What is LogWatNT.exe?

The .exe extension on a filename indicates an executable file. Executable files may, in some cases, harm your computer. Therefore, please read below to decide for yourself whether the LogWatNT.exe on your computer is a Trojan that you should remove, or whether it is a file belonging to the Windows operating system or to a trusted application.

Click to Run a Free Scan for LogWatNT.exe related errors

LogWatNT.exe file information

Windows Task Manager with LogWatNT
LogWatNT.exe process in Windows Task Manager

The process known as LogWatNT belongs to software Computer Associates LogWatNT or Event Log Watch or CA LogWatNT by Computer Associates ( or CA (

Description: LogWatNT.exe is not essential for the Windows OS and causes relatively few problems. LogWatNT.exe is located in the C:\Windows folder—mainly C:\Program Files\CA\SharedComponents\CA_LIC\. Known file sizes on Windows 10/8/7/XP are 50,176 bytes (82% of all occurrences), 49,152 bytes or 50,688 bytes. 
There is no file information. The program is not visible. The LogWatNT.exe file is not a Windows core file. It is an unknown file in the Windows folder. Therefore the technical security rating is 71% dangerous, however you should also read the user reviews.

Uninstalling this variant: You can uninstall CA Licensing, update it, or get help from the software vendor. Click on to update it, click on for support, or click on CA Licensing in Windows Control Panel (Software or Programs category) to uninstall it.

Recommended: Identify LogWatNT.exe related errors

Important: Some malware camouflages itself as LogWatNT.exe. Therefore, you should check the LogWatNT.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.


User Comments

Part of CA Arcserve Backup, stayed after Arcserve removed. Disabled it.
Can be prevented from running by disabling Event Log Watch service
  Derek Hansell  
simply end task on lic98service.exe and then rename the CA folder and re-install the product
  Proptop   (further information)
Installed w/ CA software for Licencing; doesn't uninstall when sftwr removed
This file might be essetial for programms using it, so remember what you do! If you do not know just give it a try disabling it. Preventing the process from starting can be performed with standard window's tools. Registry hacking, manually editing is not necessary. You can go to the "services" and *SIMPLY STOP IT* and change the start options. Type to prompt: "mmc services.msc" (just tried on XP), lookup "Event Log Watch" (deutsch: "Ereignisprotokoll-Ɯberwachung") and change the state. See taskmanager to confirm the vanishing of the process "LogWatNT.exe".
Part CA/Etrust; lingers so at command prompt: sc delete logwatch
Still after installation (and following removing) ERWin
Came to me after a clean-out. etrust was here from last owner. what a pain every time i log on. I will delete relic CA files, let you know
More comments can be found here:
    (further information)

Rating chart

Summary: Average user rating of LogWatNT.exe: based on 39 votes with 9 reviews. 21 users think LogWatNT.exe is essential for Windows or an installed application. 4 users think it's probably harmless. 9 users think it's neither essential nor dangerous. 5 users suspect danger. 5 users don't grade LogWatNT.exe ("not sure about it").

Do you have additional information?
What do you know about LogWatNT.exe:
How would you rate it:
Link for more info:
Your Name:

Best practices for resolving LogWatNT issues

A clean and tidy computer is the key requirement for avoiding problems with LogWatNT. This means running a scan for malware, cleaning your hard drive using cleanmgr and sfc /scannow, uninstalling programs that you no longer need, checking for Autostart programs (using msconfig) and enabling Windows' Automatic Update. Always remember to perform periodic backups, or at least to set restore points.

Should you experience an actual problem, try to recall the last thing you did, or the last thing you installed before the problem appeared for the first time. Use the resmon command to identify the processes that are causing your problem. Even for serious problems, rather than reinstalling Windows, you are better off repairing of your installation or, for Windows 8 and later versions, executing the DISM.exe /Online /Cleanup-image /Restorehealth command. This allows you to repair the operating system without losing data.

To help you analyze the LogWatNT.exe process on your computer, the following programs have proven to be helpful: Security Task Manager displays all running Windows tasks, including embedded hidden processes, such as keyboard and browser monitoring or Autostart entries. A unique security risk rating indicates the likelihood of the process being potential spyware, malware or a Trojan. Malwarebytes Anti-Malware detects and removes sleeping spyware, adware, Trojans, keyloggers, malware and trackers from your hard drive.

Other processes

LogWatNT.exe [all]