Ultrop declared:
Ultrop asked about...:
Windows\system32\LogFiles\WMI\Trace.log
Back up the registry, then change the following key:
\HKEY_LOCAL_MACHINE\SYSTEM\
CurrentControlSet\Control\WMI\GlobalLogger\
Start = 0
Reboot.
This global logging is often triggered by BOOTVIS, and this triggers NT
Kernel Logger, even after Bootvis has been uninstalled. Just run BOOTVIS if
you have it and then stop the tracing, but often that won't stop the NT
Kernel Logger...
A more complicated fix if you know what you are doing :
During boot, press F8 twice to get startup options.
Select safe mode, with command prompt
log -on as administrator
At the prompt, navigate to Windows\system32\logfiles\wmi\trace.log
(you still can't delete the file at this stage.)
use the command "attrib +r trace.log" without the quotes
(this stops windows altering this file anymore, by adding read only)
Restart windows normally
Go to the file in file-manager/explorer
Delete the file
Create a new trace.log file (using notepad, and save it in the same
directory where you deleted the original)
right click the file, and change attributes to read only
You should now have a file, sized 0 Kb, which can't be changed...
