Hi,
I currently have an issue where a 2012 Server is filling its C: drive while running full scans.
Files are created in C:\Windows\Temp with the prefix TMP00000 and no extension. These seem to grow in size until they are filling the remaining free space (~40GB) and then once it hits ~100MB free it deletes the file.
Procmon tells me that the MsMpEng.exe is creating and writing to this file.
Can anyone tell me why it is creating these files and why it is trying to use all remaining free space? I cant see any configuration to allow me to change from C:\Windows\Temp (I can only assume its using the %temp% variable).
I notice that while the file is filling up and eating free space, the Item listed on the SCEP console is still changing so it doesn't appear to be getting stuck on a single file. I also note that there are no entries listed in the Event viewer either.
Thanks
Alex