Windows 10: MpCmdRun runs permanently with massive log files

Discus and support MpCmdRun runs permanently with massive log files in Windows 10 Support to solve the problem; Fragmentation check shows I have huge log files (and log.bak) at C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp They show a log entry... Discussion in 'Windows 10 Support' started by Fedup10, Jan 20, 2016.

  1. FEDUP10
    Fedup10 Win User

    MpCmdRun runs permanently with massive log files


    Fragmentation check shows I have huge log files (and log.bak) at
    C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp

    They show a log entry at least twice per second EVERY second as follows
    ----------------------------------------------------------------------------------
    MpCmdRun: Command Line: "C:\Program Files\Windows Defender\mpcmdrun.exe" -wdenable
    Start Time: ‎Thu ‎Jan ‎21 ‎2016 10:00:59

    WDEnable
    ERROR: WDEnable(TRUE) failed (8007139F)
    MpCmdRun: End Time: ‎Thu ‎Jan ‎21 ‎2016 10:00:59
    -------------------------------------------------------------------------------------


    What is what trying to do, and why doesn't it learn and stop?
    How can I get rid of the problem?
    Thanks

    [ windows 10 Pro 1511 10586.63 ]

    :)
     
    Fedup10, Jan 20, 2016
    #1
  2. GLOBALR
    globalr Win User

    Unable to Install Windows Defender - KB2267602 (Definition 1.237.1219.0): Failed [HYPER-V Core 2016]

    Seem to get a single email from microsoft once every 24 hrs. So this process is going to be very slow.

    1. Provide logs by running command ->

    mpcmdrun.exe -getfiles

    2. Run Signature Update command ->

    Mpcmdrun.exe -signatureupdate
    Provide logs by running command ->

    mpcmdrun.exe -getfiles

    -------------------------------------------------------------------------------------

    MpCmdRun: Command Line: mpcmdrun.exe -getfiles

    Start Time: ‎Thu ‎Mar ‎23 ‎2017 10:06:28

    ERROR: CreateDirectoryW(C:\ProgramData\Microsoft\Windows Defender\Support\..\..\Microsoft Security Client\Support) failed (80070003)

    WARNING: GetAppLayerLogsDir() failed (80070003)

    INFO: CreateDirectoryW(C:\WINDOWS\Microsoft Antimalware\Support) failed (80070003). Likely that WDO was never run on this machine.

    GetOfflineScannerSupportDir() failed (80070003). Likely that WDO was never run on this machine.

    Collecting events from Operational Event Log...

    Collecting events from WHC Event Log...

    Getting CBS log...

    Collecting configuration information...

    Collecting Windows Update logs...

    Getting MpCmdRun log (1/4)...

    Getting MpCmdRun log (2/4)...

    Getting MpCmdRun log (3/4)...

    Getting MpCmdRun log (4/4)...

    Getting Dynamic Signatures...

    Getting MpSigStub log...

    Dumping cache filenames to log...

    Time Info - ‎Thu ‎Mar ‎23 ‎2017 10:06:52 Getting cache file log...

    Getting product service(s) registration information...

    Getting product service registration information...

    Getting minifilter driver registration information...

    Getting NIS driver registration information...

    Getting NIS service registration information...

    Getting system information...

    Getting file-list and version information...

    Getting WSC information...

    Getting threat information...

    Creating CAB file...

    Files successfully created in C:\ProgramData\Microsoft\Windows Defender\Support\MpSupportFiles.cab

    MpCmdRun: End Time: ‎Thu ‎Mar ‎23 ‎2017 10:07:00

    -------------------------------------------------------------------------------------

    -------------------------------------------------------------------------------------

    MpCmdRun: Command Line: Mpcmdrun.exe -signatureupdate

    Start Time: ‎Thu ‎Mar ‎23 ‎2017 10:07:03

    Start: MpSignatureUpdate()

    Update started

    Search Started (MU/WU update) (Path: Microsoft - Official Home Page)...

    Time Info - ‎Thu ‎Mar ‎23 ‎2017 10:12:41 Search Completed

    Update failed with hr: 0x80072ee2

    Search Started (HTTP) (Path: http://go.microsoft.com/fwlink/?Lin...2.0&prod=77BDAF73-B396-481F-9042-AD358843EC24)...

    Time Info - ‎Thu ‎Mar ‎23 ‎2017 10:13:44 Update failed with hr: 0x80072ee2

    Installation Completed

    Search Started (HTTP) (Path: http://go.microsoft.com/fwlink/?Lin...0.0&prod=77BDAF73-B396-481F-9042-AD358843EC24)...

    Time Info - ‎Thu ‎Mar ‎23 ‎2017 10:14:47 Update failed with hr: 0x80072ee2

    Installation Completed

    Update completed with hr: 0x80072ee2

    ERROR: Signature Update failed with hr=80072EE2

    MpCmdRun: End Time: ‎Thu ‎Mar ‎23 ‎2017 10:14:47

    -------------------------------------------------------------------------------------
     
    globalr, Jan 20, 2016
    #2
  3. KEVRJP
    Kevrjp Win User
    multiple MpCmdRun running

    So are you saying that it isn't normal?

    Anyway, since my original post this seems to have disappeared on its own, but my system is still so often completely unresponsive so I guess it was something else. I'm just going through everything to try to figure out why.
     
    Kevrjp, Jan 20, 2016
    #3
  4. ZTRUKER
    Ztruker Win User

    MpCmdRun runs permanently with massive log files

    Ztruker, Jan 21, 2016
    #4
  5. FEDUP10
    Fedup10 Win User
    Thanks Z - that's a good comprehensive link.
    I'd already got as far as AV being a likely cause.
    Having changed the way my AV is set up, I now have mPcmdrun log which tries at startup for about 4 minutes and then goes quiet.
    I'm happy enough with that.
    Anyone finding this thread should check Z's link above.
    Salve!
     
    Fedup10, Jan 21, 2016
    #5
  6. ZTRUKER
    Ztruker Win User
    What is your AV program? Maybe change to a different one or use the built in Windows Defender.
     
    Ztruker, Jan 23, 2016
    #6
  7. FEDUP10
    Fedup10 Win User
    This is getting ridiculous. I thought it was solved, in that it only ran briefly then stopped.
    However, it pleases itself by the day, and most of the time it just runs, and runs and runs......
    It's thick - why does it run at all, and why doesn't it stop?
    Meanwhile, most of the disk output on my machine is this stupid program generating Huge, pointless error logs.
    [Ztruker, thanks for your last - via 3 (separate) AVs, for interest. And no - why would I be forced to run as a defender a suite of programs which was this incompetent. If it's too stupid to get it's own settings right, why would anybody expect it to defend against competent programmers? ]
     
    Fedup10, Feb 17, 2016
    #7
  8. ZTRUKER
    Ztruker Win User

    MpCmdRun runs permanently with massive log files

    Sorry, I completely missed the fact this was from Defender.

    MpCmdRun: Command Line: "C:\Program Files\Windows Defender\mpcmdrun.exe" -wdenable

    is how Defender is enabled according to several posts I read. How about using a different AV program?
     
    Ztruker, Apr 4, 2018
    #8
Thema:

MpCmdRun runs permanently with massive log files

Loading...

  1. MpCmdRun runs permanently with massive log files - Similar Threads - MpCmdRun runs permanently

  2. Massive dberrors.log file

    in Windows 10 Software and Apps
    Massive dberrors.log file: I have discovered that in recant weeks a huge DBerrors.og file has been building up on my Windows 10 PC. It contains millions of messages of the form:2024-01-01 11:56:58.009; Error Type: Codebase; Error Severity: Error Description: Codebase Error=-310 80085, file=FTACCESSED,...

  3. Massive dberrors.log file

    in Windows 10 Network and Sharing
    Massive dberrors.log file: I have discovered that in recant weeks a huge DBerrors.og file has been building up on my Windows 10 PC. It contains millions of messages of the form:2024-01-01 11:56:58.009; Error Type: Codebase; Error Severity: Error Description: Codebase Error=-310 80085, file=FTACCESSED,...

  4. Massive dberrors.log file

    in Windows 10 Gaming
    Massive dberrors.log file: I have discovered that in recant weeks a huge DBerrors.og file has been building up on my Windows 10 PC. It contains millions of messages of the form:2024-01-01 11:56:58.009; Error Type: Codebase; Error Severity: Error Description: Codebase Error=-310 80085, file=FTACCESSED,...

  5. Sharepoint syn - massive delay - Windows events log file

    in Windows 10 Gaming
    Sharepoint syn - massive delay - Windows events log file: Hi All,How do I view the events log?The M365 team are suggesting taking a manual backup of Sharepoint, then reestablishing a Sharepoint sync "from scratch". Please forgive any knowledge gaps. They've advised this has a possibility of losing sharepoint data. We are therefore...

  6. Sharepoint syn - massive delay - Windows events log file

    in Windows 10 Software and Apps
    Sharepoint syn - massive delay - Windows events log file: Hi All,How do I view the events log?The M365 team are suggesting taking a manual backup of Sharepoint, then reestablishing a Sharepoint sync "from scratch". Please forgive any knowledge gaps. They've advised this has a possibility of losing sharepoint data. We are therefore...

  7. Sharepoint syn - massive delay - Windows events log file

    in Windows 10 BSOD Crashes and Debugging
    Sharepoint syn - massive delay - Windows events log file: Hi All,How do I view the events log?The M365 team are suggesting taking a manual backup of Sharepoint, then reestablishing a Sharepoint sync "from scratch". Please forgive any knowledge gaps. They've advised this has a possibility of losing sharepoint data. We are therefore...

  8. Microsoft 10 running massively slow

    in Windows 10 Gaming
    Microsoft 10 running massively slow: Cutting a long story short. I brought a new laptop, noticed windows was lagging and got online support for the laptop. They're fixing it as we speak. I'm trying to use my main computer gaming one and it's the same problem... .refuses to download anything..refuses updates....

  9. Microsoft 10 running massively slow

    in Windows 10 Software and Apps
    Microsoft 10 running massively slow: Cutting a long story short. I brought a new laptop, noticed windows was lagging and got online support for the laptop. They're fixing it as we speak. I'm trying to use my main computer gaming one and it's the same problem... .refuses to download anything..refuses updates....

  10. MpCmdRun file "SpyNetService -RestrictPrivileges -AccessKey..........

    in AntiVirus, Firewalls and System Security
    MpCmdRun file "SpyNetService -RestrictPrivileges -AccessKey..........: Hi, [am using windows 8.1] my laptop used to be continuously unable to update Defender after using the system restore [used restore to an earlier time to be able to update defender,as this proiblem occurs regardless] and then updating Defender,if i try again on another day i...

Users found this page by searching for:

  1. Likely that WDO was never run on this machine

    ,

  2. ERROR: CreateDirectoryW(C:\ProgramData\Microsoft\Windows Defender\Support\..\..\Microsoft Security Client\Support) failed (80070003)

    ,

  3. move MpCmdRun.log

    ,
  4. wdo was never run on this machine,
  5. failed (80070003). likely that wdo was never run on this machine,
  6. LocalService\AppData\Local\Temp\MpCmdRun.log,
  7. GetAppLayerLogsDir,
  8. info: createdirectoryw(c:\windows\microsoft antimalware\support) failed (80070003). likely that wdo was never run on this machine.getofflinescannersupportdir() failed (80070003). likely that wdo was never run on this machine.