Verifying the event that initally launched a malicious task?

  • Thread starter Thread starter don_b_1
  • Start date Start date
Dwarf said:
Hi don_b_1,

This should help you with the answer to Q2. To find out the date of the
uninstallation of a program, you need to run the 'Reliability and Performance
Monitor'. To do this, click on the start orb and type 'reliability and
performance monitor'. This too needs to be executed with administrative
priviledges. When the program opens, click on 'Reliability Monitor'. This is
a 'System Stability Chart', and it is updated daily. Please note that events
for the current day will not appear in this chart until the following day.
One of the things that this monitors is 'Software (Un)Installs', and this is
where you will find the information. Simply check each day until you come
across the required event. This records the date of an event, but I am not
aware of anything recording the time.
Dwarf
Click to expand...

Hi Dwarf,

Thank you for that. I suppose that was my best shot but I don't see records
of any of the HP utilities or programs in there, either install or uninstall.
I do see many entries for the "real" applications I had to uninstall. I guess
HP trashware doesn't count.

Don
 
Back
Top