wt??.tmp files in local settings\temp



Cor Kooter
07-09-2005, 11:40 PM
One of our users has a PC on which every minute about 3 temporary
files are created in his local settings\temp directory,
all starting with 'wt' (wt1.tmp, wt2.tmp etc.)

His PC really slows down after a few weeks if he forgets to delete them.

What process might create these files?

Pegasus \(MVP\)
07-09-2005, 11:40 PM
"Cor Kooter" <CorKooter@discussions.microsoft.com> wrote in message
news:38DB32CA-266A-429F-AD13-32296AB08FCF@microsoft.com...
> One of our users has a PC on which every minute about 3 temporary
> files are created in his local settings\temp directory,
> all starting with 'wt' (wt1.tmp, wt2.tmp etc.)
>
> His PC really slows down after a few weeks if he forgets to delete them.
>
> What process might create these files?

This could be spyware. Download and run AdAware, then see
if the problem persists.

R. McCarty
07-09-2005, 11:40 PM
You can use SysInternals "Process Explorer" to locate files that a
specific process has open. For example, my temp folder has allot
of ~df----.Tmp modules in it. You open Process Explorer, click
on a process. In the bottom panel it will show you all components
associated with the process. If you scroll through the table you can
see files in use by the process. Using PE, I can determine that those
~df--.tmp modules are in use by Microsoft Anti-Spyware.

Process Explorer 9.03 available here:
http://www.sysinternals.com/ntw2k/freeware/procexp.shtml

"Pegasus (MVP)" <I.can@fly.com> wrote in message
news:ud36u54XFHA.3488@tk2msftngp13.phx.gbl...
>
> "Cor Kooter" <CorKooter@discussions.microsoft.com> wrote in message
> news:38DB32CA-266A-429F-AD13-32296AB08FCF@microsoft.com...
>> One of our users has a PC on which every minute about 3 temporary
>> files are created in his local settings\temp directory,
>> all starting with 'wt' (wt1.tmp, wt2.tmp etc.)
>>
>> His PC really slows down after a few weeks if he forgets to delete them.
>>
>> What process might create these files?
>
> This could be spyware. Download and run AdAware, then see
> if the problem persists.
>
>


wt??.tmp files in local settings\temp