I keep getting SQM files and IIS logs (HTTPERR).

Recently I keep finding httperr log (categorized as IIS file) or SQM (ex: fwtsqmfile00.sqm) data files in several computers of mine when I try to clean up the temp folder, etc.

The location of the said log file is "C:\Windows\System32\LogFiles\HTTPERR\HTTPERR1.log"

I have Windows 7.

I have checked through the control panel's "windows feature on/off" and none of the "internet information services (IIS)" categories are ticked on.

I have opted out of the "Customer Experience Improvement Program" (both through the action center UI & task scheduler)- which is described to use and send these SQM files.

I have also disabled several tasks in the task scheduler that I suspected were related to data collecting/tracing for the purposes of sending them to Microsoft- including the task "Autocheck" which is named "Proxy" and described as- "This task collects and uploads autochk SQM data if opted-in to the Microsoft Customer Experience Improvement Program" (which I am not).

I have also jotted down on a note- "rundll32.exe/ d acproxy.dll" (I wrote it down but do not recall how or where I found these in my machines). If memory serves me right, I also recall seeing certain file named proxygen.cs or something of that nature, ending in ".cs". As far as "rundll32.exe," considering that it is not always actively running, I wouldn't know how to check for its legitimacy or what's triggering it.

So in conclusion I have opted-out/disabled any data collecting or forwarding but am still seeing SQM files or HTTPERR logs created now and then. This may just be coincidence, but after disabling certain task for one of my computers and thus temporarily ridding it of SQM files or HTTPERR logs, I have soon witnessed them show up on another machine that I usually do not find them. Once again, this may simply be a coincidence but it almost felt as if it were a related incident, leading me to wonder where the supposed problem truly lies.

At the moment I do not find the httperr/IIS log or SQM files as frequently, but that doesn't mean that what I have done guarantees that my machines are free of error/ possible threat or that the said log/files won't comeback.

These things seem to happen to several of my computers recently, past month or so.

If opting out of "Customer Experience Improvement Program" doesn't prevent SQM files or server logs from being created- could anything else ranging from Microsoft/ISP router/Virus to possible network hacking cause this phenomenon?

I haven't found any virus or malware, at least according to my programs, but I am still genuinely worried.

Continue reading...