Link to home
Start Free TrialLog in
Avatar of RandallXRam
RandallXRam

asked on

Lots of .tmp files in the root of local hard drives and network drives

I have noticed that the root of my hard drive and some network drives (usually the ones I use most) are full of .tmp files with names following a sequence. For example: 1A0.tmp, 1A2.tmp, 1A4.tmp .... 2C2.tmp, 2C4.tmp, etc ...

These files are created in groups of 10 or 15 at the same date and time.

I don't know what program or process is creating these files. I can easily delete them, but they are re-created.

I have scanned my computer several times trying to find a virus or spywares but I think my pc is cleaned.

I would like to know what is creating these files.

Thanks.
Avatar of Kenneniah
Kenneniah

Download Process Explorer from http://www.sysinternals.com/ntw2k/freeware/procexp.shtml

Run it, then go to Find|Find Handle...
Type in tmp and hit search.
Any tmp files currently in use should show up in the list and tell you what process is using them. If they aren't currently in use, it'd be very tough to find out what program is making them.
ASKER CERTIFIED SOLUTION
Avatar of rossfingal
rossfingal
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Filemon is good too, however it will only show the tmp file when it is actively read or written to. Process Explorer will show you the tmp file if there's an open handle to it, reguardless of whether it's actively being accessed at the moment.
Filemon would be best though, if there is not an open handle to the files currently. Just leave it running and  capturing file accesses while you use your computer normally, then come back to it later and see if and tmp files were accessed.
Damn typing, last "and" should be "any".
Avatar of RandallXRam

ASKER

Ok, both apps are very good for monitoring files.

Tmp files have not been created in the last two days. When they begin to be created I am going to monitor them.

I will let you know whatever I find.

Thanks.
Hopefully they help you out, finding out what is making those stupid files is always a pain :(
I understand the need for tmp files, but I wish more programmers would correctly delete them after use, or at the very least create them in the Temp folder instead of cluttering other areas.
Well, I finally found what process is creating these files.

It is vb6.exe, Visual Basic 6. For some reason, VB6 doesn't delete these files. It does not happen in Win98, but it happens in Windows XP. I still don't know how to stop this pest but at least I know who is the creator.

Thanks to everybody.