(imported topic written by SystemAdmin)
I’m creating an analyses that is looking for GoToMyPC, actually I’m searching for the file named gopcsrv.exe and the directory it’s in.
I’m currently using the following as my relevance:
if true then (exists descendant whose (name of it = “gopcsrv.exe”) of root folders of drive “c:”) else false
This is the best I’ve come up with getting the actual pathname
descendant whose (name of it = “gopcsrv.exe”) of root folders of drive “c:”
Or if anyone has the uninstall reg key or a Fixlet to to uninstall GoToMyPC that would be great. You’d cut my work down by more then half.