Verbose logging? Recently I've noticed random folders appearing, dotted all over my PC with titles like: D:\efb92ce016561dd4085545de033ba1cc C:\0a96c52adec5727f52c884 etc. in these folders there are text files called: msxml4-KB927978-enu.log all the same name, but with differing file sizes, containing the following text: === Verbose logging started: 07/01/2007 11:57:44 Build type: SHIP UNICODE 3.01.4000.2435 Calling process: C:\WINDOWS\system32\msiexec.exe === MSI (c) (18:20) [11:57:44:921]: Resetting cached policy values MSI (c) (18:20) [11:57:44:921]: Machine policy value 'Debug' is 0 MSI (c) (18:20) [11:57:44:921]: ******* RunEngine: ******* Product: d:\efb92ce016561dd4085545de033ba1cc\msxml.msi ******* Action: ******* CommandLine: ********** MSI (c) (18:20) [11:57:44:921]: Client-side and UI is none or basic: Running entire install on the server. MSI (c) (18:20) [11:57:44:921]: Grabbed execution mutex. MSI (c) (18:20) [11:57:44:937]: Cloaking enabled. MSI (c) (18:20) [11:57:44:937]: Attempting to enable all disabled priveleges before calling Install on Server MSI (c) (18:20) [11:57:44:937]: Incrementing counter to disable shutdown. Counter after increment: 0 MSI (s) (98:B8) [11:57:44:984]: Grabbed execution mutex. MSI (s) (98:30) [11:57:44:984]: Resetting cached policy values MSI (s) (98:30) [11:57:44:984]: Machine policy value 'Debug' is 0 MSI (s) (98:30) [11:57:44:984]: ******* RunEngine: ******* Product: d:\efb92ce016561dd4085545de033ba1cc\msxml.msi ******* Action: ******* CommandLine: ********** MSI (s) (98:30) [11:57:44:984]: Machine policy value 'DisableUserInstalls' is 0 MSI (s) (98:30) [11:57:45:000]: File will have security applied from OpCode. MSI (s) (98:30) [11:57:45:015]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'd:\efb92ce016561dd4085545de033ba1cc\msxml.msi' against software restriction policy MSI (s) (98:30) [11:57:45:015]: SOFTWARE RESTRICTION POLICY: d:\efb92ce016561dd4085545de033ba1cc\msxml.msi has a digital signature MSI (s) (98:30) [11:57:45:093]: SOFTWARE RESTRICTION POLICY: d:\efb92ce016561dd4085545de033ba1cc\msxml.msi is permitted to run at the 'unrestricted' authorization level. MSI (s) (98:30) [11:57:45:093]: End dialog not enabled MSI (s) (98:30) [11:57:45:093]: Original package ==> d:\efb92ce016561dd4085545de033ba1cc\msxml.msi MSI (s) (98:30) [11:57:45:093]: Package we're running from ==> C:\WINDOWS\Installer\30421.msi MSI (s) (98:30) [11:57:45:109]: APPCOMPAT: looking for appcompat database entry with ProductCode '{37477865-A3F1-4772-AD43-AAFC6BCFF99F}'. MSI (s) (98:30) [11:57:45:109]: APPCOMPAT: no matching ProductCode found in database. MSI (s) (98:30) [11:57:45:109]: MSCOREE not loaded loading copy from system32 MSI (s) (98:30) [11:57:45:109]: Machine policy value 'TransformsSecure' is 0 MSI (s) (98:30) [11:57:45:109]: User policy value 'TransformsAtSource' is 0 MSI (s) (98:30) [11:57:45:109]: Machine policy value 'DisablePatch' is 0 MSI (s) (98:30) [11:57:45:109]: Machine policy value 'AllowLockdownPatch' is 0 MSI (s) (98:30) [11:57:45:109]: Machine policy value 'DisableLUAPatching' is 0 MSI (s) (98:30) [11:57:45:109]: Machine policy value 'DisableFlyWeightPatching' is 0 MSI (s) (98:30) [11:57:45:109]: APPCOMPAT: looking for appcompat database entry with ProductCode '{37477865-A3F1-4772-AD43-AAFC6BCFF99F}'. MSI (s) (98:30) [11:57:45:109]: APPCOMPAT: no matching ProductCode found in database. MSI (s) (98:30) [11:57:45:109]: Transforms are not secure. MSI (s) (98:30) [11:57:45:109]: Command Line: REBOOT=ReallySuppress CURRENTDIRECTORY=d:\efb92ce016561dd4085545de033ba1cc CLIENTUILEVEL=3 CLIENTPROCESSID=2328 MSI (s) (98:30) [11:57:45:109]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{2B27DCD9-53FA-4885-B6CD-698623819F4C}'. MSI (s) (98:30) [11:57:45:109]: Product Code passed to Engine.Initialize: '' MSI (s) (98:30) [11:57:45:109]: Product Code from property table before transforms: '{37477865-A3F1-4772-AD43-AAFC6BCFF99F}' MSI (s) (98:30) [11:57:45:109]: Product Code from property table after transforms: '{37477865-A3F1-4772-AD43-AAFC6BCFF99F}' MSI (s) (98:30) [11:57:45:109]: Product not registered: beginning first-time install MSI (s) (98:30) [11:57:45:109]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'. MSI (s) (98:30) [11:57:45:109]: Entering CMsiConfigurationManager::SetLastUsedSource. MSI (s) (98:30) [11:57:45:109]: User policy value 'SearchOrder' is 'nmu' MSI (s) (98:30) [11:57:45:109]: Adding new sources is allowed. MSI (s) (98:30) [11:57:45:109]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'. MSI (s) (98:30) [11:57:45:109]: Package name extracted from package path: 'msxml.msi' MSI (s) (98:30) [11:57:45:109]: Package to be registered: 'msxml.msi' MSI (s) (98:30) [11:57:45:125]: Note: 1: 2729 MSI (s) (98:30) [11:57:45:125]: Note: 1: 2729 MSI (s) (98:30) [11:57:45:125]: Note: 1: 2262 2: AdminProperties 3: -2147287038 MSI (s) (98:30) [11:57:45:125]: Machine policy value 'DisableMsi' is 0 MSI (s) (98:30) [11:57:45:125]: Machine policy value 'AlwaysInstallElevated' is 0 MSI (s) (98:30) [11:57:45:125]: User policy value 'AlwaysInstallElevated' is 0 MSI (s) (98:30) [11:57:45:125]: Product installation will be elevated because user is admin and product is being installed per-machine. MSI (s) (98:30) [11:57:45:125]: Running product '{37477865-A3F1-4772-AD43-AAFC6BCFF99F}' with elevated privileges: Product is assigned. MSI (s) (98:30) [11:57:45:125]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'ReallySuppress'. MSI (s) (98:30) [11:57:45:125]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'd:\efb92ce016561dd4085545de033ba1cc'. MSI (s) (98:30) [11:57:45:125]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'. MSI (s) (98:30) [11:57:45:125]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '2328'. MSI (s) (98:30) [11:57:45:125]: TRANSFORMS property is now: MSI (s) (98:30) [11:57:45:125]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '200'. MSI (s) (98:30) [11:57:45:125]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Application Data MSI (s) (98:30) [11:57:45:125]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Favorites MSI (s) (98:30) [11:57:45:125]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\NetHood MSI (s) (98:30) [11:57:45:125]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\My Documents MSI (s) (98:30) [11:57:45:125]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\PrintHood MSI (s) (98:30) [11:57:45:125]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Recent MSI (s) (98:30) [11:57:45:125]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\SendTo MSI (s) (98:30) [11:57:45:125]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Templates MSI (s) (98:30) [11:57:45:140]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Application Data MSI (s) (98:30) [11:57:45:140]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data MSI (s) (98:30) [11:57:45:140]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\My Documents\My Pictures MSI (s) (98:30) [11:57:45:140]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools etc. etc. etc. any idea what the hell is causing this? ta
