My firewall/HIPS, about 3-4 minutes after every boot, says that WMIAcerCheck.exe is trying to create files in a protected area (or something close to that). As a result, I start researching. It appears that every time this happens, a new folder is created...an example:
C:\Windows\Temp\{2643B1E2-6E07-4556-948C-47B8407DCD5D}\{7F811A54-5A09-4579-90E1-C93498E230D9}
The {numbers inside the FIRST {braces} change every time; second set (7F81...) is always the same}. Every so often, I delete all of these WMIAcerCheck files in the {} folders, but not the folders. Right now I have 11 created since last cleanup.
The folder contains:
Directory of C:\Windows\Temp\{2643B1E2-6E07-4556-948C-47B8407DCD5D}\{7F811A54-5A09-4579-90E1-C93498E230D9}
01/20/2006 02:42 PM 7,549 Acer EULA.txt
06/21/2006 05:38 PM 122,947 check_process.dll
03/07/2006 12:55 PM 1,168 default.pal
06/18/2008 07:50 PM 39 FontData.ini
03/17/2008 01:12 PM 10,509 Gateway EULA.txt
05/06/2008 10:28 AM 311,296 HidChk.exe
04/28/2007 12:10 AM 222,144 isrt.dll
01/13/2005 02:46 PM 284 license.txt
06/18/2008 07:50 PM 278,378 setup.inx
05/13/2008 01:39 PM 1,116 setup.iss
06/18/2008 07:50 PM 10,117 StringTable-0009-English.ips
03/28/2008 08:22 PM 3,200,960 vcredist_x64_SP1.exe
02/18/2007 09:06 PM 2,723,264 vcredist_x86.exe
11/02/2006 12:34 AM 318,464 wimgapi.dll
03/13/2008 11:35 AM 20,480 WMIAcerCheck.exe
04/28/2007 12:10 AM 108,480 _IsRes.dll
06/18/2008 07:50 PM 12,288 _ISUser.dll
At the same time, a file with name of the nature: WMIACERCHECK.EXE-219544D5.pf, is placed in \Windows\Prefetch with size from 17 to 38KB.
I have deleted all copies of WMIAcerCheck that I can find in the computer. I have deleted all values from the registry that have WMIAcerCheck in them. Still, the computer keeps doing this. The file and phenomenon appear out of nowhere.
I believe this has something to do with Gateway Recovery Management (which currently fails--when run is attempted, says "Acer eRecovery Management UI has stopped working"...(check for solution...or close the program).
How can I make the machine quit making new folders/files every day/boot?
C:\Windows\Temp\{2643B1E2-6E07-4556-948C-47B8407DCD5D}\{7F811A54-5A09-4579-90E1-C93498E230D9}
The {numbers inside the FIRST {braces} change every time; second set (7F81...) is always the same}. Every so often, I delete all of these WMIAcerCheck files in the {} folders, but not the folders. Right now I have 11 created since last cleanup.
The folder contains:
Directory of C:\Windows\Temp\{2643B1E2-6E07-4556-948C-47B8407DCD5D}\{7F811A54-5A09-4579-90E1-C93498E230D9}
01/20/2006 02:42 PM 7,549 Acer EULA.txt
06/21/2006 05:38 PM 122,947 check_process.dll
03/07/2006 12:55 PM 1,168 default.pal
06/18/2008 07:50 PM 39 FontData.ini
03/17/2008 01:12 PM 10,509 Gateway EULA.txt
05/06/2008 10:28 AM 311,296 HidChk.exe
04/28/2007 12:10 AM 222,144 isrt.dll
01/13/2005 02:46 PM 284 license.txt
06/18/2008 07:50 PM 278,378 setup.inx
05/13/2008 01:39 PM 1,116 setup.iss
06/18/2008 07:50 PM 10,117 StringTable-0009-English.ips
03/28/2008 08:22 PM 3,200,960 vcredist_x64_SP1.exe
02/18/2007 09:06 PM 2,723,264 vcredist_x86.exe
11/02/2006 12:34 AM 318,464 wimgapi.dll
03/13/2008 11:35 AM 20,480 WMIAcerCheck.exe
04/28/2007 12:10 AM 108,480 _IsRes.dll
06/18/2008 07:50 PM 12,288 _ISUser.dll
At the same time, a file with name of the nature: WMIACERCHECK.EXE-219544D5.pf, is placed in \Windows\Prefetch with size from 17 to 38KB.
I have deleted all copies of WMIAcerCheck that I can find in the computer. I have deleted all values from the registry that have WMIAcerCheck in them. Still, the computer keeps doing this. The file and phenomenon appear out of nowhere.
I believe this has something to do with Gateway Recovery Management (which currently fails--when run is attempted, says "Acer eRecovery Management UI has stopped working"...(check for solution...or close the program).
How can I make the machine quit making new folders/files every day/boot?