The path of these files was …/temp/MCCLEANUP.5.0.285.4_DMPackage_en-US_Release etc
The 5.0.285 version!! Strange!
why strange?
Maybe as you are looking at shredder and prefetch perhaps compare with other products such as CCleaner.com
old prefetch data
menu order cache
tray notifications cache
windows size/location cache
user assist history
IIS logs
Hotfix uninstalls
etc
etc
Thanks Jaclaz. But my doubt now is why use a McAfee remover in a firm where never been used McAfee products?
The answer, my friend, is blowing in the wind wink
[CUT]
jaclaz
Thanks Jaclaz! My logic was "why download a McAfee remover without McAfee products?" maybe the logic was"They want to destroy data and clean, maybe for mistake they download also that product". In the "hot days" ccleaner is present in a cache.
thanks
… maybe the logic was"They want to destroy data and clean, maybe for mistake they download also that product".
As said, maybe it was, or maybe it was not, it is as good as hypothesis as another one, but still it remains an hypothesis with NO actual confirmation, not even indirect, without a much more large and specific context.
Maybe the logged in user did install a McAfee product and later removed it (and hypothetically wink ) the McAfee removal tool, actually removed each and every trace of the installed product (which BTW should be what the thingy does).
The "strange" can be motivated by the fact that the reference page
https://
service.mcafee.com/FAQDocument.aspx?id=TS101331
states
IMPORTANT
Do Not download and save MCPR for future use. MCPR is updated periodically as new products are released, and running an older version might cause problems with new products. Always return to this article and download MCPR again when you need to run it.
so, the comment by AshishSingh may come from
- not thinking that you may be investigating a hard disk images where relevant activity happened in 2011 (or however in a timeframe compatible with at the time 5.0.285 online version of the tool) ?
- believing that people actually read instructions/manuals/docs and actually do what is in them 😯
You see, it is easy enough to provide a logical explanation to something, whether the explanation represents what really happened, is another thing.
As a side note, for all we know the McAfee tool could well (as a side effect or "collateral damage") remove some non-McAfee related artifacts….
jaclaz
thanks all. But our relevant period are the last month of 2014 not 2011