A couple of weeks ago strange MSI***.tmp folders started appearing on root C and D drives. They appear at random at any time, some days 10 appear, some days 20... I can see them in the explorer but if click on them a message says the file is no longer available, so I just open explorer again and the y are gone.
sounds like microsoft installer.
I would run cmd.exe as an admin then run the command
set
scroll down to the temp and tmp environment variables and confirm they are set to valid directories
in my case both are set to the hidden appdata directory
you can start control panel->system->edit environment variables
to see and edit the settings.
then I would guess I would have to run the icals.exe command to give permissions on each directory entry then remove them.
command would be something like this
start cmd.exe as an admin,
cd c:\
icacls *.tmp /grant everyone:F /t /q
then you should be able to delete them.
after that I would go to windows update and see if it is trying and failing to install something like a .net install. run updates and see if you get more of these temp directories created.
I would run cmd.exe as an admin then run the command
set
scroll down to the temp and tmp environment variables and confirm they are set to valid directories
in my case both are set to the hidden appdata directory
you can start control panel->system->edit environment variables
to see and edit the settings.
then I would guess I would have to run the icals.exe command to give permissions on each directory entry then remove them.
command would be something like this
start cmd.exe as an admin,
cd c:\
icacls *.tmp /grant everyone:F /t /q
then you should be able to delete them.
after that I would go to windows update and see if it is trying and failing to install something like a .net install. run updates and see if you get more of these temp directories created.
Last edited:
You misunderstood. I have no problem with deleting them, on the contrary they autodelete themselves as soon as they are generated. By the time I notice them on the explorer they are not in my system anymore, just have to refresh explorer and they disappear.
What I need to do if find out what is creating them in the first place. If it is microsoft installer what is it trying to install 20 times a day or why dont I get some kind of message saying an update failed. I update regularly and everything is updated to date with no updates failed. I have also tried disconnecting internet and they keep appearing so it is not some update that it is being downloaded.
Last edited:
- Jun 12, 2015
- 65,180
- 6,431
- 168,090
unless John has another way to find whatever is causing them, it might be an unsolved mystery.
I still feel there has to be a way to find out what makes them.
i wonder if this works or it just stops it happening like all other ways - https://community.spiceworks.com/topic/363079-using-event-viewer-to-track-changes-to-files
I still feel there has to be a way to find out what makes them.
i wonder if this works or it just stops it happening like all other ways - https://community.spiceworks.com/topic/363079-using-event-viewer-to-track-changes-to-files
when you find one file, can you run explorer, right mouse click for properties,
select security tab, advanced and see the owner name?
or does it just show system sid?
i assume the directory is created by msiexec
https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/msiexec
maybe see if it is running at the time of the problem or block it from running
maybe something in task scheduler is running it
select security tab, advanced and see the owner name?
or does it just show system sid?
i assume the directory is created by msiexec
https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/msiexec
maybe see if it is running at the time of the problem or block it from running
maybe something in task scheduler is running it
funny I just ran my task scheduler and looked at the tasks. only one app was running the installer it was scheduled to run at 2.32 pm every day and the app was dated in 2017. (intel update tool) when I attempted to run it directly it refused to run since it detected a newer version already installed.
I deleted the task.
process monitor from https://docs.microsoft.com/en-us/sysinternals/downloads/procmon
you could run it for a while then filter on the files created on the drive and see what created them.
tried it, started the tool, start cmd
then made a directory foo
deleted the directory
and exited
the log in process monitor shows the creation , the process, its stack and shows the search indexer finding the directory and a lot of activity on the search protocol then the deletion of the directory.
stays on the screen until you clear it.
i would stop the search indexer in a effort to reduce the noise in the log. or do a better filter.
also look at the tools process viewer. it shows info on processes that started and ended during the log period.
Last edited:
File properties, security, etc are all empty, no info is there. Also I already tried Process monitor and other similar apps that log things and whenever I ran those apps no folders are created, as soon as I close them, they appear again.
- Jun 12, 2015
- 65,180
- 6,431
- 168,090
i wonder if it happens in safe mode
would maybe tell us if its windows.
- go to settings/update & security/recovery
- under advanced startup, click restart now button
- this restarts PC in a blue menu
- choose troubleshoot
- choose advanced
- choose startup options
- click the restart button
- choose a safe mode with networking by using number associated with it.
- Pc will restart and load safe mode
would maybe tell us if its windows.
- Jun 12, 2015
- 65,180
- 6,431
- 168,090
did you get any windows updates since as it could have been fixed by windows. it might have been a windows bug the entire time. check reliability history as it shows any files downloaded from the Store as well, its another spot you get updates from.
good that its fixed even if its a mystery.
good that its fixed even if its a mystery.
TRENDING THREADS
-
Question Can´t open BIOS because no keyboard input is received.
- Started by Blatscher
- Replies: 11
-
-
-
News US sanctions transform China into legacy chip production juggernaut — production jumped 40% in Q1 2024- Started by Admin
- Replies: 35
-
Question New pc build r9 7900x3d rtx 4080 super no post only ram rgb turns on- Started by Harvey Durward
- Replies: 4
-
-
Facebook
Twitter
Instagram