1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Strange File Found on C: Drive

Discussion in 'Virus & Other Malware Removal' started by auzzeyaub, Feb 13, 2007.

Thread Status:
Not open for further replies.
  1. auzzeyaub

    auzzeyaub Thread Starter

    Joined:
    Dec 2, 2003
    Messages:
    100
    I found this folder on my C drive labeled: c50d9d52a1f7a5f50a4c8a7233ee within the folder is a note pad file named: msxml4-KB927978-enu.log Below is a copy of the log but what is it and how did it get on my PC? Is it Dangerous? Can I delete it?

    === Verbose logging started: 11/30/2006 8:17:34 Build type: SHIP UNICODE 3.01.4000.2435 Calling process: C:\WINDOWS\system32\msiexec.exe ===
    MSI (c) (D4:54) [08:17:34:538]: Resetting cached policy values
    MSI (c) (D4:54) [08:17:34:538]: Machine policy value 'Debug' is 0
    MSI (c) (D4:54) [08:17:34:538]: ******* RunEngine:
    ******* Product: c:\c50d9d52a1f7a5f50a4c8a7233ee\msxml.msi
    ******* Action:
    ******* CommandLine: **********
    MSI (c) (D4:54) [08:17:34:538]: Client-side and UI is none or basic: Running entire install on the server.
    MSI (c) (D4:54) [08:17:34:538]: Grabbed execution mutex.
    MSI (c) (D4:54) [08:17:34:553]: Cloaking enabled.
    MSI (c) (D4:54) [08:17:34:553]: Attempting to enable all disabled priveleges before calling Install on Server
    MSI (c) (D4:54) [08:17:34:569]: Incrementing counter to disable shutdown. Counter after increment: 0
    MSI (s) (18:E4) [08:17:34:584]: Grabbed execution mutex.
    MSI (s) (18:40) [08:17:34:584]: Resetting cached policy values
    MSI (s) (18:40) [08:17:34:584]: Machine policy value 'Debug' is 0
    MSI (s) (18:40) [08:17:34:584]: ******* RunEngine:
    ******* Product: c:\c50d9d52a1f7a5f50a4c8a7233ee\msxml.msi
    ******* Action:
    ******* CommandLine: **********
    MSI (s) (18:40) [08:17:34:584]: Machine policy value 'DisableUserInstalls' is 0
    MSI (s) (18:40) [08:17:34:600]: File will have security applied from OpCode.
    MSI (s) (18:40) [08:17:34:663]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'c:\c50d9d52a1f7a5f50a4c8a7233ee\msxml.msi' against software restriction policy
    MSI (s) (18:40) [08:17:34:663]: SOFTWARE RESTRICTION POLICY: c:\c50d9d52a1f7a5f50a4c8a7233ee\msxml.msi has a digital signature
    MSI (s) (18:40) [08:17:34:772]: SOFTWARE RESTRICTION POLICY: c:\c50d9d52a1f7a5f50a4c8a7233ee\msxml.msi is permitted to run at the 'unrestricted' authorization level.
    MSI (s) (18:40) [08:17:34:772]: End dialog not enabled
    MSI (s) (18:40) [08:17:34:772]: Original package ==> c:\c50d9d52a1f7a5f50a4c8a7233ee\msxml.msi
    MSI (s) (18:40) [08:17:34:772]: Package we're running from ==> c:\WINDOWS\Installer\41488b86.msi
    MSI (s) (18:40) [08:17:34:772]: APPCOMPAT: looking for appcompat database entry with ProductCode '{37477865-A3F1-4772-AD43-AAFC6BCFF99F}'.
    MSI (s) (18:40) [08:17:34:772]: APPCOMPAT: no matching ProductCode found in database.
    MSI (s) (18:40) [08:17:34:772]: MSCOREE not loaded loading copy from system32
    MSI (s) (18:40) [08:17:34:772]: Machine policy value 'TransformsSecure' is 0
    MSI (s) (18:40) [08:17:34:772]: User policy value 'TransformsAtSource' is 0
    MSI (s) (18:40) [08:17:34:772]: Machine policy value 'DisablePatch' is 0
    MSI (s) (18:40) [08:17:34:772]: Machine policy value 'AllowLockdownPatch' is 0
    MSI (s) (18:40) [08:17:34:772]: Machine policy value 'DisableLUAPatching' is 0
    MSI (s) (18:40) [08:17:34:772]: Machine policy value 'DisableFlyWeightPatching' is 0
    MSI (s) (18:40) [08:17:34:788]: APPCOMPAT: looking for appcompat database entry with ProductCode '{37477865-A3F1-4772-AD43-AAFC6BCFF99F}'.
    MSI (s) (18:40) [08:17:34:788]: APPCOMPAT: no matching ProductCode found in database.
    MSI (s) (18:40) [08:17:34:788]: Transforms are not secure.
    MSI (s) (18:40) [08:17:34:788]: Command Line: REBOOT=ReallySuppress CURRENTDIRECTORY=c:\c50d9d52a1f7a5f50a4c8a7233ee CLIENTUILEVEL=3 CLIENTPROCESSID=2516
    MSI (s) (18:40) [08:17:34:788]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{2B27DCD9-53FA-4885-B6CD-698623819F4C}'.
    MSI (s) (18:40) [08:17:34:788]: Product Code passed to Engine.Initialize: ''
    MSI (s) (18:40) [08:17:34:788]: Product Code from property table before transforms: '{37477865-A3F1-4772-AD43-AAFC6BCFF99F}'
    MSI (s) (18:40) [08:17:34:788]: Product Code from property table after transforms: '{37477865-A3F1-4772-AD43-AAFC6BCFF99F}'
    MSI (s) (18:40) [08:17:34:788]: Product not registered: beginning first-time install
    MSI (s) (18:40) [08:17:34:788]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
    MSI (s) (18:40) [08:17:34:788]: Entering CMsiConfigurationManager::SetLastUsedSource.
    MSI (s) (18:40) [08:17:34:788]: User policy value 'SearchOrder' is 'nmu'
    MSI (s) (18:40) [08:17:34:788]: Adding new sources is allowed.
    MSI (s) (18:40) [08:17:34:788]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
    MSI (s) (18:40) [08:17:34:788]: Package name extracted from package path: 'msxml.msi'
    MSI (s) (18:40) [08:17:34:788]: Package to be registered: 'msxml.msi'
    MSI (s) (18:40) [08:17:34:788]: Note: 1: 2729
    MSI (s) (18:40) [08:17:34:788]: Note: 1: 2729
    MSI (s) (18:40) [08:17:34:788]: Note: 1: 2262 2: AdminProperties 3: -2147287038
    MSI (s) (18:40) [08:17:34:788]: Machine policy value 'DisableMsi' is 0
    MSI (s) (18:40) [08:17:34:788]: Machine policy value 'AlwaysInstallElevated' is 0
    MSI (s) (18:40) [08:17:34:788]: User policy value 'AlwaysInstallElevated' is 0
    MSI (s) (18:40) [08:17:34:788]: Product installation will be elevated because user is admin and product is being installed per-machine.
    MSI (s) (18:40) [08:17:34:788]: Running product '{37477865-A3F1-4772-AD43-AAFC6BCFF99F}' with elevated privileges: Product is assigned.
    MSI (s) (18:40) [08:17:34:788]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'ReallySuppress'.
    MSI (s) (18:40) [08:17:34:788]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'c:\c50d9d52a1f7a5f50a4c8a7233ee'.
    MSI (s) (18:40) [08:17:34:788]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'.
    MSI (s) (18:40) [08:17:34:788]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '2516'.
    MSI (s) (18:40) [08:17:34:788]: TRANSFORMS property is now:
    MSI (s) (18:40) [08:17:34:788]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '200'.


    Entire log is too long to post (200K characters), let me know if you need to see the rest of it.
     
  2. khazars

    khazars

    Joined:
    Feb 15, 2004
    Messages:
    12,302
    that's to do with windows updates and service pack updates, nothing to worry about! Don't delete it it is harmless!
     
  3. auzzeyaub

    auzzeyaub Thread Starter

    Joined:
    Dec 2, 2003
    Messages:
    100
    Thank you, you would think Microsoft would name there update files a little better.
     
As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/543710

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice