Microsoft KB Archive/925546

From BetaArchive Wiki
Knowledge Base


When you use MpCmdRun.exe with the -GetFiles parameter to generate a log file for Windows Update, MpCmdRun.exe does not collect the MpCmdRun file on a 64-bit computer that is running Windows Server 2003

Article ID: 925546

Article Last Modified on 2/15/2007



APPLIES TO

  • Windows Defender



SYMPTOMS

You use MpCmdRun.exe together with the –GetFiles parameter to generate a support log file for Microsoft Windows Defender. However, this tactic does not generate the MpCmdRun.log file in the %AllUsersProfile%\Application Data\Microsoft\Windows Defender\Support folder as expected on a computer that is running Microsoft Windows Server 2003 x64 Edition or that is running Microsoft Windows Server 2003 for Itanium-based Systems.

CAUSE

This issue occurs because MpCmdRun.exe creates a log file that is named MpCmdRun-System.log. This log file exists in the %AllUsersProfile%\Application Data\Microsoft\Windows Defender\Support folder.

MORE INFORMATION

When you run MpCmdRun.exe together with the –GetFiles parameter on a 64-bit computer, MpCmdRun.exe copies the MpCmdRun.log file from the %Windir%\Temp folder, and then MpCmdRun.exe creates a new file that is named MpCmdRun-System.log. This file exists in the %AllUsersProfile%\Application Data\Microsoft\Windows Defender\Support folder. MpCmdRun.exe also copies the MpCmdRun.log file from the NetworkServices temporary folder and creates a file that is named MpCmdRun-NetworkService.log. The file exists in the same folder as the MpCmdRun-System.log file.


Additional query words: supportlog logfile antispyware spyware malware trojan

Keywords: kbdefenderrtwswept kbcommandline kbexpertisebeginner kbtshoot kbprb KB925546