Hi,
Yea I was hopping sam.. would return he is a good person to figure this out.
Could be Oracle/ skype/ QuickTime sludge ?
I did the same instructions and did not have any of those although I'm not surprised seeing I have none of these programs/ utilities installed.
Process Monitor should be able to tell you which app is creating those tmp folders.
Let me know if you want to try using Process Monitor and I'll suggest some settings.
Yes, I would like to try that and would appreciate your suggestions before I do.
Regarding another commentator regarding Safe Mode. No, as I want to actually delete all these empty folders, SM will not allow that so it would not help. As I wrote, I can delete each folder (they are ALL empty!) with a complicated method of changing properties and permissions individually and then deleting. You can imagine the length of time that takes
(Incidentally, I have XP installed on the computer on an old hard drive. If I boot to that one then I can see the Win 7 hard drive. But it won't allow me to cheat and delete the folders through XP)
If the PM tool works for me then that would be ideal as I can then track down why these folder started to appear a year or so ago.
Process Monitor downloads as a zip file.
Open the zip file and copy its contents to a folder of your choice.
Double click on Procmon.exe
Starting with the leftmost icon*, click on each of the icons shown/highlighted below:
*starts/stops data collection
The window should look like this...
...with only the one (File System Activity) icon selected:
Add a Filter as shown below.
Change the Backing Files:
You can use any existing folder that you want.
The name of the file (TEST.PML) is not important.
As you use Process Monitor, you might see this:
It is okay to say yes.
Start the data collection using the left most icon highlighted in the first screenshot.
Move Process Monitor's window off to the side and use your computer as you normally would. If rows of info show in Process Monitor's window, then the app(s) listed in the column named Process Name might be the app that created to TMP folder. You might also see entries for your antivirus app as it watches the newly created folder.
I originally tried a filter of TEMP\*.TMP, but could not get wildcards to work.
Also Process Monitor crashed a lot in my unpatched virtual machine, but not in my patched host computer.
This screenshot shows Process Monitor's entries when I used Windows (file) Explorer to create a test TMP folder.
I'm wondering if those pesky TMPs can be deleted by booting Puppy Linux and using its file manager.
edit: I did not notice (until now) that these TMP folders were in the root of the C drive.
Unlocker won't help much there.
You can delete the entire TEMP folder. It will be rebuilt when you reboot.
Install Unlocker.
(See this post.)
Restart the computer.
Navigate to the user TEMP folder via Windows (file) Explorer.
Right click on that TEMP folder and select Unlocker from the context menu.
IF (and only IF) Explorer is the only app* locking that user TEMP folder, then:
...select Delete from the drop down menu in the lower left part of the window
...click on the button named Unlock All.
Restart the computer to rebuild that TEMP folder.
* Let us know if other apps are already locking that TEMP folder so soon after a reboot.
Last edited by UsernameIssues; 14 Aug 2016 at 12:17.
The empty folders are in the root of the hard drive - see earlier screenshot. They are named as, for example, MSI7c017.tmp . It is the folder name that has the .tmp included - not a file!
You can delete the entire TEMP folder. It will be rebuilt when you reboot.
Install Unlocker.
(See this post.)
Restart the computer.
Navigate to the user TEMP folder via Windows (file) Explorer.
Right click on that TEMP folder and select Unlocker from the context menu.
IF (and only IF) Explorer is the only app* locking that user TEMP folder, then:
...select Delete from the drop down menu in the lower left part of the window
...click on the button named Unlock All.
Restart the computer to rebuild that TEMP folder.
* Let us know if other apps are already locking that TEMP folder so soon after a reboot.
I went through the process you spelt out in full. No problems.
Then I made the test file as described in your last step and got the warning as in the screenshot attached. NOT like your last screenshot.
Start the data collection using the left most icon highlighted in the first screenshot.
Move Process Monitor's window off to the side and use your computer as you normally would. If rows of info show in Process Monitor's window, then the app(s) listed in the column named Process Name might be the app that created to TMP folder. You might also see entries for your antivirus app as it watches the newly created folder.
I originally tried a filter of TEMP\*.TMP, but could not get wildcards to work.
Also Process Monitor crashed a lot in my unpatched virtual machine, but not in my patched host computer.
This screenshot shows Process Monitor's entries when I used Windows (file) Explorer to create a test TMP folder.
Over in BleepingComputer forum, a couple of the best techs in BC, for software problems such as these, often have the thred-starter download, install, and run MiniToolBox [with only reporting items checked at first] and Piriform's Speccy. Even though I'm not even close to their reading of, analyzing of, the MiniToolBox log and the "published URL" of the Speccy log, I'm beginning to suspect a set of programs and/or a set of utilities running both in the background and in the foregound are causing this mysterious folder and files.
Your final sentence gave me an idea!
I tried many different searches using keywords that might better target the problem. In the end I came up with a single reference that looks to be a possible answer. I will try it myself after a couple of days (Too busy to do it straight away) but here is the link for you to read and see what you think.
(My System Variables do not look like their example code.)
windows installer (msi) create unwant .tmp folder on root of - Microsoft Community
Quote
