Every 5 seconds, a new folder with the name MSI*.tmp
is created at my c:
.
1 seconde before, this folder is deleted.
How can I know who is creating this folder. Can it be a virus?
Run Process Monitor from Microsoft (originally SysInternals). It will give you a ton of output, but you can filter on your folder name.
process monitor
and the program that is creating this folder is the msiexec.exe
, how can i know what is driving this execution?
Apr 5, 2013 at 16:28
Process Monitor
and see if there is any more useful information. One thing to try: double-click one of the lines that contains msiexec.exe
. You should see "Event Properties". Switch to the "Process" tab and look at "Command Line". This may contain the path to the program it is trying to install. Also, the advice above to talk to your IT staff is really good. It is possible this is malicious software, but even if it is well-meaning software, it's still doing bad things to you.
msiexec.exe
process that's running every 5 seconds.