Close

What are you looking for?

cancel
Showing results for 
Search instead for 
Did you mean: 

Original topic:

Samsung Magician 7.2.0 writes "log.txt" to disk root on every login

(Topic created on: 06-10-2022 11:00 AM)
Anton-HystriX
First Poster
Options
Computers & IT

I recently updated Magician to 7.2.0 and its Migration Service started creating text log on my secondary SSD root every time I start Windows. The file is named "log.txt" and contains some partition data. Using Windows audit functionality, I gathered the info about the process that creates the file:

 

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-a5ba-3e3b0328c30d}" /> 
  <EventID>4656</EventID> 
  <Version>1</Version> 
  <Level>0</Level> 
  <Task>12800</Task> 
  <Opcode>0</Opcode> 
  <Keywords>0x8020000000000000</Keywords> 
  <TimeCreated SystemTime="2022-10-06T09:29:55.6965113Z" /> 
  <EventRecordID>1642669</EventRecordID> 
  <Correlation /> 
  <Execution ProcessID="4" ThreadID="620" /> 
  <Channel>Security</Channel> 
  <Computer>COMPUTER</Computer> 
  <Security /> 
  </System>
- <EventData>
  <Data Name="SubjectUserSid">S-1-5-18</Data> 
  <Data Name="SubjectUserName">COMPUTER$</Data> 
  <Data Name="SubjectDomainName">WORKGROUP</Data> 
  <Data Name="SubjectLogonId">0x3e7</Data> 
  <Data Name="ObjectServer">Security</Data> 
  <Data Name="ObjectType">File</Data> 
  <Data Name="ObjectName">X:\log.txt</Data> 
  <Data Name="HandleId">0x1d0</Data> 
  <Data Name="TransactionId">{00000000-0000-0000-0000-000000000000}</Data> 
  <Data Name="AccessList">%%1538 %%1541 %%4416 %%4417 %%4418 %%4419 %%4420 %%4423 %%4424</Data> 
  <Data Name="AccessReason">-</Data> 
  <Data Name="AccessMask">0x12019f</Data> 
  <Data Name="PrivilegeList">-</Data> 
  <Data Name="RestrictedSidCount">0</Data> 
  <Data Name="ProcessId">0x1724</Data> 
  <Data Name="ProcessName">C:\Program Files (x86)\Samsung\Samsung Magician\MigrationService\MigrationService.exe</Data> 
  <Data Name="ResourceAttributes">-</Data> 
  </EventData>
  </Event>

 

Does anybody else have this problem and any workaround? How to report the error to Samsung Directly?

I'm using the latest Windows 11 build.

0 Likes
0 REPLIES 0