Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Determine which program is creating files in the %temp% directory


  • Please log in to reply
3 replies to this topic

#1 froghog

froghog

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:05:45 PM

Posted 25 November 2014 - 03:49 PM

Have a Windows 7 computer with almost 300,000 files in the %temp% dir and wanted to know if anyone had a suggestion on how to determine which program is creating all these files.  Looked under properties and didn't see any info, but maybe there is a way to generate a log of which file writes to the directory?

Any help you could provide would be appreciated.  Thanks.



BC AdBot (Login to Remove)

 


#2 aharonov

aharonov

  • Malware Response Team
  • 2,441 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:45 AM

Posted 25 November 2014 - 04:06 PM

Sysinternals Process Monitor can help you identify which processes create files in your temp directory. You have to set an appropriate filter so that you don't drown in the vast amount of log data.

#3 hamluis

hamluis

    Moderator


  • Moderator
  • 56,302 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:07:45 PM

Posted 25 November 2014 - 04:19 PM

Since none of those files are essential...and should have been deleted upon reboot...rather than tracking such, I find it expedient to just use something like TFC periodically.

 

Louis



#4 mitchmorgan

mitchmorgan

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cherry Hill, NJ
  • Local time:07:45 PM

Posted 26 November 2014 - 10:48 AM

I was having this problem too.  It started sometime in October.  By the middle of November I had hundreds of thousands of folders (and millions of files) in AppData\Local\Temp with names like 17ec, 3b60, 49b4 and so on.  Most of them had the following subfolders:

17ec

AppData

Local

Microsoft

Windows

History

Roaming

Microsoft

Windows

 

My computer was hopelessly slow and churning constantly, creating multiple new folders every minute or so.  One day I spent a few hours deleting all of them, a screenful at a time.  By the next day there were 24,000 new folders, containing over 150,000 files!

 

I ended up installing Bitdefender Internet Security 2015 about a week ago.  The churning has stopped, and the pc is fast again.  The package has a tool for deleting files from %Temp%, and it works instantly.  I haven't checked it in the last few days, but I don't think the Temp folders are being created any more.  So far I am very impressed with Bitdefender.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users