McAfee Policy Auditor Agent
What is McAfee Policy Auditor Agent? (from McAfee)
By mapping IT controls against predefined policy content, McAfee Policy Auditor helps you report consistently and accurately against key industry mandates and internal policies across your infrastructure or on specific targeted systems. Policy Auditor is an agent-based IT audit solution that leverages the Security Cont... Read more
Overview
McAfee Policy Auditor Agent is a program developed by McAfee. The most used version is 6.0.1.183, with over 98% of all installations currently using this version. Upon installation and setup, it defines an auto-start registry entry which makes this program run on each Windows boot for all user logins. It adds a background controller service that is set to automatically run. Delaying the start of this service is possible through the service manager. The main program executable is PASysTray.exe. The software installer includes 30 files and is usually about 38.31 MB (40,170,051 bytes). contentupdate.exe is the automatic update component of the software designed to download and apply new updates should new versions be released. In comparison to the total number of users, most PCs are running the OS Windows 7 (SP1) as well as Windows XP. While about 73% of users of McAfee Policy Auditor Agent come from the United States, it is also popular in South Africa and India.
Program details
URL: www.mcafee.com/us/products/policy-auditor.aspx
Help link: mysupport.mcafee.com
Installation folder: C:\Program Files\McAfee\Policy Auditor Agent\
Uninstaller: MsiExec.exe /X{48804885-8367-42B0-A425-DA558F5CCD04}
(The Windows Installer is used for the installation, maintenance, and removal.)
Estimated size: 38.31 MB
Language: English (United States)
Files installed by McAfee Policy Auditor Agent
| Program executable: | PASysTray.exe |
| Name: | McAfee Audit Engine |
| PASysTray EXE |
| Path: | C:\Program Files\McAfee\Policy Auditor Agent\PASysTray.exe |
| MD5: | 24a83b602a4da62c37e6fcd10b136199 |
Additional files:
-
AuditManager.dll - McAfee Audit Engine (Audit Manager DLL)
-
AuditManagerService.exe
-
common.dll - Common components DLL
-
content.dll - Content DLL
-
contentupdate.exe - ContentUpdate EXE
-
DebugConsole.exe - DebugConsole EXE
-
Engine.dll - Auditor engine DLL
-
engineMain.exe - engineMain EXE
-
fileIntegrityMonitoring.dll - fileIntegrityMonitorint DLL
-
fimcli.exe - FIMCLI EXE
-
PAInterface.dll - PAInterface DLL
-
PASystray.exe - PASysTray EXE
-
ServiceMessages.dll - Service Messages DLL
-
Xalan-C_1_10.dll (by Apache Software Foundation) - Xalan-C++ Version 1.10.0 (Dynamic Link Library for Xalan-C++ Version 1.10.0)
-
xerces-c_2_8.dll (by Apache Software Foundation) - Xerces-C Version 2.8.0 (Shared Library for Xerces-C Version 2.8.0)
-
log4cpp.dll (by Bastiaan Bakker, LifeLine Networks bv) - Log library for C++ (Log library for C++ DLL)
-
boost_regex-vc80-mt-1_39.dll
-
XalanMessages_1_10.dll
Behaviors exhibited
Service
- AuditManagerService.exe runs as a service named 'McAfee Audit Manager Service' (McAfeeAuditManager) "Manages content updates and performs audits for McAfee Policy Auditor.".
Startup File (All Users Run)
- PASysTray.exe is loaded in the all users (HKLM) registry as a startup file name 'McAfee Policy Auditor Tray Icon' which loads as "C:\Program Files\McAfee\Policy Auditor Agent\PASysTray.exe".
How do I remove McAfee Policy Auditor Agent?
You can uninstall McAfee Policy Auditor Agent from your computer by using the Add/Remove Program feature in the Window's Control Panel.
- On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
- Windows Vista/7/8/10: Click Uninstall a Program.
- Windows XP: Click Add or Remove Programs.
- When you find the program McAfee Policy Auditor Agent, click it, and then do one of the following:
- Windows Vista/7/8/10: Click Uninstall.
- Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
- Follow the prompts. A progress bar shows you how long it will take to remove McAfee Policy Auditor Agent.
OS VERSIONS
Win 7 (SP1) 76%
Win Server 2003 1%
|
|
HOW IT STARTS
Automatically starts? Yes
(Found in the run registry)
|
|
USER ACTIONS
 |
Uninstall it 8%
Keep it 92%
|
|
Windows
Which Windows OS versions does it run on?
| Windows 7 |
79.39% |
|
| Windows XP |
12.21% |
|
| Windows 10 |
7.63% |
|
| Windows Server 2003 |
0.76% |
|
Which OS releases does it run on? |
| Windows 7 Enterprise |
47.29% |
|
| Windows 7 Professional |
27.91% |
|
| Microsoft Windows XP |
11.63% |
|
| Windows 8.1 Pro |
3.88% |
|
| Windows 7 Ultimate |
3.88% |
|
| Windows 8 Enterprise |
1.55% |
|
Geography
72.58% of installs come from the United States
Which countries install it?
| United States |
72.58% |
| South Africa |
6.45% |
| India |
2.69% |
| Spain |
1.61% |
| UA |
1.61% |
| China |
1.61% |
| Brazil |
1.61% |
| Canada |
1.08% |
| Peru |
1.08% |
| Germany |
0.54% |
| GH |
0.54% |
| Malaysia |
0.54% |
| Austria |
0.54% |
| Belgium |
0.54% |
PC manufacturers
What PC manufacturers (OEMs) have it installed?
| Dell |
60.33% |
|
| Hewlett-Packard |
27.27% |
|
| Lenovo |
4.13% |
|
| GIGABYTE |
2.48% |
|
| Samsung |
2.48% |
|
| Intel |
1.65% |
|
| American Megatrends |
0.83% |
|
| Sony |
0.83% |
|
Common models |
| Dell Latitude E6420 |
5.51% |
|
| Dell OptiPlex 780 |
3.94% |
|
| Dell OptiPlex 390 |
3.15% |
|
| Dell Latitude E5500 |
3.15% |
|
| Dell Latitude E6410 |
2.36% |
|
| Gigabyte GA-790XT-USB3 |
2.36% |
|
About McAfee
McAfee, a subsidiary of Intel Corporation, is a dedicated security technology company that delivers proactive solutions and services to help secure systems, networks, and mobile devices.
Publisher URL: www.mcafee.com