Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 441
  • Last Modified:

Lots of .tmp files in the root of local hard drives and network drives

I have noticed that the root of my hard drive and some network drives (usually the ones I use most) are full of .tmp files with names following a sequence. For example: 1A0.tmp, 1A2.tmp, 1A4.tmp .... 2C2.tmp, 2C4.tmp, etc ...

These files are created in groups of 10 or 15 at the same date and time.

I don't know what program or process is creating these files. I can easily delete them, but they are re-created.

I have scanned my computer several times trying to find a virus or spywares but I think my pc is cleaned.

I would like to know what is creating these files.

Thanks.
0
RandallXRam
Asked:
RandallXRam
  • 5
  • 2
1 Solution
 
KenneniahCommented:
Download Process Explorer from http://www.sysinternals.com/ntw2k/freeware/procexp.shtml

Run it, then go to Find|Find Handle...
Type in tmp and hit search.
Any tmp files currently in use should show up in the list and tell you what process is using them. If they aren't currently in use, it'd be very tough to find out what program is making them.
0
 
rossfingalCommented:
Try using "Filemon" from Sysinternals:
http://www.sysinternals.com/files/NTFILMON.ZIP

RF
0
 
KenneniahCommented:
Filemon is good too, however it will only show the tmp file when it is actively read or written to. Process Explorer will show you the tmp file if there's an open handle to it, reguardless of whether it's actively being accessed at the moment.
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 
KenneniahCommented:
Filemon would be best though, if there is not an open handle to the files currently. Just leave it running and  capturing file accesses while you use your computer normally, then come back to it later and see if and tmp files were accessed.
0
 
KenneniahCommented:
Damn typing, last "and" should be "any".
0
 
RandallXRamAuthor Commented:
Ok, both apps are very good for monitoring files.

Tmp files have not been created in the last two days. When they begin to be created I am going to monitor them.

I will let you know whatever I find.

Thanks.
0
 
KenneniahCommented:
Hopefully they help you out, finding out what is making those stupid files is always a pain :(
I understand the need for tmp files, but I wish more programmers would correctly delete them after use, or at the very least create them in the Temp folder instead of cluttering other areas.
0
 
RandallXRamAuthor Commented:
Well, I finally found what process is creating these files.

It is vb6.exe, Visual Basic 6. For some reason, VB6 doesn't delete these files. It does not happen in Win98, but it happens in Windows XP. I still don't know how to stop this pest but at least I know who is the creator.

Thanks to everybody.
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

  • 5
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now