Solved new entry in Event Viewer

[2harts4ever]

Hi,

For the record I am running Windows 7 Pro SP1 on a
HP 64-bitPavilion p7-1157c AMD A6-3600 APU w/Radeon ™ HD Graphics, 2.10GHz,
8GBs of Memory, IE 11, Zone Alarm Free Antivirus and Firewall Version 13.3209.000, Super AntiSpywarePro, Trojan Hunter, Malwarebytes Antimalware, Spyware Blaster and Windows Defender. I connect to the Internet via a Comcast modem.

I utilize Zone Alarm as my only Real-time protection and the other Spyware programs for scanning purposes only.

About a week ago I got rid of my previous Firewall and Antivirus program (Comodo) because I was having trouble updating it.

However, since updating to Zone Alarm I found this 'warning' in my Device Manager in Administrative Events labeled Software Policies:

...Access to C:\ProgramData\cisCA02.exe has been restricted by your administrator by location with policy rule {ad390205-8f71-4228-8c62-a972bffb8464} placed on path C:\ProgramData\*exe.

Any ideas what this could be?

Thanks and regards,
2harts4ever

 

[Berton]

Google Search found nothing about the cisCA02.exe file and it doesn't appear to have a program name so I'd suspicion it as an infection of some sort. I've seen only few times that files in C:\ProgramData are not in Folders named for the program they are associated with. I'd run an updated antivirus program for a Full/Deep scan followed by antimalare program such as Malwarebytes.

 

[2harts4ever]

Hi Berton,

I appreciate your response and suggestions.

However, I already Googled it too and came up empty. I ran my updated Zone Alarm antivirus, Super Antispyware and Trojan Hunter, but nothing showed up.

Thanks and regards,

2harts4ever

 

[2harts4ever]

Hi,

Just a quick update to let everyone know the problem is solved.

A good friend told me do a search of C:\ProgramData\ after enabling 'show all hidden files, folders and drivers' in Explorer. Sure enough after doing that I discovered the file. I did a quick System Restore, deleted the file and rebooted. Once restarted I went to Event Viewer and the 'cisCA02.exe' warning was gone.

Thanks and regards,
2harts4ever