• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1183
  • Last Modified:

How to determine where temporary files are coming from?

My SBS 2003 server is generating massive (256MB) *.tmp files multiple times a day in the C:\Windows\temp directory.  This would not be a problem but those files are not automatically purging, and if I forget to clean them out they will consume all the free space on that partition.  How do I determine what application is generating these files?
0
jmwilsonsr
Asked:
jmwilsonsr
  • 4
  • 3
  • 3
1 Solution
 
mmarx82Commented:
The only way I know is to right click on the file > Properties > Security Tab > Click on Advanced > Owner Tab
This screen most of the time will show what user account created it.
0
 
Kruger_monkeyCommented:
Sometimes you can track it back tot he application based on the name.  What are these temp files naming conventions?

Tracking it back aside, I would schedule automatic cleanup of that folder nightly.  I had a similar problem, although I knew the application I couldn't get it to stop so I wrote a batch file to delete the files and stuck it in a schedule.  Tehre are also quite a few windows temp delettion utilities around.

Let us know about the name of the temp files.
0
 
jmwilsonsrAuthor Commented:
Thanks for the thought.  The owner is Administrator so that really doesn't help me track down the app.
0
[Webinar] Kill tickets & tabs using PowerShell

Are you tired of cycling through the same browser tabs everyday to close the same repetitive tickets? In this webinar JumpCloud will show how you can leverage RESTful APIs to build your own PowerShell modules to kill tickets & tabs using the PowerShell command Invoke-RestMethod.

 
mmarx82Commented:
You could write a batch file to do an automatic cleanup as suggested by Kruger monkey. Then you would use scheduled tasks to run the batch file.
 
del C:\Windows\temp\*.tmp /F /Q
0
 
jmwilsonsrAuthor Commented:
Naming convention of the temp files are "pbd9B3E.tmp" or "pbh9AE1.tmp". The files names vary only by pbdXXXX.tmp.  I did some searching for those file names but yielded little info.  I can schedule the clean up but I would like to know what is creating those files.
0
 
Kruger_monkeyCommented:
Are you running Trend Micro WFB?  I had a similar problem a while back with PDB temp files and it was my Trend Micro server taht was doing it.  I had a corruption and ended up re-installing. I forget the full details, but was defo pdb temp files.
0
 
jmwilsonsrAuthor Commented:
I am running Trend WFBS and am looking into those issue right now.  The interesting thing is that the file names all start with pbd not pdb.  Weird.
0
 
jmwilsonsrAuthor Commented:
Also, I installed the OH.exe application to see what processes are using the files but I cannot restart until tonight to get OH.exe to work.
0
 
Kruger_monkeyCommented:
PBD is the right file name, sorry not PDB typo.  Will be your trend that is doing it, what version of Trend are you running, are you up to date?

Check here to see what downloads/fixes there are for your version of Trend.

http://www.trendmicro.com/download/emea/?lng=emea

0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 4
  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now