%system32%\winevt\Logs [Microsoft-Windows-ClusterAwareUpdating*] %system32%\LogFiles\ClusterUpdate [CauWmi*] HKLM\Software\Microsoft\Windows\CurrentVersion\ClusterAwareUpdating\* [*] HKLM\Software\Microsoft\Windows\CurrentVersion\ClusterAwareUpdating\* [*] %system32%\winevt\Logs [Microsoft-Windows-ClusterAwareUpdating*] %system32%\LogFiles\ClusterUpdate [CauWmi*] %CSIDL_LOCAL_APPDATA%\Temp\CAU\* [*] %CSIDL_LOCAL_APPDATA%\Temp\CAU\* [*]