What's This?

[Licker4U]

I just noticed this morning a file on my hard drive that's never been there before. The filename is msxml4-KB927978-enu.log. I'm thinking it's a Windows Update that happened automatically as I signed off last night. Is it safe to delete it? I'll only put a short bit of what I found in the file:

=== Verbose logging started: 11/14/2006 23:42:40 Build type: SHIP UNICODE 3.01.4000.2435 Calling process: C:\WINDOWS\system32\msiexec.exe ===
MSI (c) (9C:48) [23:42:40:671]: Resetting cached policy values
MSI (c) (9C:48) [23:42:40:671]: Machine policy value 'Debug' is 0
MSI (c) (9C:48) [23:42:40:671]: ******* RunEngine:
******* Product: c:\53aa3f4b70dddce5b1addde3\msxml.msi
******* Action:
******* CommandLine: **********
MSI (c) (9C:48) [23:42:40:687]: Client-side and UI is none or basic: Running entire install on the server.
MSI (c) (9C:48) [23:42:40:687]: Grabbed execution mutex.
MSI (c) (9C:48) [23:42:40:781]: Cloaking enabled.
MSI (c) (9C:48) [23:42:40:781]: Attempting to enable all disabled priveleges before calling Install on Server
MSI (c) (9C:48) [23:42:40:796]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (F4:0C) [23:42:40:796]: Grabbed execution mutex.
MSI (s) (F4:48) [23:42:40:796]: Resetting cached policy values
MSI (s) (F4:48) [23:42:40:796]: Machine policy value 'Debug' is 0
MSI (s) (F4:48) [23:42:40:796]: ******* RunEngine:
******* Product: c:\53aa3f4b70dddce5b1addde3\msxml.msi
******* Action:
******* CommandLine: **********
MSI (s) (F4:48) [23:42:40:906]: Machine policy value 'DisableUserInstalls' is 0
MSI (s) (F4:48) [23:42:40:921]: File will have security applied from OpCode.
MSI (s) (F4:48) [23:42:40:953]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'c:\53aa3f4b70dddce5b1addde3\msxml.msi' against software restriction policy
MSI (s) (F4:48) [23:42:40:953]: SOFTWARE RESTRICTION POLICY: c:\53aa3f4b70dddce5b1addde3\msxml.msi has a digital signature
MSI (s) (F4:48) [23:42:41:531]: SOFTWARE RESTRICTION POLICY: c:\53aa3f4b70dddce5b1addde3\msxml.msi is permitted to run at the 'unrestricted' authorization level.
MSI (s) (F4:48) [23:42:41:531]: End dialog not enabled
MSI (s) (F4:48) [23:42:41:562]: Original package ==> c:\53aa3f4b70dddce5b1addde3\msxml.msi
MSI (s) (F4:48) [23:42:41:562]: Package we're running from ==> c:\WINDOWS\Installer\254cba9.msi
MSI (s) (F4:48) [23:42:41:593]: APPCOMPAT: looking for appcompat database entry with ProductCode '{37477865-A3F1-4772-AD43-AAFC6BCFF99F}'.
MSI (s) (F4:48) [23:42:41:593]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (F4:48) [23:42:41:593]: MSCOREE not loaded loading copy from system32
MSI (s) (F4:48) [23:42:41:687]: Machine policy value 'TransformsSecure' is 0
MSI (s) (F4:48) [23:42:41:687]: User policy value 'TransformsAtSource' is 0

[atariFu]

Google is pretty good about seraching for unknown system files. Second result for the filename turned up this page on microsoft with a download patch with the same name for an XML vulnerability.

http://www.microsoft.com/downloads/d...displaylang=en

[kitty_kate]

I second that, it's just the log created after a windows update. Safe to delete it.

[Licker4U]

Thanks, I figured a log file is just that, a log of something that happened and I don't need it.