Every hour I get a failed installation attempt seemingly from "aria"?

670 Views 8 Replies 3 Participants Last post by louiswindsor, 14 d ago

louiswindsor

Discussion Starter · 16 d ago

This is the log entry....

"2023-05-14 18:40:52.286|00014420|
C:\build\aria-cpp-v1\clienttelemetry\src\LogManagerImpl.cpp(626): class Microsoft::Applications::Telemetry::ILogger *__thiscall Microsoft::Applications::Telemetry::LogManagerImpl::Initialize(const class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > &,const struct Microsoft::Applications::Telemetry::LogConfiguration &) WARNING: Invalid in-ram queue size (20971520), adjusted to max ram queue size"

This started a couple of days ago

Googling this I see it's some kind of downloading program!? Needless to say I didn't attempt to download it at any time so it has been initiated by some application I am using

Should I be worried? Should I try and stop it? Can I stop it?

Rectangle Font Parallel Circle Paper product

Above are a couple of the failed messages....

Makes me wonder - if it is legit why does it fail? If not legit - thanks heavens it fails

Thoughts?

🥴🙏

See less See more

Save

1 - 9 of 9 Posts

spunk.funk

· #2 · 15 d ago

Go to App and Features and look for any apps that may be a Downloader program you don't use and uninstall it.
What Browser are you using? Go to the Browsers settings to Extensions and see if there is a Downloader app there, if so, Remove or Disable it.
Browse to that path in the error message (ie) C:\Users\Louis\AppData\Local\Temp and manually Delete the file utt.A659.tmp Being a Temp file, it should not affect your computer.

Save

Reactions: 1

louiswindsor

Discussion Starter · #3 · 15 d ago

spunk.funk said:
Go to App and Features and look for any apps that may be a Downloader program you don't use and uninstall it.
What Browser are you using? Go to the Browsers settings to Extensions and see if there is a Downloader app there, if so, Remove or Disable it.
Browse to that path in the error message (ie) C:\Users\Louis\AppData\Local\Temp and manually Delete the file utt.A659.tmp Being a Temp file, it should not affect your computer.

Thanks for your response 🙏

I went to Apps & Features and can see nothing like "aria" in there nor anything that looked like a download process

I use Firefox AND Opera simultaneously and checked both their extensions loaded and again I can't see anything there

There were hourly utt.****.tmp files and a logfile and I always delete them all but they re-appear hourly always with different filenames

( In fact, I made a System Image and deleted ALL deleteable files in the Temp folder

)

Is it possible this is something malicious or just a benign helper App spawned by some other App?

Again, Thanks

Save

spunk.funk

· #4 · 15 d ago

The next step would be to search for the file in the Registry and delete it from there.
Go to Start/Search and type Regedit and press Enter.
Backup Your Registry https://www.lifewire.com/how-to-back-up-the-windows-registry-2625146 and or have a current image file of your computer saved on another drive.
In the Registry, go up to Toolbar to Edit/Find/Find What type utt.A659.tmp and choose Find Next.
The Registry will search, when it stops on an item, 1. press the Del key to delete the item, 2. press Enter to confirm the deletion and 3. press F3 to continue searching.
Do these last 3 steps until you get the message, Finished Searching the Registry, Restart and you shouldn't see it again.

Save

louiswindsor

Discussion Starter · #5 · 15 d ago

spunk.funk said:
The next step would be to search for the file in the Registry and delete it from there.
Go to Start/Search and type Regedit and press Enter.
Backup Your Registry https://www.lifewire.com/how-to-back-up-the-windows-registry-2625146 and or have a current image file of your computer saved on another drive.
In the Registry, go up to Toolbar to Edit/Find/Find What type utt.A659.tmp and choose Find Next.
The Registry will search, when it stops on an item, 1. press the Del key to delete the item, 2. press Enter to confirm the deletion and 3. press F3 to continue searching.
Do these last 3 steps until you get the message, Finished Searching the Registry, Restart and you shouldn't see it again.

Sorry, searched for half a dozen different filenames (in the registry) and couldn't find any

Also searched for "aria" and found LOTS.... Anything with "variable" or "variant"

Searched just for "utt" found things like "button" etc etc

Thanks for the suggestion

Save

Corday

· #6 · 15 d ago

Run: %localappdata%\Microsoft\OneDrive\onedrive.exe /reset Then Run: %localappdata%\Microsoft\OneDrive\onedrive.exe

Save

louiswindsor

Discussion Starter · #7 · 14 d ago

Corday said:
Run: %localappdata%\Microsoft\OneDrive\onedrive.exe /reset Then Run: %localappdata%\Microsoft\OneDrive\onedrive.exe

Okay.... Run them both and got this message....

Rectangle Font Parallel Screenshot Electric blue

Now to wait 56 minutes to see if the error occurs again?????

TIA

Louis

See less See more

Save

spunk.funk

· #8 · 14 d ago

If this happens regularly on schedule (ie) every 56 minutes, check in the Task Scheduler to see if some app is scheduled to run that has been removed from the system.

Save

louiswindsor

Discussion Starter · #9 · 14 d ago

spunk.funk said:
If this happens regularly on schedule (ie) every 56 minutes, check in the Task Scheduler to see if some app is scheduled to run that has been removed from the system.

Thank you for your continuing help 🙏

The process runs at HH:51 on every hour. I've looked in the Task Scheduler and there is nothing (that I can see) that looks like doing this???? I can't see anything that looks like "aria" and I don't know what else to look for

It seems strange that nobody else is seeing this happen to them???? I can't imagine I'm the only one this is happening to?

👎

Thanks again

Save

1 - 9 of 9 Posts

Top Contributors this Month