INFO Finished module: Getting information about versions of databases files for Kaspersky Lab products

10.11.2016 9:25:15 INFO Starting module: Getting information about versions of drivers of Kaspersky Lab products

10.11.2016 9:25:15 INFO ExtractData started:

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:15 INFO NeedWow64FsRedirectionDisable:True

10.11.2016 9:25:15 INFO FilesSearchOptions:TopDirectoryOnly

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:15 INFO The scope of the "C:\Windows\system32\drivers" directory

10.11.2016 9:25:15 INFO At path "C:\Windows\system32\drivers" found 0 files for pattern "kl*.sys".

10.11.2016 9:25:15 INFO At path "C:\Windows\system32\drivers" found 0 files for pattern "kneps.sys".

10.11.2016 9:25:15 INFO At path "C:\Windows\system32\drivers" found 0 files for pattern "cm_km*.sys".

10.11.2016 9:25:15 INFO Finished module: Getting information about versions of drivers of Kaspersky Lab products

10.11.2016 9:25:15 INFO Starting module: Getting information about versions of modules of Kaspersky Lab products

10.11.2016 9:25:15 INFO ExtractData started:

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:15 INFO NeedWow64FsRedirectionDisable:False

10.11.2016 9:25:15 INFO FilesSearchOptions:TopDirectoryOnly

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:15 INFO The scope of the "C:\Program Files\Kaspersky Lab\*\*" directory

10.11.2016 9:25:15 INFO At path "C:\Program Files\Kaspersky Lab\*\*" found 0 files for pattern "*.dll".

10.11.2016 9:25:15 INFO At path "C:\Program Files\Kaspersky Lab\*\*" found 0 files for pattern "*.exe".

10.11.2016 9:25:15 INFO At path "C:\Program Files\Kaspersky Lab\*\*" found 0 files for pattern "*.sys".

10.11.2016 9:25:15 INFO At path "C:\Program Files\Kaspersky Lab\*\*" found 0 files for pattern "*.kdl".

10.11.2016 9:25:15 INFO At path "C:\Program Files\Kaspersky Lab\*\*" found 0 files for pattern "*.enc1".

10.11.2016 9:25:15 INFO The scope of the "C:\Program Files\Kaspersky Lab\*\*\*" directory

10.11.2016 9:25:15 INFO At path "C:\Program Files\Kaspersky Lab\*\*\*" found 0 files for pattern "*.dll".

10.11.2016 9:25:15 INFO At path "C:\Program Files\Kaspersky Lab\*\*\*" found 0 files for pattern "*.exe".

10.11.2016 9:25:15 INFO At path "C:\Program Files\Kaspersky Lab\*\*\*" found 0 files for pattern "*.sys".

10.11.2016 9:25:15 INFO At path "C:\Program Files\Kaspersky Lab\*\*\*" found 0 files for pattern "*.kdl".

10.11.2016 9:25:15 INFO At path "C:\Program Files\Kaspersky Lab\*\*\*" found 0 files for pattern "*.enc1".

10.11.2016 9:25:15 INFO The scope of the "C:\Program Files (x86)\Kaspersky Lab\*\*" directory

10.11.2016 9:25:15 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*" found 0 files for pattern "*.dll".

10.11.2016 9:25:15 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*" found 0 files for pattern "*.exe".

10.11.2016 9:25:15 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*" found 0 files for pattern "*.sys".

10.11.2016 9:25:15 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*" found 0 files for pattern "*.kdl".

10.11.2016 9:25:15 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*" found 0 files for pattern "*.enc1".

10.11.2016 9:25:15 INFO The scope of the "C:\Program Files (x86)\Kaspersky Lab\*\*\*" directory

10.11.2016 9:25:15 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*\*" found 0 files for pattern "*.dll".

10.11.2016 9:25:15 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*\*" found 0 files for pattern "*.exe".

10.11.2016 9:25:15 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*\*" found 0 files for pattern "*.sys".

10.11.2016 9:25:15 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*\*" found 0 files for pattern "*.kdl".

10.11.2016 9:25:15 INFO At path "C:\Program Files (x86)\Kaspersky Lab\*\*\*" found 0 files for pattern "*.enc1".

10.11.2016 9:25:15 INFO Finished module: Getting information about versions of modules of Kaspersky Lab products

10.11.2016 9:25:15 INFO Starting module: Getting information about versions of modules from Program Data of Kaspersky Lab products

10.11.2016 9:25:15 INFO ExtractData started:

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:15 INFO NeedWow64FsRedirectionDisable:False

10.11.2016 9:25:15 INFO FilesSearchOptions:TopDirectoryOnly

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:15 INFO The scope of the "C:\ProgramData\Kaspersky Lab\*" directory

10.11.2016 9:25:15 INFO At path "C:\ProgramData\Kaspersky Lab\*" found 0 files for pattern "*.dll".

10.11.2016 9:25:15 INFO At path "C:\ProgramData\Kaspersky Lab\*" found 0 files for pattern "*.exe".

10.11.2016 9:25:15 INFO At path "C:\ProgramData\Kaspersky Lab\*" found 0 files for pattern "*.sys".

10.11.2016 9:25:15 INFO At path "C:\ProgramData\Kaspersky Lab\*" found 0 files for pattern "*.kdl".

10.11.2016 9:25:15 INFO At path "C:\ProgramData\Kaspersky Lab\*" found 0 files for pattern "*.enc1".

10.11.2016 9:25:15 INFO The scope of the "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*" directory

10.11.2016 9:25:15 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*" found 0 files for pattern "*.dll".

10.11.2016 9:25:15 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*" found 0 files for pattern "*.exe".

10.11.2016 9:25:15 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*" found 0 files for pattern "*.sys".

10.11.2016 9:25:15 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*" found 0 files for pattern "*.kdl".

10.11.2016 9:25:15 INFO At path "C:\Users\sadmin1\AppData\Roaming\Kaspersky Lab\*" found 0 files for pattern "*.enc1".

10.11.2016 9:25:15 INFO Finished module: Getting information about versions of modules from Program Data of Kaspersky Lab products

10.11.2016 9:25:15 INFO Starting module: Collecting console output of "klnagchk.exe"

10.11.2016 9:25:15 INFO Finished module: Collecting console output of "klnagchk.exe"

10.11.2016 9:25:15 INFO Starting module: Collecting the "avp.com" settings

10.11.2016 9:25:15 INFO The "avp.com" file is not found.

10.11.2016 9:25:15 INFO Finished module: Collecting the "avp.com" settings

10.11.2016 9:25:15 INFO Starting module: Collecting the "avp.com" task statistics

10.11.2016 9:25:15 INFO The "avp.com" file is not found.

10.11.2016 9:25:15 INFO Finished module: Collecting the "avp.com" task statistics

10.11.2016 9:25:15 INFO Starting module: Collecting "Kavremover" logs

10.11.2016 9:25:15 INFO Collecting "Kavremover" logs: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:15 INFO List of templates to collect:

SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\kavrem*.log;DisableWow64Redirect:True;AdditionalData:
SearchPattern:C:\Windows\Temp\kavrem*.log;DisableWow64Redirect:True;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\kavrem*.log;DisableWow64Redirect:True;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:15 INFO Collecting "Kavremover" logs: ExtractData(Action setProgressValue): Data extracting finished. Collected 0 files.

10.11.2016 9:25:15 INFO Finished module: Collecting "Kavremover" logs

10.11.2016 9:25:15 INFO Starting module: Collecting tiny dumps

10.11.2016 9:25:15 INFO Collecting tiny dumps: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:15 INFO List of templates to collect:

SearchPattern:C:\ProgramData\Kaspersky Lab\*.tiny.dmp*;DisableWow64Redirect:True;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:15 INFO Collecting tiny dumps: ExtractData(Action setProgressValue): Data extracting finished. Collected 0 files.

10.11.2016 9:25:15 INFO Finished module: Collecting tiny dumps

10.11.2016 9:25:15 INFO Starting module: Collecting logs of patches of Kaspersky Lab products

10.11.2016 9:25:15 INFO Collecting logs of patches of Kaspersky Lab products: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:15 INFO List of templates to collect:

SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\kavpatcher.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\KESpatch*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\ak_patch*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\Temp\kavpatcher.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\Temp\KESpatch*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\Temp\ak_patch*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\kavpatcher.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\KESpatch*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\ak_patch*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\ProgramData\Kaspersky Lab\kavpatcher.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\ProgramData\Kaspersky Lab\KESpatch*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\ProgramData\Kaspersky Lab\ak_patch*;DisableWow64Redirect:False;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:15 INFO Copy file from "C:\Windows\Temp\ak_patch2016-11-09-12-43-05.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Patches Install Logs\ak_patch2016-11-09-12-43-05.log"

10.11.2016 9:25:15 INFO Copy file from "C:\Windows\Temp\ak_patch2016-11-09-12-43-47.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Patches Install Logs\ak_patch2016-11-09-12-43-47.log"

10.11.2016 9:25:15 INFO Copy file from "C:\Windows\Temp\ak_patch_sfx2016-11-09-12-43-46.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Patches Install Logs\ak_patch_sfx2016-11-09-12-43-46.log"

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:15 INFO Collecting logs of patches of Kaspersky Lab products: ExtractData(Action setProgressValue): Data extracting finished. Collected 3 files.

10.11.2016 9:25:15 INFO Finished module: Collecting logs of patches of Kaspersky Lab products

10.11.2016 9:25:15 INFO Starting module: Collecting logs of Kaspersky Lab products

10.11.2016 9:25:15 INFO Collecting logs of Kaspersky Lab products: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:15 INFO List of templates to collect:

SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\kl*.log*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\$kl*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\kav8wsee*.log*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\Temp\kl*.log*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\Temp\$kl*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\Temp\kav8wsee*.log*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\kl*.log*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\$kl*;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\kav8wsee*.log*;DisableWow64Redirect:False;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:16 INFO Copy file from "C:\Users\sadmin1\AppData\Local\Temp\kl-install-2016-11-09-13-46-37.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\kl-install-2016-11-09-13-46-37.log"

10.11.2016 9:25:16 INFO Copy file from "C:\Users\sadmin1\AppData\Local\Temp\kl-setup-2016-11-09-13-46-18.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\kl-setup-2016-11-09-13-46-18.log"

10.11.2016 9:25:16 INFO Copy file from "C:\Users\sadmin1\AppData\Local\Temp\kl-update-2016-11-09-13-47-20.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\kl-update-2016-11-09-13-47-20.log"

10.11.2016 9:25:16 INFO Copy file from "C:\Users\sadmin1\AppData\Local\Temp\kl-update-2016-11-09-13-50-07.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\kl-update-2016-11-09-13-50-07.log"

10.11.2016 9:25:16 INFO Copy file from "C:\Users\sadmin1\AppData\Local\Temp\$klpkinst.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klpkinst.log"

10.11.2016 9:25:16 INFO Copy file from "C:\Users\sadmin1\AppData\Local\Temp\$klrbtagt.txt" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klrbtagt.txt"

10.11.2016 9:25:16 INFO Copy file from "C:\Users\sadmin1\AppData\Local\Temp\$klriwrp.txt" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klriwrp.txt"

10.11.2016 9:25:17 INFO Copy file from "C:\Windows\Temp\kl-install-2016-11-09-12-47-40.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\kl-install-2016-11-09-12-47-40.log"

10.11.2016 9:25:17 INFO Copy file from "C:\Windows\Temp\kl-setup-2016-11-09-12-47-36.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\kl-setup-2016-11-09-12-47-36.log"

10.11.2016 9:25:17 INFO Copy file from "C:\Windows\Temp\kl-update-2016-11-09-12-48-43.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\kl-update-2016-11-09-12-48-43.log"

10.11.2016 9:25:18 INFO Copy file from "C:\Windows\Temp\kl-update-2016-11-09-12-53-13.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\kl-update-2016-11-09-12-53-13.log"

10.11.2016 9:25:18 INFO Copy file from "C:\Windows\Temp\$klnagent-2016-11-09-12-42-48.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klnagent-2016-11-09-12-42-48.log"

10.11.2016 9:25:18 INFO Copy file from "C:\Windows\Temp\$klnagent-setup-2016-11-09-12-42-48.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klnagent-setup-2016-11-09-12-42-48.log"

10.11.2016 9:25:18 INFO Copy file from "C:\Windows\Temp\$klnagent-uninstall.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klnagent-uninstall.log"

10.11.2016 9:25:18 INFO Copy file from "C:\Windows\Temp\$klrbtagt.bak" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klrbtagt.bak"

10.11.2016 9:25:18 INFO File duplicate "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klrbtagt.txt" at destination folder "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs"

10.11.2016 9:25:18 INFO File rename to C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klrbtagt jc3lmrm5.sph.txt.

10.11.2016 9:25:18 INFO Copy file from "C:\Windows\Temp\$klrbtagt.txt" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klrbtagt jc3lmrm5.sph.txt"

10.11.2016 9:25:18 INFO Copy file from "C:\Windows\Temp\$klriwrp.bak" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klriwrp.bak"

10.11.2016 9:25:18 INFO File duplicate "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klriwrp.txt" at destination folder "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs"

10.11.2016 9:25:18 INFO File rename to C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klriwrp mkwysgae.xh2.txt.

10.11.2016 9:25:18 INFO Copy file from "C:\Windows\Temp\$klriwrp.txt" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klriwrp mkwysgae.xh2.txt"

10.11.2016 9:25:19 INFO Copy file from "C:\Windows\Temp\$klssinstlib.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\install logs\$klssinstlib.log"

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:19 INFO Collecting logs of Kaspersky Lab products: ExtractData(Action setProgressValue): Data extracting finished. Collected 19 files.

10.11.2016 9:25:19 INFO Finished module: Collecting logs of Kaspersky Lab products

10.11.2016 9:25:19 INFO Starting module: Collecting update status files

10.11.2016 9:25:19 INFO Collecting update status files : ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:19 INFO List of templates to collect:

SearchPattern:C:\ProgramData\Kaspersky Lab\*\Data\u0607g.xml;DisableWow64Redirect:True;AdditionalData:
SearchPattern:C:\ProgramData\Kaspersky Lab\*\Data\u1313g.xml;DisableWow64Redirect:True;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:19 INFO Copy file from "C:\ProgramData\Kaspersky Lab\KES10SP1\Data\u1313g.xml" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\u1313g_KES10SP1_RT-35.xml"

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:19 INFO Collecting update status files : ExtractData(Action setProgressValue): Data extracting finished. Collected 1 files.

10.11.2016 9:25:19 INFO Finished module: Collecting update status files

10.11.2016 9:25:19 INFO Starting module: Overview of Kaspersky Security Center dump files

10.11.2016 9:25:19 INFO Overview of Kaspersky Security Center dump files: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:19 INFO List of templates to collect:

SearchPattern:C:\Windows\*.dmp;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\Minidump\*.dmp;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Program Files\Kaspersky Lab\Kaspersky Security Center\~dumps\*.dmp;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Program Files\Kaspersky Lab\Kaspersky Security Center\~dumps\*.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Program Files\Kaspersky Lab\Kaspersky Security Center\~dumps\*.txt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Program Files\Kaspersky Lab\Kaspersky Security Center\~dumps\*.enc1;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Center\~dumps\*.dmp;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Center\~dumps\*.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Center\~dumps\*.txt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Center\~dumps\*.enc1;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\ProgramData\Kaspersky Lab\*.dmp;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\ProgramData\Kaspersky Lab\*.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\ProgramData\Kaspersky Lab\*.txt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\ProgramData\Kaspersky Lab\*.enc1;DisableWow64Redirect:False;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:19 INFO Finished module: Overview of Kaspersky Security Center dump files

10.11.2016 9:25:19 INFO Starting module: Collecting NTFS junction points from Application Data

10.11.2016 9:25:19 INFO Junction points collection is started for the "C:\ProgramData" directory.

10.11.2016 9:25:19 INFO Drive "C:\" has File System "NTFS"

10.11.2016 9:25:19 INFO "C:\ProgramData\Application Data" is Junction Point

10.11.2016 9:25:19 INFO "C:\ProgramData\Application Data" targeted to "C:\ProgramData"

10.11.2016 9:25:19 INFO "C:\ProgramData\Desktop" is Junction Point

10.11.2016 9:25:19 INFO "C:\ProgramData\Desktop" targeted to "C:\Users\Public\Desktop"

10.11.2016 9:25:19 INFO "C:\ProgramData\Documents" is Junction Point

10.11.2016 9:25:19 INFO "C:\ProgramData\Documents" targeted to "C:\Users\Public\Documents"

10.11.2016 9:25:19 INFO "C:\ProgramData\Favorites" is Junction Point

10.11.2016 9:25:19 INFO "C:\ProgramData\Favorites" targeted to "C:\Users\Public\Favorites"

10.11.2016 9:25:19 INFO "C:\ProgramData\Start Menu" is Junction Point

10.11.2016 9:25:19 INFO "C:\ProgramData\Start Menu" targeted to "C:\ProgramData\Microsoft\Windows\Start Menu"

10.11.2016 9:25:19 INFO "C:\ProgramData\Templates" is Junction Point

10.11.2016 9:25:19 INFO "C:\ProgramData\Templates" targeted to "C:\ProgramData\Microsoft\Windows\Templates"

10.11.2016 9:25:19 INFO "C:\ProgramData\Главное меню" is Junction Point

10.11.2016 9:25:19 INFO "C:\ProgramData\Главное меню" targeted to "C:\ProgramData\Microsoft\Windows\Start Menu"

10.11.2016 9:25:19 INFO "C:\ProgramData\Документы" is Junction Point

10.11.2016 9:25:19 INFO "C:\ProgramData\Документы" targeted to "C:\Users\Public\Documents"

10.11.2016 9:25:19 INFO "C:\ProgramData\Избранное" is Junction Point

10.11.2016 9:25:19 INFO "C:\ProgramData\Избранное" targeted to "C:\Users\Public\Favorites"

10.11.2016 9:25:19 INFO "C:\ProgramData\Рабочий стол" is Junction Point

10.11.2016 9:25:19 INFO "C:\ProgramData\Рабочий стол" targeted to "C:\Users\Public\Desktop"

10.11.2016 9:25:19 INFO "C:\ProgramData\Шаблоны" is Junction Point

10.11.2016 9:25:19 INFO "C:\ProgramData\Шаблоны" targeted to "C:\ProgramData\Microsoft\Windows\Templates"

10.11.2016 9:25:19 INFO Junction points list is written to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Junction_ProgramData_RT-35.txt" file.

10.11.2016 9:25:19 INFO Execution of NtfsJunctionListCollectorBase::ExtractData for "C:\ProgramData" directory is complete.

10.11.2016 9:25:19 INFO Finished module: Collecting NTFS junction points from Application Data

10.11.2016 9:25:19 INFO Starting module: Collecting "Kleaner" logs

10.11.2016 9:25:19 INFO Collecting "Kleaner" logs: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:19 INFO List of templates to collect:

SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\kleaner*.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\Temp\kleaner*.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\kleaner*.log;DisableWow64Redirect:False;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:19 INFO Collecting "Kleaner" logs: ExtractData(Action setProgressValue): Data extracting finished. Collected 0 files.

10.11.2016 9:25:19 INFO Finished module: Collecting "Kleaner" logs

10.11.2016 9:25:19 INFO Starting module: Collecting error logs of Microsoft SQL Server

10.11.2016 9:25:19 INFO Collecting error logs of Microsoft SQL Server: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:19 INFO List of templates to collect:

SearchPattern:C:\Program Files\Microsoft SQL Server\*\MSSQL\Log\ERRORLOG*;DisableWow64Redirect:True;AdditionalData:X64
SearchPattern:C:\Program Files (x86)\Microsoft SQL Server\*\MSSQL\Log\ERRORLOG*;DisableWow64Redirect:False;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:19 INFO Collecting error logs of Microsoft SQL Server: ExtractData(Action setProgressValue): Data extracting finished. Collected 0 files.

10.11.2016 9:25:19 INFO Finished module: Collecting error logs of Microsoft SQL Server

10.11.2016 9:25:19 INFO Starting module: Collecting Microsoft .NET Framework setup logs

10.11.2016 9:25:19 INFO Collecting Microsoft .NET Framework setup logs : ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:19 INFO List of templates to collect:

SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\dd_dotNetFx*_*_x86_x64_decompression_log.txt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\dd_SetupUtility.txt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\Microsoft .NET Framework *Setup*.txt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Local\Temp\Microsoft .NET Framework *Setup*.html;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\dd_dotNetFx*_*_x86_x64_decompression_log.txt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\dd_SetupUtility.txt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\Microsoft .NET Framework *Setup*.txt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Temp\Microsoft .NET Framework *Setup*.html;DisableWow64Redirect:False;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:19 INFO Collecting Microsoft .NET Framework setup logs : ExtractData(Action setProgressValue): Data extracting finished. Collected 0 files.

10.11.2016 9:25:19 INFO Finished module: Collecting Microsoft .NET Framework setup logs

10.11.2016 9:25:19 INFO Starting module: Collecting versions of hotfixes of Kaspersky Lab products

10.11.2016 9:25:19 INFO Products info collector start.

10.11.2016 9:25:19 INFO Environment registry keys:

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:19 INFO Execution of ProductInfoCollector is complete.

10.11.2016 9:25:19 INFO Finished module: Collecting versions of hotfixes of Kaspersky Lab products

10.11.2016 9:25:19 INFO Starting module: ControlRegistryPathExtractor

10.11.2016 9:25:19 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKLM_System_CurrentControlSet_Control.reg" file.

10.11.2016 9:25:19 INFO Extraction of registry image is complete.

10.11.2016 9:25:19 INFO Finished module: ControlRegistryPathExtractor

10.11.2016 9:25:19 INFO Starting module: ServicesRegistryPathExtractor

10.11.2016 9:25:19 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKLM_System_CurrentControlSet_Services.reg" file.

10.11.2016 9:25:19 INFO Extraction of registry image is complete.

10.11.2016 9:25:19 INFO Finished module: ServicesRegistryPathExtractor

10.11.2016 9:25:19 INFO Starting module: ProductRegistryPathExtraction

10.11.2016 9:25:19 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\Software\KasperskyLab\" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKLM_Software_KasperskyLab.reg" file.

10.11.2016 9:25:19 INFO Extraction of registry image is complete.

10.11.2016 9:25:19 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\Software\Wow6432Node\KasperskyLab\" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKLM_Software_Wow6432Node_KasperskyLab.reg" file.

10.11.2016 9:25:19 INFO Extraction of registry image is complete.

10.11.2016 9:25:19 INFO Extracting registry image from "HKEY_CURRENT_USER\Software\KasperskyLab\" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKCU_Software_KasperskyLab.reg" file.

10.11.2016 9:25:19 INFO Extraction of registry image is complete.

10.11.2016 9:25:19 INFO Extracting registry image from "HKEY_CURRENT_USER\Software\Wow6432Node\KasperskyLab\" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKCU_Software_Wow6432Node_KasperskyLab.reg" file.

10.11.2016 9:25:19 INFO Extraction of registry image is complete.

10.11.2016 9:25:19 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\Software\Kaspersky Lab\" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKLM_Software_Kaspersky_Lab.reg" file.

10.11.2016 9:25:19 INFO Extraction of registry image is complete.

10.11.2016 9:25:19 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\Software\Wow6432Node\Kaspersky Lab\" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKLM_Software_Wow6432Node_Kaspersky_Lab.reg" file.

10.11.2016 9:25:19 INFO Extraction of registry image is complete.

10.11.2016 9:25:19 INFO Extracting registry image from "HKEY_CURRENT_USER\Software\Kaspersky Lab\" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKCU_Software_Kaspersky_Lab.reg" file.

10.11.2016 9:25:19 INFO Extraction of registry image is complete.

10.11.2016 9:25:19 INFO Extracting registry image from "HKEY_CURRENT_USER\Software\Wow6432Node\Kaspersky Lab\" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Registry\HKCU_Software_Wow6432Node_Kaspersky_Lab.reg" file.

10.11.2016 9:25:19 INFO Extraction of registry image is complete.

10.11.2016 9:25:19 INFO Finished module: ProductRegistryPathExtraction

10.11.2016 9:25:19 INFO Starting module: Getting information about versions of plug-ins of Kaspersky Security Center

10.11.2016 9:25:19 INFO Security Center plugins info extracting started...

10.11.2016 9:25:19 INFO Getting information about Kaspersky Security Center plug-ins is complete.

10.11.2016 9:25:19 INFO Finished module: Getting information about versions of plug-ins of Kaspersky Security Center

10.11.2016 9:25:19 INFO Starting module: Collecting setup API logs

10.11.2016 9:25:19 INFO Collecting setup API logs: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:19 INFO List of templates to collect:

SearchPattern:C:\Windows\inf\setupapi.*.log;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\setup*.log;DisableWow64Redirect:False;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:20 INFO Copy file from "C:\Windows\inf\setupapi.app.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Setupapi\setupapi.app.log"

10.11.2016 9:25:20 INFO Copy file from "C:\Windows\inf\setupapi.dev.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Setupapi\setupapi.dev.log"

10.11.2016 9:25:20 INFO Copy file from "C:\Windows\inf\setupapi.offline.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Setupapi\setupapi.offline.log"

10.11.2016 9:25:20 INFO Copy file from "C:\Windows\setupact.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Setupapi\setupact.log"

10.11.2016 9:25:20 INFO Copy file from "C:\Windows\setuperr.log" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Setupapi\setuperr.log"

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:20 INFO Collecting setup API logs: ExtractData(Action setProgressValue): Data extracting finished. Collected 5 files.

10.11.2016 9:25:20 INFO Finished module: Collecting setup API logs

10.11.2016 9:25:20 INFO Starting module: Collecting Windows event logs

10.11.2016 9:25:20 INFO Collecting Windows event logs: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:20 INFO List of templates to collect:

SearchPattern:C:\Windows\system32\winevt\Logs\System.evtx;DisableWow64Redirect:True;AdditionalData:
SearchPattern:C:\Windows\system32\winevt\Logs\Application.evtx;DisableWow64Redirect:True;AdditionalData:
SearchPattern:C:\Windows\system32\winevt\Logs\Kaspersky*.evtx;DisableWow64Redirect:True;AdditionalData:
SearchPattern:C:\Windows\system32\Config\System.evt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\system32\Config\Application.evt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\system32\Config\SysEvent.evt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\system32\Config\AppEvent.evt;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Windows\system32\Config\Kaspersky*.evt;DisableWow64Redirect:False;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:20 INFO Copy file from "C:\Windows\System32\winevt\Logs\System.evtx" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Eventlogs\System.evtx"

10.11.2016 9:25:20 INFO Copy file from "C:\Windows\System32\winevt\Logs\Application.evtx" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Eventlogs\Application.evtx"

10.11.2016 9:25:20 INFO Copy file from "C:\Windows\System32\winevt\Logs\Kaspersky Event Log.evtx" to "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Eventlogs\Kaspersky Event Log.evtx"

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:20 INFO Collecting Windows event logs: ExtractData(Action setProgressValue): Data extracting finished. Collected 3 files.

10.11.2016 9:25:20 INFO Finished module: Collecting Windows event logs

10.11.2016 9:25:20 INFO Starting module: MSIESearchScopes

10.11.2016 9:25:20 INFO Extracting registry image from "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Microsoft Internet Explorer\Search Scopes\SearchScopes.reg" file.

10.11.2016 9:25:20 INFO Extraction of registry image is complete.

10.11.2016 9:25:20 INFO Finished module: MSIESearchScopes

10.11.2016 9:25:20 INFO Starting module: IEFeaturesExtractor

10.11.2016 9:25:20 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfoDllCache\HKLM_IE_OBTAINED.reg" file.

10.11.2016 9:25:20 INFO Extraction of registry image is complete.

10.11.2016 9:25:21 INFO Extracting registry image from "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfoDllCache\HLCU_IE_OBTAINED.reg" file.

10.11.2016 9:25:21 INFO Extraction of registry image is complete.

10.11.2016 9:25:21 INFO Finished module: IEFeaturesExtractor

10.11.2016 9:25:21 INFO Starting module: MSIERegistryPathExtractor

10.11.2016 9:25:21 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Microsoft Internet Explorer\Extensions (registry images)\HKLM_IE_Toolbar.reg" file.

10.11.2016 9:25:21 INFO Extraction of registry image is complete.

10.11.2016 9:25:21 INFO Extracting registry image from "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Microsoft Internet Explorer\Extensions (registry images)\HKCU_IE_Toolbar.reg" file.

10.11.2016 9:25:21 INFO Extraction of registry image is complete.

10.11.2016 9:25:21 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Explorer Bars" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Microsoft Internet Explorer\Extensions (registry images)\HKLM_IE_Explorer_Bars.reg" file.

10.11.2016 9:25:21 INFO Extraction of registry image is complete.

10.11.2016 9:25:21 INFO Extracting registry image from "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Microsoft Internet Explorer\Extensions (registry images)\HKCU_IE_Explorer_Bars.reg" file.

10.11.2016 9:25:21 INFO Extraction of registry image is complete.

10.11.2016 9:25:21 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\MenuExt" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Microsoft Internet Explorer\Extensions (registry images)\HKLM_IE_MenuExt.reg" file.

10.11.2016 9:25:21 INFO Extraction of registry image is complete.

10.11.2016 9:25:21 INFO Extracting registry image from "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Microsoft Internet Explorer\Extensions (registry images)\HKCU_IE_MenuExt.reg" file.

10.11.2016 9:25:21 INFO Extraction of registry image is complete.

10.11.2016 9:25:21 INFO Extracting registry image from "HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions" to the "C:\Users\sadmin1\AppData\Local\Temp\krl0nth1.cev\GetSystemInfo\Microsoft Internet Explorer\Extensions (registry images)\HKLM_IE_Extensions.reg" file.

10.11.2016 9:25:21 INFO Extraction of registry image is complete.

10.11.2016 9:25:21 INFO Finished module: MSIERegistryPathExtractor

10.11.2016 9:25:21 INFO Starting module: FirefoxFeatureExtractor

10.11.2016 9:25:21 INFO Finished module: FirefoxFeatureExtractor

10.11.2016 9:25:21 INFO Starting module: Collecting Mozilla Firefox files

10.11.2016 9:25:21 INFO Collecting Mozilla Firefox files: ExtractData(Action setProgressValue): Data extracting started.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:21 INFO List of templates to collect:

SearchPattern:C:\Users\sadmin1\AppData\Roaming\Mozilla\Firefox\Profiles\*\prefs.js;DisableWow64Redirect:False;AdditionalData:
SearchPattern:C:\Users\sadmin1\AppData\Roaming\Mozilla\Firefox\Profiles\*\user.js;DisableWow64Redirect:False;AdditionalData:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10.11.2016 9:25:21 INFO Collecting Mozilla Firefox files: ExtractData(Action setProgressValue): Data extracting finished. Collected 0 files.

10.11.2016 9:25:21 INFO Finished module: Collecting Mozilla Firefox files

10.11.2016 9:25:21 INFO Starting module: Detecting of incompatible software

10.11.2016 9:25:27 INFO Finished module: Detecting of incompatible software

10.11.2016 9:25:27 INFO Data extracting finished.

 

Изменено пользователем sadmin
oit

oit

Опубликовано
Опубликовано

 

 


10.11.2016 9:18:19 WARNING An exception skipped: System.UnauthorizedAccessException: Отказано в доступе по пути "C:\Program Files\Windows NT\Стандартные"
и в конце:

 

 


10.11.2016 9:25:27 INFO Finished module: Detecting of incompatible software

**тогда выложите архив на сторонний ресурс и ссылку сюда. Изучать такой лог нет возможности

andrew75

andrew75

Опубликовано
Опубликовано

sadmin,

нужет весь zip-овский файл, который сформировала утилита, а не отдельные файлы из него.

 

Сделайте проверку системных файлов - в командной строке, запущенной от имени администратора, выполните:

sfc /scannow

sadmin

sadmin

Опубликовано
  • Автор
Опубликовано

 

10.11.2016 9:18:19 WARNING An exception skipped: System.UnauthorizedAccessException: Отказано в доступе по пути "C:\Program Files\Windows NT\Стандартные"

и в конце:

 

 

10.11.2016 9:25:27 INFO Finished module: Detecting of incompatible software

**тогда выложите архив на сторонний ресурс и ссылку сюда. Изучать такой лог нет возможности

 

https://yadi.sk/d/q0ksQ78lyKiPX

andrew75

andrew75

Опубликовано
Опубликовано

Результаты автоматического анализа настроек SPI

Ошибка LSP NameSpace: "WindowsLive NSP" --> отсутствует файл C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL Ошибка LSP NameSpace: "WindowsLive Local NSP" --> отсутствует файл C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL Внимание ! Обнаружены ошибки в LSP. Количество ошибок - 2 Возможны проблемы при работе с сетью и Интернет

1. Создайте точку восстановления системы.

2. Скачайте утилиту AVZ http://z-oleg.com/avz4.zip

3. Распакуйте, запустите от имени администратора.

4. Меню "Файл" - Восстановление системы.

5. Отметьте пункты 14 и 15 и нажмите "Выполнить отмеченные операции".

6. Перезагрузитесь.

7. Очистите папку C:\Users\sadmin1\AppData\Local\Temp

8. Скачайте и установите KES 10.2.5.3201 http://www.kaspersky.ru/downloads-endpoint-security-windows

Пожалуйста, войдите, чтобы комментировать

Вы сможете оставить комментарий после входа в



Войти
 Поделиться
Перейти к списку тем

  • Похожий контент

    • d00dkina
      Не удается удалить троян
      Автор d00dkina
      Добрый день был обнаружен троян-майнер, провела диагностику Dr.Web, все обнаруженные вирусы были удалены, но по факту ничего не удалилось, до сих пор фоном идут подозрительные процессы, провела диагностику с помощью FRST, нужна помощь в составлении fixlist. Логи прикрепляю ссылкой на гугл диск, так как не разобралась как загрузить сюда файлы :(  Заранее благодарю 
      https://drive.google.com/file/d/1jae0DMBDxj1oSljvCrfIufY5_BT4Fkmk/view?usp=drive_link
      https://drive.google.com/file/d/19mQSFjNkYQQEgIah104nhF_0tmWc5Abt/view?usp=drive_link
    • DanM
      Не удается удалить троян Trojan:MSIL/Wemaeye.A
      Автор DanM
      Здравствуйте, обнаружил на своем компьютере Trojan:MSIL/Wemaeye.A.
      Ниже прикрепляю логи из приложения Farbar Recovery Scan Tool, помогите, пожалуйста, избавиться от этого трояна.
      logs.zip
    • kerzak
      Как удалить все версии 1с через ksc?
      Автор kerzak
      Здравствуйте, как удалить все эти версии разом, а не создавать задачу на каждую версию? 

    • INITIATED
      [РЕШЕНО] Не удается удалить MEM:Trojan.Multi.Agent.gen и MEM:Trojan.Win32.SEPEH.gen
      Автор INITIATED
      123.txtKIS обнаруживает два файла, определяет их как троянская программа, вылечивает один MEM:Trojan.Multi.Agent.gen, второй MEM:Trojan.Win32.SEPEH.gen пытается вылечить с перезагрузкой, но после перезагрузки вновь находит эти файлы. KVRT и Dr.Web_Curelt также не помогли.
      CollectionLog-2025.03.24-20.56.zip
      Отчет AutoLogger
      Отчет uvs_latest
      V2-PC_2025-03-24_20-47-16_v4.99.10v x64.7z
    • User2603
      [РЕШЕНО] Не удается удалить MEM:Trojan.Multi.Agent.gen и MEM:Trojan.Win32.SEPEH.gen
      Автор User2603
      Доброго времени суток! Не удаляются данные вирусы Касперским. Приложил образ из uvs
      DESKTOP-HGUP99B_2025-03-26_08-43-28_v4.99.10v x64.7z
×
×
  • Создать...