Samsung Magician 7.2.0 writes "log.txt" to disk root on every login

Anton-HystriX · ‎06-10-2022

I recently updated Magician to 7.2.0 and its Migration Service started creating text log on my secondary SSD root every time I start Windows. The file is named "log.txt" and contains some partition data. Using Windows audit functionality, I gathered the info about the process that creates the file:

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-a5ba-3e3b0328c30d}" /> 
  <EventID>4656</EventID> 
  <Version>1</Version> 
  <Level>0</Level> 
  <Task>12800</Task> 
  <Opcode>0</Opcode> 
  <Keywords>0x8020000000000000</Keywords> 
  <TimeCreated SystemTime="2022-10-06T09:29:55.6965113Z" /> 
  <EventRecordID>1642669</EventRecordID> 
  <Correlation /> 
  <Execution ProcessID="4" ThreadID="620" /> 
  <Channel>Security</Channel> 
  <Computer>COMPUTER</Computer> 
  <Security /> 
  </System>
- <EventData>
  <Data Name="SubjectUserSid">S-1-5-18</Data> 
  <Data Name="SubjectUserName">COMPUTER$</Data> 
  <Data Name="SubjectDomainName">WORKGROUP</Data> 
  <Data Name="SubjectLogonId">0x3e7</Data> 
  <Data Name="ObjectServer">Security</Data> 
  <Data Name="ObjectType">File</Data> 
  <Data Name="ObjectName">X:\log.txt</Data> 
  <Data Name="HandleId">0x1d0</Data> 
  <Data Name="TransactionId">{00000000-0000-0000-0000-000000000000}</Data> 
  <Data Name="AccessList">%%1538 %%1541 %%4416 %%4417 %%4418 %%4419 %%4420 %%4423 %%4424</Data> 
  <Data Name="AccessReason">-</Data> 
  <Data Name="AccessMask">0x12019f</Data> 
  <Data Name="PrivilegeList">-</Data> 
  <Data Name="RestrictedSidCount">0</Data> 
  <Data Name="ProcessId">0x1724</Data> 
  <Data Name="ProcessName">C:\Program Files (x86)\Samsung\Samsung Magician\MigrationService\MigrationService.exe</Data> 
  <Data Name="ResourceAttributes">-</Data> 
  </EventData>
  </Event>

Does anybody else have this problem and any workaround? How to report the error to Samsung Directly?

I'm using the latest Windows 11 build.

Steve Ess · ‎17-02-2023

I just experienced the same problem on Windows 10. For anyone ending up here, I researched and found the "MigrationService.exe" program is initiated by a service named "CMigrationService". Open up Services and find CMigrationService. It will be running and can't be stopped due to the buttons being greyed out.

But you can still change the Startup type from "Automatic" to "Manual". Do that, click OK and then shut down your computer and restart it. The service will no longer run every boot nor create the log.txt file every time. Worked for me in Windows 10. This hopefully will do the same for Windows 11. If you ever need to migrate your Samsung SSD to another one, I assume this service will need to be changed back to "Automatic" until the migration is completed.