Halx

My computer here at work seems to have a background process running that is creating huge logs that fill up space. I clear them every few days. I have scanned for viruses and spyware and have found none. Windows XP.

List of files:

C:\WINDOWS\TEMP\MSI17047.LOG 8.72MB
C:\WINDOWS\TEMP\MSI1e558.LOG 17.7MB
C:\WINDOWS\TEMP\MSI2057.LOG 17.1MB
C:\WINDOWS\TEMP\MSI27a28.LOG 17.4MB
C:\WINDOWS\TEMP\MSI2b5a8.LOG 9.66MB
C:\WINDOWS\TEMP\MSI384f1.LOG 17.5MB
C:\WINDOWS\TEMP\MSI44c77.LOG 18.7MB
C:\WINDOWS\TEMP\MSI50111.LOG 17.6MB
C:\WINDOWS\TEMP\MSI59d51.LOG 18.3MB
C:\WINDOWS\TEMP\MSI647ca.LOG 17.6MB
C:\WINDOWS\TEMP\MSI6ec96.LOG 17.1MB
C:\WINDOWS\TEMP\MSI7bef9.LOG 17.8MB
C:\WINDOWS\TEMP\MSI85e37.LOG 8.72MB
C:\WINDOWS\TEMP\MSI8d991.LOG 17.7MB
C:\WINDOWS\TEMP\MSI9e0a0.LOG 9.66MB
C:\WINDOWS\TEMP\MSIbe2d5.LOG 17.4MB
C:\WINDOWS\TEMP\MSId002b.LOG 17.5MB
C:\WINDOWS\TEMP\MSIdb12c.LOG 18.7MB
C:\WINDOWS\TEMP\MSIdeb6.LOG 17.8MB
C:\WINDOWS\TEMP\MSIe57bd.LOG 17.6MB
C:\WINDOWS\TEMP\MSIeebde.LOG 18.3MB
C:\WINDOWS\TEMP\MSIf8c26.LOG 17.6MB

How can I find what is creating these logs and stop it?

__________________
You have found this post informative.
-The Administrator
[Don't Feed The Animals]

Hain

Luckily they are temps so they can be CCleaned.

First I would just open the logs with something other than notepad or MS word, maybe Notepad++, hopefully whatever these logs are, are actually what they say to be.

The program Unlocker can show what process has those files locked, so indirectly tells you what is creating them. Unfortunately you need to run Unlocker while a file is being created (to that folder?)

I think AVG Anti Spyware can show you what programs are writing what files to where, as well.

__________________

////\\// IRONSKY.NET \\//\\\\

Jinn

C:\WINDOWS\TEMP\MSI17047.LOG 8.72MB
C:\WINDOWS\TEMP\MSI1e558.LOG 17.7MB
C:\WINDOWS\TEMP\MSI2057.LOG 17.1MB
C:\WINDOWS\TEMP\MSI27a28.LOG 17.4MB

I'm going to guess by the MSIXXXXX.LOG filename that they are MSI (Windows Installer) log files. This leads me to believe that you've either got the registry key for Installer logging set, or your group policy sets it.

If it's enabled; "This should be used only for troubleshooting purposes and should not be left on because it will have adverse effects on system performance and disk space. Each time you use the Add/Remove Programs tool in Control Panel, a new Msi*.log file is created."

Check out http://support.microsoft.com/kb/223300

__________________
"I'm typing on a computer of science, which is being sent by science wires to a little science server where you can access it. I'm not typing on a computer of philosophy or religion or whatever other thing you think can be used to understand the universe because they're a poor substitute in the role of understanding the universe which exists independent from ourselves." - Willravel

Halx

That was quick. Thanks. I cleared the registry entry. We'll see if it works.

__________________
You have found this post informative.
-The Administrator
[Don't Feed The Animals]

Cynthetiq

put another log on the fire... o/~

__________________
I don't care if you are black, white, purple, green, Chinese, Japanese, Korean, hippie, cop, bum, admin, user, English, Irish, French, Catholic, Protestant, Jewish, Buddhist, Muslim, indian, cowboy, tall, short, fat, skinny, emo, punk, mod, rocker, straight, gay, lesbian, jock, nerd, geek, Democrat, Republican, Libertarian, Independent, driver, pedestrian, or bicyclist, either you're an asshole or you're not.

space209

I clear the TEMP folder ,history and cookies and have no problems.

I clean it out now and than to get more hard-drive space.

pstacy

First off, I just joined this group due to finding this article so...Hello!

I just found this article and wanted to follow up on it as I appear to be having the same issue with one of our users. Yesterday I had to clear out over 50,000 files of this type which had filled up the hard drive completely and today they are starting to reappear.

I read the article referenced above and, while I haven't checked the registry setting yet, I would not be surprised if this is the problem the workstation is having.

My question is: how do I turn off the logging? I see how it describes various logging records that can be turned on but I see nothing about turning them off. For now I'm going to assume nothing in our system configuration would be enabling this or everyone would be experiencing this trouble.

Thanks for any assistance anyone can provide.

Zweiblumen

If the cause is not the logging setting you might want to check if there is a hotfix (update) that is failing installation.

ZB

__________________
Sodomy non sapiens. : I'm buggered if I know

Cynthetiq

OMFG, I'm working on a WinNT 3.5.1 server right now. The log file is so full that I cannot get past the CTRL-ALT-DEL login because a full log error keeps popping up. Seriously, it's totally retarded.

__________________
I don't care if you are black, white, purple, green, Chinese, Japanese, Korean, hippie, cop, bum, admin, user, English, Irish, French, Catholic, Protestant, Jewish, Buddhist, Muslim, indian, cowboy, tall, short, fat, skinny, emo, punk, mod, rocker, straight, gay, lesbian, jock, nerd, geek, Democrat, Republican, Libertarian, Independent, driver, pedestrian, or bicyclist, either you're an asshole or you're not.