После удаления программных продуктов часто остаются записи в системном реестре и информация на файловой системе. В частности, после удаление Infowatch остается:
Папки:
c:\Program Files\Infowatch
Ветки в системном реестре:
HKEY_LOCAL_MACHINE\SOFTWARE\InfoWatch
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\iwdmc
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\IWDeployAgent
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\IWDMDV
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\IWDMFS
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\IWHLPEX
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\IwNNwF
НKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\iwrdiag
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\IwRedirect
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\iwshcd
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\IWSHCS HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\iwdmc
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\IWDeployAgent
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\IWDMDV
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\IWDMFS
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\IWHLPEX
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\IwNNwF
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\iwrdiag
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\IwRedirect
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\iwshcd
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\IWSHCS HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\iwdmc
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\IWDeployAgent
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\IWDMDV
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\IWDMFS
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\IWHLPEX
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\IwNNwF
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\iwrdiag
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\IwRedirect
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\iwshcd
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\IWSHCS
Ключи системного реестра:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
ключ:
C:\Windows\system32\IWDeployAgent.exe
REG_DWORD
2
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules
ключ:
{781198BC-C3FF-48ED-98F6-C25C39DD13C8}
REG_SZ
v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\Windows\system32\IWDeployAgent.exe|Name=InfoWatch Deploy Agent|Edge=TRUE|
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules
ключ:
{7FC70CE9-8310-429A-B1FF-EC0506D34861}
REG_SZ
v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\Program Files\Infowatch\DeviceMonitor\Client\rmtdiag.exe|Name=InfoWatch Diagnostic|
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules
ключ:
{231F4973-263E-43B8-8CC0-9CA705DEC6B8}
REG_SZ
v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\Program Files\Infowatch\DeviceMonitor\Client\iwdmc.exe|Name=InfoWatch Device Monitor Client|Edge=TRUE|
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules
ключ:
{468CD5D0-D090-4212-A4ED-039108DD3775}
REG_SZ
v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\Program Files\Infowatch\DeviceMonitor\Client\rmtdiag.exe|Name=InfoWatch Remote Diagnostic|Edge=TRUE|
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules
ключ:
{622EB865-34FA-4AC6-9C26-C709DEDC0557}
REG_SZ
v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\Program Files\Infowatch\DeviceMonitor\Client\DM.Client.exe|Name=InfoWatch Device Monitor Client Notifier|Edge=TRUE|
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules
ключ:
{7FC70CE9-8310-429A-B1FF-EC0506D34861}
REG_SZ
v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\Program Files\Infowatch\DeviceMonitor\Client\rmtdiag.exe|Name=InfoWatch Diagnostic|