2 Replies - 666 Views - Last Post: 30 October 2015 - 01:22 AM

#1 Guitarguy  Icon User is offline

  • New D.I.C Head

Reputation: 0
  • View blog
  • Posts: 8
  • Joined: 16-October 15

Tracking unwanted software installation

Posted 29 October 2015 - 01:52 AM

Hi guys.

I have quite the weird problem here, at least so it seems. The problem itself is quite simple: unwanted software was installed on 29 of out computers. All of the mentioned computers were a part of the same physical "group" of computers.

The software that was installed was Office2010 Pro Plus.

When I check the date for the installation of O2010, it says 14.08.2014. The thing is, these computers were not bought at that point in time. Also, I have done some maintenance tasks on these computers, so I know for a fact that per 27.08.2015 all the computers were running on Office 2013.

What I have found so far:
The child folder of "Programfiles\Microsoft Office" is named "Office14", which is the default folder name for O2010.
There are no traces of any "Office15" (default folder name for O2013) in any folders/sub-folders.
EventViewer-data:14.08.2014 13:12:53 C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.msi

Shoot. Something happened, so it was posted (and I'm not allowed to edit the post yet... Sorry about that. I'll continue my post here.

14.08.2014 13:13:05 C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\ProPlusWW.msi
14.08.2014 13:12:19 C:\MSOCache\All Users\{90140000-0015-0414-0000-0000000FF1CE}-C\AccessMUI.msi
14.08.2014 13:12:10 C:\MSOCache\All Users\{90140000-0016-0414-0000-0000000FF1CE}-C\ExcelMUI.msi
14.08.2014 13:12:12 C:\MSOCache\All Users\{90140000-0018-0414-0000-0000000FF1CE}-C\PowerPointMUI.msi
14.08.2014 13:12:22 C:\MSOCache\All Users\{90140000-0019-0414-0000-0000000FF1CE}-C\PublisherMUI.msi
14.08.2014 13:12:15 C:\MSOCache\All Users\{90140000-001A-0414-0000-0000000FF1CE}-C\OutlookMUI.msi
14.08.2014 13:12:23 C:\MSOCache\All Users\{90140000-001B-0414-0000-0000000FF1CE}-C\WordMUI.msi
14.08.2014 13:12:14 C:\MSOCache\All Users\{90140000-002A-0414-1000-0000000FF1CE}-C\Office64MUI.msi
14.08.2014 13:12:17 C:\MSOCache\All Users\{90140000-002C-0414-0000-0000000FF1CE}-C\Proof.de\Proof.msi
14.08.2014 13:12:18 C:\MSOCache\All Users\{90140000-002C-0414-0000-0000000FF1CE}-C\Proof.en\Proof.msi
14.08.2014 13:12:16 C:\MSOCache\All Users\{90140000-002C-0414-0000-0000000FF1CE}-C\Proof.nb\Proof.msi
14.08.2014 13:12:16 C:\MSOCache\All Users\{90140000-002C-0414-0000-0000000FF1CE}-C\Proof.nn\Proof.msi
14.08.2014 13:12:18 C:\MSOCache\All Users\{90140000-002C-0414-0000-0000000FF1CE}-C\Proofing.msi
14.08.2014 13:12:20 C:\MSOCache\All Users\{90140000-0044-0414-0000-0000000FF1CE}-C\InfoPathMUI.msi
14.08.2014 13:12:04 C:\MSOCache\All Users\{90140000-006E-0414-0000-0000000FF1CE}-C\OfficeMUI.msi
14.08.2014 13:12:21 C:\MSOCache\All Users\{90140000-00A1-0414-0000-0000000FF1CE}-C\OneNoteMUI.msi
14.08.2014 13:12:13 C:\MSOCache\All Users\{90140000-00BA-0414-0000-0000000FF1CE}-C\GrooveMUI.msi

The reason this makes no sense is because these computers were not even bought at that time, and not even close to being set up/configured. So that makes me a bit worried. Something is messed up, somewhere, and I don't really know where to track this stuff.

Any tips on how I could track this?

Best regards,
Guitarguy

Is This A Good Question/Topic? 0
  • +

Replies To: Tracking unwanted software installation

#2 modi123_1  Icon User is online

  • Suitor #2
  • member icon



Reputation: 13401
  • View blog
  • Posts: 53,498
  • Joined: 12-June 08

Re: Tracking unwanted software installation

Posted 29 October 2015 - 06:42 AM

Pre-installed software can show up before they day you unboxed the machines.
Was This Post Helpful? 0
  • +
  • -

#3 Guitarguy  Icon User is offline

  • New D.I.C Head

Reputation: 0
  • View blog
  • Posts: 8
  • Joined: 16-October 15

Re: Tracking unwanted software installation

Posted 30 October 2015 - 01:22 AM

This is not pre-installed software. This is manually installed software that was installed after we pushed an OS to the computer.
Was This Post Helpful? 0
  • +
  • -

Page 1 of 1