Loading...

Knowledge Center

Write denied events for the "Uninstall" registry key with Change Control 6.1.2 installed
Technical Articles ID:   KB81714
Last Modified:  7/18/2014
Rated:

Environment

McAfee Change Control (MCC) 6.1.2

Microsoft Windows (all supported versions)

Problem

Write denied events for Windows Uninstall registry key are reported with MCC with no registry protection rule configured on the system.

A user may observe write denied events for the following registry keys if Windows update or any application installation/update is triggered:
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall]
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
  • Application specific registry

Solution

This issue is resolved with MCC 6.1.3.357, which is available from the McAfee Downloads site at: http://mcafee.com/us/downloads/downloads.aspx.

NOTE: You will need a valid Grant Number for access. KB56057 provides additional information about the McAfee Downloads site, as well as alternate locations for some products.

Workaround

Create an Advance Exclusion Filter (AEF) rule for event_type = REG_KEY_WRITE_DENIED.

Rate this document

Beta Translate with

Select a desired language below to translate this page.

Languages:

This article is available in the following languages:

English United States
Japanese

Glossary of Technical Terms


 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.