Article ID: 925546
Article Last Modified on 2/15/2007
APPLIES TO
- Windows Defender
SYMPTOMS
You use MpCmdRun.exe together with the –GetFiles parameter to generate a support log file for Microsoft Windows Defender. However, this tactic does not generate the MpCmdRun.log file in the %AllUsersProfile%\Application Data\Microsoft\Windows Defender\Support folder as expected on a computer that is running Microsoft Windows Server 2003 x64 Edition or that is running Microsoft Windows Server 2003 for Itanium-based Systems.
CAUSE
This issue occurs because MpCmdRun.exe creates a log file that is named MpCmdRun-System.log. This log file exists in the %AllUsersProfile%\Application Data\Microsoft\Windows Defender\Support folder.
MORE INFORMATION
When you run MpCmdRun.exe together with the –GetFiles parameter on a 64-bit computer, MpCmdRun.exe copies the MpCmdRun.log file from the %Windir%\Temp folder, and then MpCmdRun.exe creates a new file that is named MpCmdRun-System.log. This file exists in the %AllUsersProfile%\Application Data\Microsoft\Windows Defender\Support folder. MpCmdRun.exe also copies the MpCmdRun.log file from the NetworkServices temporary folder and creates a file that is named MpCmdRun-NetworkService.log. The file exists in the same folder as the MpCmdRun-System.log file.
Additional query words: supportlog logfile antispyware spyware malware trojan
Keywords: kbdefenderrtwswept kbcommandline kbexpertisebeginner kbtshoot kbprb KB925546