IMG-nnnnnnnn.tmp files

Franc Zabkar · Aug 25, 2007

My TEMP directory contains files of the type IMG-nnnnnnnn.tmp.

E:\Temp\IMG-22EF1586.tmp
E:\Temp\IMG-04044202.tmp
E:\Temp\IMG-14B5B6BB.tmp
E:\Temp\IMG-19EE2C4D.tmp
E:\Temp\IMG-00000000.tmp
E:\Temp\IMG-28CAE025.tmp
E:\Temp\IMG-2FA581AC.tmp
E:\Temp\IMG-55F8C5A0.tmp
E:\Temp\IMG-6E36D60E.tmp

Their lengths are either 508,196 or 106,568 bytes. The larger files
appear to consist of 337 blocks containing 1506 C0h bytes plus two
zero bytes. The last block sometimes contains what looks like a file
remnant, either text or binary. The smaller files consist of 173
blocks containing 615 C0h bytes plus one zero byte.

If I delete these files, they will reappear the following day, some
with the same name. I have no idea which application is generating
them except to say that sometimes they appear after using Winzip. They
do not appear after a reboot.

Here is a sample:
http://www.users.on.net/~fzabkar/IMG.zip (6KB)

Is this a Win98 thing? BTW I'm not using any "IMaGe" software when
this happens.

I used the Find Files or Folders function to search my C: drive for
files containing "IMG-", but found nothing of interest.

- Franc Zabkar
--
Please remove one 'i' from my address when replying by email.

Gary S. Terhune · Aug 25, 2007

Let us know when you figure it out, Franc, <g&d>.

--
Gary S. Terhune
MS-MVP Shell/User
www.grystmill.com

"Franc Zabkar" <fzabkar@iinternode.on.net> wrote in message
news:vva1d3tvr9bvmk0qb0m056jgbs1tcg88br@4ax.com...
> My TEMP directory contains files of the type IMG-nnnnnnnn.tmp.
>
> E:\Temp\IMG-22EF1586.tmp
> E:\Temp\IMG-04044202.tmp
> E:\Temp\IMG-14B5B6BB.tmp
> E:\Temp\IMG-19EE2C4D.tmp
> E:\Temp\IMG-00000000.tmp
> E:\Temp\IMG-28CAE025.tmp
> E:\Temp\IMG-2FA581AC.tmp
> E:\Temp\IMG-55F8C5A0.tmp
> E:\Temp\IMG-6E36D60E.tmp
>
> Their lengths are either 508,196 or 106,568 bytes. The larger files
> appear to consist of 337 blocks containing 1506 C0h bytes plus two
> zero bytes. The last block sometimes contains what looks like a file
> remnant, either text or binary. The smaller files consist of 173
> blocks containing 615 C0h bytes plus one zero byte.
>
> If I delete these files, they will reappear the following day, some
> with the same name. I have no idea which application is generating
> them except to say that sometimes they appear after using Winzip. They
> do not appear after a reboot.
>
> Here is a sample:
> http://www.users.on.net/~fzabkar/IMG.zip (6KB)
>
> Is this a Win98 thing? BTW I'm not using any "IMaGe" software when
> this happens.
>
> I used the Find Files or Folders function to search my C: drive for
> files containing "IMG-", but found nothing of interest.
>
> - Franc Zabkar
> --
> Please remove one 'i' from my address when replying by email.

PA Bear · Aug 25, 2007

What's the E: drive, Frank? Is Windows installed on it?

Franc Zabkar wrote:
> My TEMP directory contains files of the type IMG-nnnnnnnn.tmp.
>
> E:\Temp\IMG-22EF1586.tmp
> E:\Temp\IMG-04044202.tmp
> E:\Temp\IMG-14B5B6BB.tmp
> E:\Temp\IMG-19EE2C4D.tmp
> E:\Temp\IMG-00000000.tmp
> E:\Temp\IMG-28CAE025.tmp
> E:\Temp\IMG-2FA581AC.tmp
> E:\Temp\IMG-55F8C5A0.tmp
> E:\Temp\IMG-6E36D60E.tmp
>
> Their lengths are either 508,196 or 106,568 bytes. The larger files
> appear to consist of 337 blocks containing 1506 C0h bytes plus two
> zero bytes. The last block sometimes contains what looks like a file
> remnant, either text or binary. The smaller files consist of 173
> blocks containing 615 C0h bytes plus one zero byte.
>
> If I delete these files, they will reappear the following day, some
> with the same name. I have no idea which application is generating
> them except to say that sometimes they appear after using Winzip. They
> do not appear after a reboot.
>
> Here is a sample:
> http://www.users.on.net/~fzabkar/IMG.zip (6KB)
>
> Is this a Win98 thing? BTW I'm not using any "IMaGe" software when
> this happens.
>
> I used the Find Files or Folders function to search my C: drive for
> files containing "IMG-", but found nothing of interest.
>
> - Franc Zabkar

PCR · Aug 26, 2007

"Franc Zabkar" <fzabkar@iinternode.on.net> wrote in message
news:vva1d3tvr9bvmk0qb0m056jgbs1tcg88br@4ax.com
| My TEMP directory contains files of the type IMG-nnnnnnnn.tmp.
|
| E:\Temp\IMG-22EF1586.tmp
| E:\Temp\IMG-04044202.tmp
| E:\Temp\IMG-14B5B6BB.tmp
| E:\Temp\IMG-19EE2C4D.tmp
| E:\Temp\IMG-00000000.tmp
| E:\Temp\IMG-28CAE025.tmp
| E:\Temp\IMG-2FA581AC.tmp
| E:\Temp\IMG-55F8C5A0.tmp
| E:\Temp\IMG-6E36D60E.tmp
|
| Their lengths are either 508,196 or 106,568 bytes. The larger files
| appear to consist of 337 blocks containing 1506 C0h bytes plus two
| zero bytes. The last block sometimes contains what looks like a file
| remnant, either text or binary. The smaller files consist of 173
| blocks containing 615 C0h bytes plus one zero byte.
|
| If I delete these files, they will reappear the following day, some
| with the same name. I have no idea which application is generating
| them except to say that sometimes they appear after using Winzip. They
| do not appear after a reboot.
|
| Here is a sample:
| http://www.users.on.net/~fzabkar/IMG.zip (6KB)
|
| Is this a Win98 thing? BTW I'm not using any "IMaGe" software when
| this happens.
|
| I used the Find Files or Folders function to search my C: drive for
| files containing "IMG-", but found nothing of interest.

I certainly have never seen anything like that, but I rarely use WinZip
to actually create archives. But I tend to doubt WinZip would be so
sloppy!

You can monitor what accesses any partition with...

http://www.pcmag.com/ 's DiskAction

It isn't infallible, though, & will sometimes detect an access & be
unable to name the app that did it. Did you move TEMP to E

artition?

| - Franc Zabkar
| --
| Please remove one 'i' from my address when replying by email.

--
Thanks or Good Luck,
There may be humor in this post, and,
Naturally, you will not sue,
Should things get worse after this,
PCR
pcrrcp@netzero.net

Ingeborg · Aug 26, 2007

Franc Zabkar wrote:

> My TEMP directory contains files of the type IMG-nnnnnnnn.tmp.
>
> E:\Temp\IMG-22EF1586.tmp
> E:\Temp\IMG-04044202.tmp
> E:\Temp\IMG-14B5B6BB.tmp
> E:\Temp\IMG-19EE2C4D.tmp
> E:\Temp\IMG-00000000.tmp
> E:\Temp\IMG-28CAE025.tmp
> E:\Temp\IMG-2FA581AC.tmp
> E:\Temp\IMG-55F8C5A0.tmp
> E:\Temp\IMG-6E36D60E.tmp
>
> Their lengths are either 508,196 or 106,568 bytes. The larger files
> appear to consist of 337 blocks containing 1506 C0h bytes plus two
> zero bytes. The last block sometimes contains what looks like a file
> remnant, either text or binary. The smaller files consist of 173
> blocks containing 615 C0h bytes plus one zero byte.
>
> If I delete these files, they will reappear the following day, some
> with the same name. I have no idea which application is generating
> them except to say that sometimes they appear after using Winzip. They
> do not appear after a reboot.
>
> Here is a sample:
> http://www.users.on.net/~fzabkar/IMG.zip (6KB)
>
> Is this a Win98 thing? BTW I'm not using any "IMaGe" software when
> this happens.
>
> I used the Find Files or Folders function to search my C: drive for
> files containing "IMG-", but found nothing of interest.

You can use Filemon to find out which process create this files.
<http://www.microsoft.com/technet/sysinternals/FileAndDisk/Filemon.mspx>

Use of a proper filter ('E:\Temp\IMG' in this case, I think) is advised,
else you will get an awful lot of data.

Franc Zabkar · Aug 26, 2007

On Sat, 25 Aug 2007 19:23:21 -0400, "PA Bear" <PABearMVP@gmail.com>
put finger to keyboard and composed:

>What's the E: drive, Frank? Is Windows installed on it?

E: contains data, documents, Internet downloads, and backups.

D: is a removable drive that I use for transferring backups to my
other machine.

Windows is confined to the C: drive.

BTW, I now have more of the same types of files, but each has a size
of 0 bytes. Even after exiting all my applications, any attempt to
delete these files results in an "access denied" error.

>Franc Zabkar wrote:
>> My TEMP directory contains files of the type IMG-nnnnnnnn.tmp.
>>
>> E:\Temp\IMG-22EF1586.tmp
>> E:\Temp\IMG-04044202.tmp

- Franc Zabkar
--
Please remove one 'i' from my address when replying by email.

Franc Zabkar · Aug 26, 2007

On Sun, 26 Aug 2007 12:24:30 -0500, Ingeborg <a@b.invalid> put finger
to keyboard and composed:

>You can use Filemon to find out which process create this files.
><http://www.microsoft.com/technet/sysinternals/FileAndDisk/Filemon.mspx>
>
>Use of a proper filter ('E:\Temp\IMG' in this case, I think) is advised,
>else you will get an awful lot of data.

I beat you to it.

So far it hasn't trapped anything.

- Franc Zabkar
--
Please remove one 'i' from my address when replying by email.

Franc Zabkar · Aug 26, 2007

On Sun, 26 Aug 2007 02:49:47 -0400, "PCR" <pcrrcp@netzero.net> put
finger to keyboard and composed:

>"Franc Zabkar" <fzabkar@iinternode.on.net> wrote in message
>news:vva1d3tvr9bvmk0qb0m056jgbs1tcg88br@4ax.com
>| My TEMP directory contains files of the type IMG-nnnnnnnn.tmp.
>|
>| E:\Temp\IMG-22EF1586.tmp
>| E:\Temp\IMG-04044202.tmp
>| E:\Temp\IMG-14B5B6BB.tmp
>| E:\Temp\IMG-19EE2C4D.tmp
>| E:\Temp\IMG-00000000.tmp
>| E:\Temp\IMG-28CAE025.tmp
>| E:\Temp\IMG-2FA581AC.tmp
>| E:\Temp\IMG-55F8C5A0.tmp
>| E:\Temp\IMG-6E36D60E.tmp
>|
>| Their lengths are either 508,196 or 106,568 bytes. The larger files
>| appear to consist of 337 blocks containing 1506 C0h bytes plus two
>| zero bytes. The last block sometimes contains what looks like a file
>| remnant, either text or binary. The smaller files consist of 173
>| blocks containing 615 C0h bytes plus one zero byte.
>|
>| If I delete these files, they will reappear the following day, some
>| with the same name. I have no idea which application is generating
>| them except to say that sometimes they appear after using Winzip. They
>| do not appear after a reboot.
>|
>| Here is a sample:
>| http://www.users.on.net/~fzabkar/IMG.zip (6KB)
>|
>| Is this a Win98 thing? BTW I'm not using any "IMaGe" software when
>| this happens.
>|
>| I used the Find Files or Folders function to search my C: drive for
>| files containing "IMG-", but found nothing of interest.
>
>I certainly have never seen anything like that, but I rarely use WinZip
>to actually create archives. But I tend to doubt WinZip would be so
>sloppy!
>
>You can monitor what accesses any partition with...
>
>http://www.pcmag.com/ 's DiskAction
>
>It isn't infallible, though, & will sometimes detect an access & be
>unable to name the app that did it.

Thanks, but it seems that all the PCMag utilities are no longer
freeware. :-(

Instead I'm trying Filemon from Sysinternals:

http://download.sysinternals.com/Files/Filemon.zip

>Did you move TEMP to E

artition?

Yes, I have the following statements in my config.sys file:

set tmpdir=C:\win98se\temp
if exist d:\tempflag set tmpdir=D:\temp
if exist e:\tempflag set tmpdir=E:\temp
set temp=%tmpdir%
set tmp=%tmpdir%
set tmpdir=

Note that D: is a removable drive. When it is not installed, drive E:
becomes drive D:.

- Franc Zabkar
--
Please remove one 'i' from my address when replying by email.

PCR · Aug 26, 2007

"Franc Zabkar" <fzabkar@iinternode.on.net> wrote in message
news:8mr3d3t956claj91p89bijlogtomuu39h4@4ax.com
| On Sun, 26 Aug 2007 02:49:47 -0400, "PCR" <pcrrcp@netzero.net> put
| finger to keyboard and composed:
|
|>"Franc Zabkar" <fzabkar@iinternode.on.net> wrote in message
|>news:vva1d3tvr9bvmk0qb0m056jgbs1tcg88br@4ax.com
|>| My TEMP directory contains files of the type IMG-nnnnnnnn.tmp.
|>|
|>| E:\Temp\IMG-22EF1586.tmp
|>| E:\Temp\IMG-04044202.tmp
|>| E:\Temp\IMG-14B5B6BB.tmp
|>| E:\Temp\IMG-19EE2C4D.tmp
|>| E:\Temp\IMG-00000000.tmp
|>| E:\Temp\IMG-28CAE025.tmp
|>| E:\Temp\IMG-2FA581AC.tmp
|>| E:\Temp\IMG-55F8C5A0.tmp
|>| E:\Temp\IMG-6E36D60E.tmp
|>|
|>| Their lengths are either 508,196 or 106,568 bytes. The larger files
|>| appear to consist of 337 blocks containing 1506 C0h bytes plus two
|>| zero bytes. The last block sometimes contains what looks like a file
|>| remnant, either text or binary. The smaller files consist of 173
|>| blocks containing 615 C0h bytes plus one zero byte.
|>|
|>| If I delete these files, they will reappear the following day, some
|>| with the same name. I have no idea which application is generating
|>| them except to say that sometimes they appear after using Winzip.
|>| They do not appear after a reboot.
|>|
|>| Here is a sample:
|>| http://www.users.on.net/~fzabkar/IMG.zip (6KB)
|>|
|>| Is this a Win98 thing? BTW I'm not using any "IMaGe" software when
|>| this happens.
|>|
|>| I used the Find Files or Folders function to search my C: drive for
|>| files containing "IMG-", but found nothing of interest.
|>
|>I certainly have never seen anything like that, but I rarely use
|>WinZip to actually create archives. But I tend to doubt WinZip would
|>be so sloppy!
|>
|>You can monitor what accesses any partition with...
|>
|>http://www.pcmag.com/ 's DiskAction
|>
|>It isn't infallible, though, & will sometimes detect an access & be
|>unable to name the app that did it.
|
| Thanks, but it seems that all the PCMag utilities are no longer
| freeware. :-(

I was lucky to grab a bundle before that happened! But, it sounds like
Filemon is actually better, if it can track specific folders. I see
nothing came up yet, though. It sounds as if something like GoBack might
be involved, if these files have to do with Image backups. Or, maybe it
has to do with photo processing. Keep us informed.

| Instead I'm trying Filemon from Sysinternals:
|
| http://download.sysinternals.com/Files/Filemon.zip
|
|>Did you move TEMP to E

artition?
|
| Yes, I have the following statements in my config.sys file:
|
| set tmpdir=C:\win98se\temp
| if exist d:\tempflag set tmpdir=D:\temp
| if exist e:\tempflag set tmpdir=E:\temp
| set temp=%tmpdir%
| set tmp=%tmpdir%
| set tmpdir=
|
| Note that D: is a removable drive. When it is not installed, drive E:
| becomes drive D:.

I thought so!

| - Franc Zabkar
| --
| Please remove one 'i' from my address when replying by email.

--
Thanks or Good Luck,
There may be humor in this post, and,
Naturally, you will not sue,
Should things get worse after this,
PCR
pcrrcp@netzero.net

Franc Zabkar · Aug 27, 2007

On Sat, 25 Aug 2007 16:17:30 -0700, "Gary S. Terhune" <none> put
finger to keyboard and composed:

>Let us know when you figure it out, Franc, <g&d>.

The culprit appears to be Explorer.

Here are two Filemon screenshots, the first from the beginning of the
log, the second from the end:

http://www.users.on.net/~fzabkar/IMG-00000000_start.gif
http://www.users.on.net/~fzabkar/IMG-00000000_end.gif

The IMG-00000000.tmp file was created while I was using Explorer to
backup a large amount of data from drive C: to drive D:. Subsequent
backups did not consistently produce the same outcome.

One strange observation is that, even with View -> Refresh, Explorer
showed the file size as zero until after a reboot, at which time it
became 497KB.

BTW, Filemon's Save and Save As functions do not appear to work.

>Gary S. Terhune
>MS-MVP Shell/User
>www.grystmill.com
>
>"Franc Zabkar" <fzabkar@iinternode.on.net> wrote in message
>news:vva1d3tvr9bvmk0qb0m056jgbs1tcg88br@4ax.com...
>> My TEMP directory contains files of the type IMG-nnnnnnnn.tmp.
>>
>> E:\Temp\IMG-22EF1586.tmp
>> E:\Temp\IMG-04044202.tmp
>> E:\Temp\IMG-14B5B6BB.tmp
>> E:\Temp\IMG-19EE2C4D.tmp
>> E:\Temp\IMG-00000000.tmp
>> E:\Temp\IMG-28CAE025.tmp
>> E:\Temp\IMG-2FA581AC.tmp
>> E:\Temp\IMG-55F8C5A0.tmp
>> E:\Temp\IMG-6E36D60E.tmp
>>
>> Their lengths are either 508,196 or 106,568 bytes. The larger files
>> appear to consist of 337 blocks containing 1506 C0h bytes plus two
>> zero bytes. The last block sometimes contains what looks like a file
>> remnant, either text or binary. The smaller files consist of 173
>> blocks containing 615 C0h bytes plus one zero byte.
>>
>> If I delete these files, they will reappear the following day, some
>> with the same name.

- Franc Zabkar
--
Please remove one 'i' from my address when replying by email.

Gary S. Terhune · Aug 27, 2007

Almost sounds like a "BHO" for Explorer, i.e., an Explorer extension. I've
never seen those, and I do HUGE file transfers across partitions on a
regular basis. Got anything that monitors Explorer? AV comes to mind, though
I doubt that's it.

--
Gary S. Terhune
MS-MVP Shell/User
www.grystmill.com

"Franc Zabkar" <fzabkar@iinternode.on.net> wrote in message
news:grp4d35qfujanuoooai7fh2anc5vkcqqt1@4ax.com...
> On Sat, 25 Aug 2007 16:17:30 -0700, "Gary S. Terhune" <none> put
> finger to keyboard and composed:
>
>>Let us know when you figure it out, Franc, <g&d>.
>
> The culprit appears to be Explorer.
>
> Here are two Filemon screenshots, the first from the beginning of the
> log, the second from the end:
>
> http://www.users.on.net/~fzabkar/IMG-00000000_start.gif
> http://www.users.on.net/~fzabkar/IMG-00000000_end.gif
>
> The IMG-00000000.tmp file was created while I was using Explorer to
> backup a large amount of data from drive C: to drive D:. Subsequent
> backups did not consistently produce the same outcome.
>
> One strange observation is that, even with View -> Refresh, Explorer
> showed the file size as zero until after a reboot, at which time it
> became 497KB.
>
> BTW, Filemon's Save and Save As functions do not appear to work.
>
>>Gary S. Terhune
>>MS-MVP Shell/User
>>www.grystmill.com
>>
>>"Franc Zabkar" <fzabkar@iinternode.on.net> wrote in message
>>news:vva1d3tvr9bvmk0qb0m056jgbs1tcg88br@4ax.com...
>>> My TEMP directory contains files of the type IMG-nnnnnnnn.tmp.
>>>
>>> E:\Temp\IMG-22EF1586.tmp
>>> E:\Temp\IMG-04044202.tmp
>>> E:\Temp\IMG-14B5B6BB.tmp
>>> E:\Temp\IMG-19EE2C4D.tmp
>>> E:\Temp\IMG-00000000.tmp
>>> E:\Temp\IMG-28CAE025.tmp
>>> E:\Temp\IMG-2FA581AC.tmp
>>> E:\Temp\IMG-55F8C5A0.tmp
>>> E:\Temp\IMG-6E36D60E.tmp
>>>
>>> Their lengths are either 508,196 or 106,568 bytes. The larger files
>>> appear to consist of 337 blocks containing 1506 C0h bytes plus two
>>> zero bytes. The last block sometimes contains what looks like a file
>>> remnant, either text or binary. The smaller files consist of 173
>>> blocks containing 615 C0h bytes plus one zero byte.
>>>
>>> If I delete these files, they will reappear the following day, some
>>> with the same name.
>
> - Franc Zabkar
> --
> Please remove one 'i' from my address when replying by email.

PA Bear · Aug 27, 2007

> The IMG-00000000.tmp file was created while I was using Explorer to
> backup a large amount of data from drive C: to drive D:.

How do you create these backups?
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE, OE, Security, Shell/User)
AumHa VSOP & Admin DTS-L.org

Franc Zabkar wrote:
> On Sat, 25 Aug 2007 16:17:30 -0700, "Gary S. Terhune" <none> put
> finger to keyboard and composed:
>
>> Let us know when you figure it out, Franc, <g&d>.
>
> The culprit appears to be Explorer.
>
> Here are two Filemon screenshots, the first from the beginning of the
> log, the second from the end:
>
> http://www.users.on.net/~fzabkar/IMG-00000000_start.gif
> http://www.users.on.net/~fzabkar/IMG-00000000_end.gif
>
> The IMG-00000000.tmp file was created while I was using Explorer to
> backup a large amount of data from drive C: to drive D:. Subsequent
> backups did not consistently produce the same outcome.
>
> One strange observation is that, even with View -> Refresh, Explorer
> showed the file size as zero until after a reboot, at which time it
> became 497KB.
>
> BTW, Filemon's Save and Save As functions do not appear to work.
>
>> Gary S. Terhune
>> MS-MVP Shell/User
>> www.grystmill.com
>>
>> "Franc Zabkar" <fzabkar@iinternode.on.net> wrote in message
>> news:vva1d3tvr9bvmk0qb0m056jgbs1tcg88br@4ax.com...
>>> My TEMP directory contains files of the type IMG-nnnnnnnn.tmp.
>>>
>>> E:\Temp\IMG-22EF1586.tmp
>>> E:\Temp\IMG-04044202.tmp
>>> E:\Temp\IMG-14B5B6BB.tmp
>>> E:\Temp\IMG-19EE2C4D.tmp
>>> E:\Temp\IMG-00000000.tmp
>>> E:\Temp\IMG-28CAE025.tmp
>>> E:\Temp\IMG-2FA581AC.tmp
>>> E:\Temp\IMG-55F8C5A0.tmp
>>> E:\Temp\IMG-6E36D60E.tmp
>>>
>>> Their lengths are either 508,196 or 106,568 bytes. The larger files
>>> appear to consist of 337 blocks containing 1506 C0h bytes plus two
>>> zero bytes. The last block sometimes contains what looks like a file
>>> remnant, either text or binary. The smaller files consist of 173
>>> blocks containing 615 C0h bytes plus one zero byte.
>>>
>>> If I delete these files, they will reappear the following day, some
>>> with the same name.

PCR · Aug 27, 2007

"Franc Zabkar" <fzabkar@iinternode.on.net> wrote in message
news:grp4d35qfujanuoooai7fh2anc5vkcqqt1@4ax.com
| On Sat, 25 Aug 2007 16:17:30 -0700, "Gary S. Terhune" <none> put
| finger to keyboard and composed:
|
|>Let us know when you figure it out, Franc, <g&d>.
|
| The culprit appears to be Explorer.
|
| Here are two Filemon screenshots, the first from the beginning of the
| log, the second from the end:
|
| http://www.users.on.net/~fzabkar/IMG-00000000_start.gif
| http://www.users.on.net/~fzabkar/IMG-00000000_end.gif
|
| The IMG-00000000.tmp file was created while I was using Explorer to
| backup a large amount of data from drive C: to drive D:. Subsequent
| backups did not consistently produce the same outcome.

I'm thinking... these .tmp files might be something Explorer normally
would delete after use. Explorer creates them on E:\TEMP, where you have
moved TEMP. There may be a circumstance in which Explorer forgets TEMP
has been moved there, & tries to delete them from "C:\Windows\Temp".
(OTOH, it might actually remember where TEMP is, & simply forget to do
the delete.) Anyhow... perhaps, REM those lines in Autoexec.bat, & see
what happens!

As Bear wants to know... how precisely do you do this backup? Just a
copy/paste from Explorer, or something like MSBackup? Are there any
extremely large files involved? Is it normal, Windows files, or
downloads or creations of your own? Any with "IMG" in their name?

I guess I can devise a test of my own, if I knew these were normal files
& how many you try to copy at once. I guess I can move my own TEMP to my
own E:, or use...
http://www.snapfiles.com/get/restoration.html Restoration
....to see what may have been created & deleted from C:\Windows\TEMP
after such an operation.

Here is how to see whether you have a BHO as Terhune may suspect...

http://www.definitivesolutions.com/ BHODemon
This one was free last I knew. It renames the BHO executable & can
"undo" that.

http://www.pcmag.com/ 's "BHOCop" removes a BHO's Registry entries &
can "undo" that. It found a Browser Helper Object called Wavehelper
Class, created by "Wavetop", that was building a monstrosity of an error
log called "Logit.txt" in here. "START button, Find, F/F, Logit.txt"--
see one?

| One strange observation is that, even with View -> Refresh, Explorer
| showed the file size as zero until after a reboot, at which time it
| became 497KB.
|
| BTW, Filemon's Save and Save As functions do not appear to work.
|
|>Gary S. Terhune
|>MS-MVP Shell/User
|>www.grystmill.com
|>
|>"Franc Zabkar" <fzabkar@iinternode.on.net> wrote in message
|>news:vva1d3tvr9bvmk0qb0m056jgbs1tcg88br@4ax.com...
|>> My TEMP directory contains files of the type IMG-nnnnnnnn.tmp.
|>>
|>> E:\Temp\IMG-22EF1586.tmp
|>> E:\Temp\IMG-04044202.tmp
|>> E:\Temp\IMG-14B5B6BB.tmp
|>> E:\Temp\IMG-19EE2C4D.tmp
|>> E:\Temp\IMG-00000000.tmp
|>> E:\Temp\IMG-28CAE025.tmp
|>> E:\Temp\IMG-2FA581AC.tmp
|>> E:\Temp\IMG-55F8C5A0.tmp
|>> E:\Temp\IMG-6E36D60E.tmp
|>>
|>> Their lengths are either 508,196 or 106,568 bytes. The larger files
|>> appear to consist of 337 blocks containing 1506 C0h bytes plus two
|>> zero bytes. The last block sometimes contains what looks like a file
|>> remnant, either text or binary. The smaller files consist of 173
|>> blocks containing 615 C0h bytes plus one zero byte.
|>>
|>> If I delete these files, they will reappear the following day, some
|>> with the same name.
|
| - Franc Zabkar
| --
| Please remove one 'i' from my address when replying by email.

--
Thanks or Good Luck,
There may be humor in this post, and,
Naturally, you will not sue,
Should things get worse after this,
PCR
pcrrcp@netzero.net

Galen Somerville · Aug 27, 2007

"PCR" <pcrrcp@netzero.net> wrote in message news:uiRDcLO6HHA.5980@TK2MSFTNGP04.phx.gbl...
> "Franc Zabkar" <fzabkar@iinternode.on.net> wrote in message
> news:grp4d35qfujanuoooai7fh2anc5vkcqqt1@4ax.com
> | On Sat, 25 Aug 2007 16:17:30 -0700, "Gary S. Terhune" <none> put
> | finger to keyboard and composed:
> |
> |>Let us know when you figure it out, Franc, <g&d>.
> |
> | The culprit appears to be Explorer.
> |
> | Here are two Filemon screenshots, the first from the beginning of the
> | log, the second from the end:
> |
> | http://www.users.on.net/~fzabkar/IMG-00000000_start.gif
> | http://www.users.on.net/~fzabkar/IMG-00000000_end.gif
> |
> | The IMG-00000000.tmp file was created while I was using Explorer to
> | backup a large amount of data from drive C: to drive D:. Subsequent
> | backups did not consistently produce the same outcome.
>
> I'm thinking... these .tmp files might be something Explorer normally
> would delete after use. Explorer creates them on E:\TEMP, where you have
> moved TEMP. There may be a circumstance in which Explorer forgets TEMP
> has been moved there, & tries to delete them from "C:\Windows\Temp".
> (OTOH, it might actually remember where TEMP is, & simply forget to do
> the delete.) Anyhow... perhaps, REM those lines in Autoexec.bat, & see
> what happens!
>
> As Bear wants to know... how precisely do you do this backup? Just a
> copy/paste from Explorer, or something like MSBackup? Are there any
> extremely large files involved? Is it normal, Windows files, or
> downloads or creations of your own? Any with "IMG" in their name?
>
> I guess I can devise a test of my own, if I knew these were normal files
> & how many you try to copy at once. I guess I can move my own TEMP to my
> own E:, or use...
> http://www.snapfiles.com/get/restoration.html Restoration
> ...to see what may have been created & deleted from C:\Windows\TEMP
> after such an operation.
>
> Here is how to see whether you have a BHO as Terhune may suspect...
>
> http://www.definitivesolutions.com/ BHODemon
> This one was free last I knew. It renames the BHO executable & can
> "undo" that.
>
> http://www.pcmag.com/ 's "BHOCop" removes a BHO's Registry entries &
> can "undo" that. It found a Browser Helper Object called Wavehelper
> Class, created by "Wavetop", that was building a monstrosity of an error
> log called "Logit.txt" in here. "START button, Find, F/F, Logit.txt"--
> see one?
>
> | One strange observation is that, even with View -> Refresh, Explorer
> | showed the file size as zero until after a reboot, at which time it
> | became 497KB.
> |
> | BTW, Filemon's Save and Save As functions do not appear to work.
> |
> |>Gary S. Terhune
> |>MS-MVP Shell/User
> |>www.grystmill.com
> |>
> |>"Franc Zabkar" <fzabkar@iinternode.on.net> wrote in message
> |>news:vva1d3tvr9bvmk0qb0m056jgbs1tcg88br@4ax.com...
> |>> My TEMP directory contains files of the type IMG-nnnnnnnn.tmp.
> |>>
> |>> E:\Temp\IMG-22EF1586.tmp
> |>> E:\Temp\IMG-04044202.tmp
> |>> E:\Temp\IMG-14B5B6BB.tmp
> |>> E:\Temp\IMG-19EE2C4D.tmp
> |>> E:\Temp\IMG-00000000.tmp
> |>> E:\Temp\IMG-28CAE025.tmp
> |>> E:\Temp\IMG-2FA581AC.tmp
> |>> E:\Temp\IMG-55F8C5A0.tmp
> |>> E:\Temp\IMG-6E36D60E.tmp
> |>>
> |>> Their lengths are either 508,196 or 106,568 bytes. The larger files
> |>> appear to consist of 337 blocks containing 1506 C0h bytes plus two
> |>> zero bytes. The last block sometimes contains what looks like a file
> |>> remnant, either text or binary. The smaller files consist of 173
> |>> blocks containing 615 C0h bytes plus one zero byte.
> |>>
> |>> If I delete these files, they will reappear the following day, some
> |>> with the same name.
> |
> | - Franc Zabkar
> | --
> | Please remove one 'i' from my address when replying by email.
>
> --
> Thanks or Good Luck,
> There may be humor in this post, and,
> Naturally, you will not sue,
> Should things get worse after this,
> PCR
> pcrrcp@netzero.net
>
>
A little late reading this thread. One thing I found out years ago is that sometimes windows has
trouble when you Set the Temp to a partition other than the partition Windows is on.

I always have a Temp directory on every partition with the designated Temp on C: and plenty of spare
capacity.

Galen

Franc Zabkar · Aug 28, 2007

On Mon, 27 Aug 2007 06:35:37 -0700, "Gary S. Terhune" <none> put
finger to keyboard and composed:

>Almost sounds like a "BHO" for Explorer, i.e., an Explorer extension. I've
>never seen those, and I do HUGE file transfers across partitions on a
>regular basis. Got anything that monitors Explorer? AV comes to mind, though
>I doubt that's it.

Thanks. I think you hit the nail on the head.

I do have AV entries in the context menu, but no AV programs are
running during the file transfers. However, there are two other
entries which belong to ReaConverter (see end of post) and it is these
which appear to be the source of the problem.

However, before I get to the solution, here are some observations.

After r-clicking a file there is a several second delay before the
context menu appears, even when the system is "fresh", ie just after a
reboot.

Immediately after using regedit to export my registry to a file, the
following zero-length files appeared:

E:\Temp\IMG-04044202.tmp
E:\Temp\IMG-19EE2C4D.tmp
E:\Temp\IMG-6E36D60E.tmp

Then after trying to add a file to a Winzip archive, two more files
appeared, also zero bytes.

E:\Temp\IMG-55F8C5A0.tmp
E:\Temp\IMG-22EF1586.tmp

Two of the context menu items include ...

Convert to -> BMP/GIF/PNG/JPG/TIF
Convert with actions -> GIF + 50% resize / JPG + blur / etc

Both launch ReaConverter which is a program that converts image file
formats. In fact, although I had used the program, I had never used
these context menu features until today. When I did, the following
files appeared:

IMG-00~1 TMP 508,196 08-27-07 12:25p IMG-00000000.tmp
IMG-04~1 TMP 106,568 08-28-07 9:49a IMG-04044202.tmp
IMG-6E~1 TMP 508,196 08-28-07 9:49a IMG-6E36D60E.tmp
IMG-19~1 TMP 508,196 08-28-07 9:49a IMG-19EE2C4D.tmp
IMG-22~1 TMP 508,196 08-28-07 9:49a IMG-22EF1586.tmp
IMG-55~1 TMP 508,196 08-28-07 9:49a IMG-55F8C5A0.tmp
IMG-2F~1 TMP 14,953,680 08-28-07 9:49a IMG-2FA581AC.tmp
IMG-14~1 TMP 508,196 08-28-07 9:49a IMG-14B5B6BB.tmp
IMG-36~1 TMP 14,953,680 08-28-07 9:49a IMG-367C7A5E.tmp
IMG-3C~1 TMP 14,953,680 08-28-07 9:48a IMG-3CC60D49.tmp
IMG-09~1 TMP 14,953,680 08-28-07 9:49a IMG-09086A72.tmp

I have now uninstalled ReaConverter and am monitoring Explorer's
behaviour.

- Franc Zabkar
--
Please remove one 'i' from my address when replying by email.

Franc Zabkar · Aug 28, 2007

On Mon, 27 Aug 2007 15:45:38 -0400, "PCR" <pcrrcp@netzero.net> put
finger to keyboard and composed:

>"Franc Zabkar" <fzabkar@iinternode.on.net> wrote in message
>news:grp4d35qfujanuoooai7fh2anc5vkcqqt1@4ax.com
>| On Sat, 25 Aug 2007 16:17:30 -0700, "Gary S. Terhune" <none> put
>| finger to keyboard and composed:
>|
>|>Let us know when you figure it out, Franc, <g&d>.
>|
>| The culprit appears to be Explorer.
>|
>| Here are two Filemon screenshots, the first from the beginning of the
>| log, the second from the end:
>|
>| http://www.users.on.net/~fzabkar/IMG-00000000_start.gif
>| http://www.users.on.net/~fzabkar/IMG-00000000_end.gif
>|
>| The IMG-00000000.tmp file was created while I was using Explorer to
>| backup a large amount of data from drive C: to drive D:. Subsequent
>| backups did not consistently produce the same outcome.
>
>I'm thinking... these .tmp files might be something Explorer normally
>would delete after use. Explorer creates them on E:\TEMP, where you have
>moved TEMP. There may be a circumstance in which Explorer forgets TEMP
>has been moved there, & tries to delete them from "C:\Windows\Temp".
>(OTOH, it might actually remember where TEMP is, & simply forget to do
>the delete.) Anyhow... perhaps, REM those lines in Autoexec.bat, & see
>what happens!

OK, I was going to try this suggestion at the next reboot but I think
I have solved the problem. See my reply to Gary.

>As Bear wants to know... how precisely do you do this backup? Just a
>copy/paste from Explorer, ...

Yes, and I do this within the same Explorer window, if that makes any
difference.

> ... or something like MSBackup? Are there any
>extremely large files involved?

Not really. I'd say the largest may be around 20MB, but most are much
smaller.

One thing I notice is that after these large file transfers, Explorer
slows to a crawl. For example, it may take a whole minute to refresh
the screen. I seem to recall several discussions about directories
with > 2000 entries causing slowdowns, but I don't know whether this
is what I'm seeing. My largest subdirectory (browser cache) has about
900 files.

Sometimes when this happens, Resource Meter's display drops into the
red, or very close to it.

As I said above, I have solved my problem, but this Explorer slowdown
may be an unrelated issue. I'm now monitoring it.

>Is it normal, Windows files, or
>downloads or creations of your own? Any with "IMG" in their name?

The files consist mostly of downloads and personal documents, but none
with IMG in the name. Anyway, it turns out that ReaConverter was
interfering with Explorer in some way (probably via the context menu),
but I'm damned if I know how or why.

>I guess I can devise a test of my own, if I knew these were normal files
>& how many you try to copy at once. I guess I can move my own TEMP to my
>own E:, or use...
>http://www.snapfiles.com/get/restoration.html Restoration
>...to see what may have been created & deleted from C:\Windows\TEMP
>after such an operation.
>
>Here is how to see whether you have a BHO as Terhune may suspect...
>
>http://www.definitivesolutions.com/ BHODemon
>This one was free last I knew. It renames the BHO executable & can
>"undo" that.
>
>http://www.pcmag.com/ 's "BHOCop" removes a BHO's Registry entries &
>can "undo" that. It found a Browser Helper Object called Wavehelper
>Class, created by "Wavetop", that was building a monstrosity of an error
>log called "Logit.txt" in here. "START button, Find, F/F, Logit.txt"--
>see one?
>
>| One strange observation is that, even with View -> Refresh, Explorer
>| showed the file size as zero until after a reboot, at which time it
>| became 497KB.
>|
>| BTW, Filemon's Save and Save As functions do not appear to work.
>|
>|>Gary S. Terhune
>|>MS-MVP Shell/User
>|>www.grystmill.com
>|>
>|>"Franc Zabkar" <fzabkar@iinternode.on.net> wrote in message
>|>news:vva1d3tvr9bvmk0qb0m056jgbs1tcg88br@4ax.com...
>|>> My TEMP directory contains files of the type IMG-nnnnnnnn.tmp.
>|>>
>|>> E:\Temp\IMG-22EF1586.tmp
>|>> E:\Temp\IMG-04044202.tmp
>|>> E:\Temp\IMG-14B5B6BB.tmp
>|>> E:\Temp\IMG-19EE2C4D.tmp
>|>> E:\Temp\IMG-00000000.tmp
>|>> E:\Temp\IMG-28CAE025.tmp
>|>> E:\Temp\IMG-2FA581AC.tmp
>|>> E:\Temp\IMG-55F8C5A0.tmp
>|>> E:\Temp\IMG-6E36D60E.tmp
>|>>
>|>> Their lengths are either 508,196 or 106,568 bytes. The larger files
>|>> appear to consist of 337 blocks containing 1506 C0h bytes plus two
>|>> zero bytes. The last block sometimes contains what looks like a file
>|>> remnant, either text or binary. The smaller files consist of 173
>|>> blocks containing 615 C0h bytes plus one zero byte.
>|>>
>|>> If I delete these files, they will reappear the following day, some
>|>> with the same name.

- Franc Zabkar
--
Please remove one 'i' from my address when replying by email.

PCR · Aug 28, 2007

"Franc Zabkar" <fzabkar@iinternode.on.net> wrote in message
news:b8h7d3tc4lvg19bgkt8pvd2kc657o0fmh3@4ax.com
| On Mon, 27 Aug 2007 15:45:38 -0400, "PCR" <pcrrcp@netzero.net> put
| finger to keyboard and composed:
|
|>"Franc Zabkar" <fzabkar@iinternode.on.net> wrote in message
|>news:grp4d35qfujanuoooai7fh2anc5vkcqqt1@4ax.com
|>| On Sat, 25 Aug 2007 16:17:30 -0700, "Gary S. Terhune" <none> put
|>| finger to keyboard and composed:
|>|
|>|>Let us know when you figure it out, Franc, <g&d>.
|>|
|>| The culprit appears to be Explorer.
|>|
|>| Here are two Filemon screenshots, the first from the beginning of
|>| the log, the second from the end:
|>|
|>| http://www.users.on.net/~fzabkar/IMG-00000000_start.gif
|>| http://www.users.on.net/~fzabkar/IMG-00000000_end.gif
|>|
|>| The IMG-00000000.tmp file was created while I was using Explorer to
|>| backup a large amount of data from drive C: to drive D:. Subsequent
|>| backups did not consistently produce the same outcome.
|>
|>I'm thinking... these .tmp files might be something Explorer normally
|>would delete after use. Explorer creates them on E:\TEMP, where you
|>have moved TEMP. There may be a circumstance in which Explorer
|>forgets TEMP has been moved there, & tries to delete them from
|>"C:\Windows\Temp". (OTOH, it might actually remember where TEMP is, &
|>simply forget to do the delete.) Anyhow... perhaps, REM those lines
|>in Autoexec.bat, & see what happens!
|
| OK, I was going to try this suggestion at the next reboot but I think
| I have solved the problem. See my reply to Gary.

I saw. It does seem rather certain ReaConverter is involved in some way.
I don't know the app, but, if it is normal for it to create these files
in normal use-- I GUESS it is implicated in the appearance of the
abnormal ones! Yea, uninstall & monitor, just as you said. That's
probably it, as far as the files are concerned. If you miss
ReaConverter, try reinstalling afterward-- just to see whether it will
work right next time.

Looks like it was confusion in the context menus, except I can't think
how "using regedit to export my registry to a file" involves a context
menu at all.

My other thought is that... even if having moved TEMP is involved... I
can't figure how/why ReaConverter would be wanting to create these files
(for it to fail to delete)... when NOT specifically requested to do a
conversion in the first place.

|>As Bear wants to know... how precisely do you do this backup? Just a
|>copy/paste from Explorer, ...
|
| Yes, and I do this within the same Explorer window, if that makes any
| difference.

Hmm. It could make a difference as to which Explorer window would
freeze, maybe-- or I vaguely recall Chauvin may have said. But I have
always used the same window. Yea, when you do a massive
move/copy/especially delete of a massive number of files or of folders
full of folders & files-- yea, there is a slugishness afterwards. Wait
for it to complete, a reboot afterwards will clear it all up. Other apps
will continue to work well even w/o the reboot-- but things like the
START menu are Explorer-related & will be sluggish! As Chauvin said, it
is a cumulative thing. SO, until the reboot, your very next file delete
could cause the problem-- even a zero byte file!

I doubt this relates to the ReaConverter problem, unless it only happens
under such conditions. BUT-- since you never specifically activated
ReaConverter, it's odd it should be creating those files, anyhow. Still,
it might take a reboot to have Explorer update its display well enough
to fill in zeros with proper file sizes-- which is one of the symptoms
you reported earlier.

If this all happens a lot-- use a 3rd party tool to do the massive copy
or delete, or do it in DOS, which does not suffer the problem.

|> ... or something like MSBackup? Are there any
|>extremely large files involved?
|
| Not really. I'd say the largest may be around 20MB, but most are much
| smaller.

OK. It isn't the size of files, but the number of them that are involved
in the sluggishness problem.

| One thing I notice is that after these large file transfers, Explorer
| slows to a crawl. For example, it may take a whole minute to refresh
| the screen. I seem to recall several discussions about directories
| with > 2000 entries causing slowdowns, but I don't know whether this
| is what I'm seeing. My largest subdirectory (browser cache) has about
| 900 files.

That probably isn't enough to do it-- except it is a cumulative problem.
Every file you do adds to it, until a reboot is done. But it's usually a
big number!

| Sometimes when this happens, Resource Meter's display drops into the
| red, or very close to it.

Yep. I actually would get the Low Resources requestor to shut some
apps-- BUT sometimes that will be hidden behind a frozen Explorer
screen! And it's only a reboot that is the cure! Actually, the other
apps work well!

| As I said above, I have solved my problem, but this Explorer slowdown
| may be an unrelated issue. I'm now monitoring it.

Keep us informed.

|>Is it normal, Windows files, or
|>downloads or creations of your own? Any with "IMG" in their name?
|
| The files consist mostly of downloads and personal documents, but none
| with IMG in the name. Anyway, it turns out that ReaConverter was
| interfering with Explorer in some way (probably via the context menu),
| but I'm damned if I know how or why.
|
|>I guess I can devise a test of my own, if I knew these were normal
|>files & how many you try to copy at once. I guess I can move my own
|>TEMP to my own E:, or use...
|>http://www.snapfiles.com/get/restoration.html Restoration
|>...to see what may have been created & deleted from C:\Windows\TEMP
|>after such an operation.
|>
|>Here is how to see whether you have a BHO as Terhune may suspect...
|>
|>http://www.definitivesolutions.com/ BHODemon
|>This one was free last I knew. It renames the BHO executable & can
|>"undo" that.
|>
|>http://www.pcmag.com/ 's "BHOCop" removes a BHO's Registry entries &
|>can "undo" that. It found a Browser Helper Object called Wavehelper
|>Class, created by "Wavetop", that was building a monstrosity of an
|>error log called "Logit.txt" in here. "START button, Find, F/F,
|>Logit.txt"-- see one?
|>
|>| One strange observation is that, even with View -> Refresh, Explorer
|>| showed the file size as zero until after a reboot, at which time it
|>| became 497KB.
|>|
|>| BTW, Filemon's Save and Save As functions do not appear to work.
|>|
|>|>Gary S. Terhune
|>|>MS-MVP Shell/User
|>|>www.grystmill.com
|>|>
|>|>"Franc Zabkar" <fzabkar@iinternode.on.net> wrote in message
|>|>news:vva1d3tvr9bvmk0qb0m056jgbs1tcg88br@4ax.com...
|>|>> My TEMP directory contains files of the type IMG-nnnnnnnn.tmp.
|>|>>
|>|>> E:\Temp\IMG-22EF1586.tmp
|>|>> E:\Temp\IMG-04044202.tmp
|>|>> E:\Temp\IMG-14B5B6BB.tmp
|>|>> E:\Temp\IMG-19EE2C4D.tmp
|>|>> E:\Temp\IMG-00000000.tmp
|>|>> E:\Temp\IMG-28CAE025.tmp
|>|>> E:\Temp\IMG-2FA581AC.tmp
|>|>> E:\Temp\IMG-55F8C5A0.tmp
|>|>> E:\Temp\IMG-6E36D60E.tmp
|>|>>
|>|>> Their lengths are either 508,196 or 106,568 bytes. The larger
|>|>> files appear to consist of 337 blocks containing 1506 C0h bytes
|>|>> plus two zero bytes. The last block sometimes contains what looks
|>|>> like a file remnant, either text or binary. The smaller files
|>|>> consist of 173 blocks containing 615 C0h bytes plus one zero byte.
|>|>>
|>|>> If I delete these files, they will reappear the following day,
|>|>> some with the same name.
|
| - Franc Zabkar
| --
| Please remove one 'i' from my address when replying by email.

--
Thanks or Good Luck,
There may be humor in this post, and,
Naturally, you will not sue,
Should things get worse after this,
PCR
pcrrcp@netzero.net

PCR · Aug 28, 2007

"Galen Somerville" <galen@surewest.net> wrote in message
news:uHjV5AR6HHA.5316@TK2MSFTNGP04.phx.gbl
| "PCR" <pcrrcp@netzero.net> wrote in message
| news:uiRDcLO6HHA.5980@TK2MSFTNGP04.phx.gbl...
|> "Franc Zabkar" <fzabkar@iinternode.on.net> wrote in message
|> news:grp4d35qfujanuoooai7fh2anc5vkcqqt1@4ax.com
|> | On Sat, 25 Aug 2007 16:17:30 -0700, "Gary S. Terhune" <none> put
|> | finger to keyboard and composed:
|> |
|> |>Let us know when you figure it out, Franc, <g&d>.
|> |
|> | The culprit appears to be Explorer.
|> |
|> | Here are two Filemon screenshots, the first from the beginning of
|> | the log, the second from the end:
|> |
|> | http://www.users.on.net/~fzabkar/IMG-00000000_start.gif
|> | http://www.users.on.net/~fzabkar/IMG-00000000_end.gif
|> |
|> | The IMG-00000000.tmp file was created while I was using Explorer to
|> | backup a large amount of data from drive C: to drive D:. Subsequent
|> | backups did not consistently produce the same outcome.
|>
|> I'm thinking... these .tmp files might be something Explorer normally
|> would delete after use. Explorer creates them on E:\TEMP, where you
|> have moved TEMP. There may be a circumstance in which Explorer
|> forgets TEMP has been moved there, & tries to delete them from
|> "C:\Windows\Temp". (OTOH, it might actually remember where TEMP is,
|> & simply forget to do the delete.) Anyhow... perhaps, REM those
|> lines in Autoexec.bat, & see what happens!
|>
|> As Bear wants to know... how precisely do you do this backup? Just a
|> copy/paste from Explorer, or something like MSBackup? Are there any
|> extremely large files involved? Is it normal, Windows files, or
|> downloads or creations of your own? Any with "IMG" in their name?
|>
|> I guess I can devise a test of my own, if I knew these were normal
|> files & how many you try to copy at once. I guess I can move my own
|> TEMP to my own E:, or use...
|> http://www.snapfiles.com/get/restoration.html Restoration
|> ...to see what may have been created & deleted from C:\Windows\TEMP
|> after such an operation.
|>
|> Here is how to see whether you have a BHO as Terhune may suspect...
|>
|> http://www.definitivesolutions.com/ BHODemon
|> This one was free last I knew. It renames the BHO executable & can
|> "undo" that.
|>
|> http://www.pcmag.com/ 's "BHOCop" removes a BHO's Registry entries &
|> can "undo" that. It found a Browser Helper Object called Wavehelper
|> Class, created by "Wavetop", that was building a monstrosity of an
|> error log called "Logit.txt" in here. "START button, Find, F/F,
|> Logit.txt"-- see one?
|>
|> | One strange observation is that, even with View -> Refresh,
|> | Explorer showed the file size as zero until after a reboot, at
|> | which time it became 497KB.
|> |
|> | BTW, Filemon's Save and Save As functions do not appear to work.
|> |
|> |>Gary S. Terhune
|> |>MS-MVP Shell/User
|> |>www.grystmill.com
|> |>
|> |>"Franc Zabkar" <fzabkar@iinternode.on.net> wrote in message
|> |>news:vva1d3tvr9bvmk0qb0m056jgbs1tcg88br@4ax.com...
|> |>> My TEMP directory contains files of the type IMG-nnnnnnnn.tmp.
|> |>>
|> |>> E:\Temp\IMG-22EF1586.tmp
|> |>> E:\Temp\IMG-04044202.tmp
|> |>> E:\Temp\IMG-14B5B6BB.tmp
|> |>> E:\Temp\IMG-19EE2C4D.tmp
|> |>> E:\Temp\IMG-00000000.tmp
|> |>> E:\Temp\IMG-28CAE025.tmp
|> |>> E:\Temp\IMG-2FA581AC.tmp
|> |>> E:\Temp\IMG-55F8C5A0.tmp
|> |>> E:\Temp\IMG-6E36D60E.tmp
|> |>>
|> |>> Their lengths are either 508,196 or 106,568 bytes. The larger
|> |>> files appear to consist of 337 blocks containing 1506 C0h bytes
|> |>> plus two zero bytes. The last block sometimes contains what
|> |>> looks like a file remnant, either text or binary. The smaller
|> |>> files consist of 173 blocks containing 615 C0h bytes plus one
|> |>> zero byte.
|> |>>
|> |>> If I delete these files, they will reappear the following day,
|> |>> some with the same name.
|> |
|> | - Franc Zabkar
|> | --
|> | Please remove one 'i' from my address when replying by email.
|>
|> --
|> Thanks or Good Luck,
|> There may be humor in this post, and,
|> Naturally, you will not sue,
|> Should things get worse after this,
|> PCR
|> pcrrcp@netzero.net
|>
|>
| A little late reading this thread. One thing I found out years ago is
| that sometimes windows has trouble when you Set the Temp to a
| partition other than the partition Windows is on.
|
| I always have a Temp directory on every partition with the designated
| Temp on C: and plenty of spare capacity.

Yea. As Terhune may have once said, some apps may be hard-coded to use
C: for TEMP. Also, any use of TEMP before Autoexec.bat is run, better
find one still on C:. But it looks like Zabcar's problem was something
else.

| Galen

--
Thanks or Good Luck,
There may be humor in this post, and,
Naturally, you will not sue,
Should things get worse after this,
PCR
pcrrcp@netzero.net

PA Bear · Aug 30, 2007

@GAry: Please shoot me an email (same ol' address), please. THX/NRN
--
~Robear

Gary S. Terhune wrote:
<snip>

Franc Zabkar · Aug 30, 2007

On Tue, 28 Aug 2007 17:01:31 -0400, "PCR" <pcrrcp@netzero.net> put
finger to keyboard and composed:

>"Franc Zabkar" <fzabkar@iinternode.on.net> wrote in message
>news:b8h7d3tc4lvg19bgkt8pvd2kc657o0fmh3@4ax.com

>| As I said above, I have solved my problem, but this Explorer slowdown
>| may be an unrelated issue. I'm now monitoring it.
>
>Keep us informed.

After uninstalling ReaConverter, the IMG-nnnnnnnn.tmp files no longer
appear. However the sluggishness problem with Explorer remains. I've
had a quick look at Total Commander and will give it a try next time I
need to perform a large backup. Alternatively I might revert to using
Xxcopy in a DOS window.

- Franc Zabkar
--
Please remove one 'i' from my address when replying by email.