OFCNT.LOG
C:\Users\Administrator\AppData\Local\Trend Micro\Security Agent\OFCNT.LOG
WebInstall.log
C:\
RemoteInstall.LOG
%windir%\