Phantom folders and files in C:\Windows\Temp


  1. Posts : 3,363
    Windows 10 Pro x64
       #1

    Phantom folders and files in C:\Windows\Temp


    I recently started getting strange folders in Windows 10 Pro Temp on a laptop. Names all start with tmp which is followed by 8 characters, including letters, numbers and _. They are all marked "Read Only," which I'm unable to change. Although I have full control of the Temp folder and everything in it, I can't even open these folders to see what's in them. From what I can see, they aren't taking up any space on the drive. There are now 83 of them in addition to 5 zero-size mat-debug-xxxx.log files that I see inside Windows, but none of them are visible when I run Command Prompt on a rescue USB drive from outside. I ran PowerShell command Remove-Item C:\Windows\Temp\* -Recurse -Force, but was warned for each folder that I had no access. When I try to check for folder owner, I don't even have permission to do that. Full and offline scans by Defender showed no threats.

    Any ideas? I'm unable to find much helpful info online. Suggestions there either won't work or don't apply since the laptop doesn't have installed drivers or programs identified as possible culprits. There is some mention that Windows updates could be at fault, but no indication whether it may be the updates themselves or faulty installation. I do still have a good backup from before the last 2 CUs, so could try that. 2 Windows 10 Pro desktops have the same Windows updates as the laptop and have no problems.
      My Computer


  2. Posts : 804
    Windows 10 Pro
       #2

    You should be able to delete any of these files that are not currently in use. As a test I've just checked my \appdata\temp folder and had 211 items and was able to delete all but 20 references. In Windows\Temp i had 176 references and could delete all but 2
      My Computer


  3. Posts : 3,363
    Windows 10 Pro x64
    Thread Starter
       #3

    Hearsepilot said:
    You should be able to delete any of these files that are not currently in use. As a test I've just checked my \appdata\temp folder and had 211 items and was able to delete all but 20 references. In Windows\Temp i had 176 references and could delete all but 2
    I realize I should be able to delete them, but can't. I can delete some other files in Windows\Temp, but not these. There is no indication they are in use, only that I have no permission to delete or even open them. This is in spite of the fact that I have full control in the Windows\Temp folder.
      My Computer


  4. Posts : 804
    Windows 10 Pro
       #4

    Have you tried within safe mode?
      My Computer


  5. Posts : 3,363
    Windows 10 Pro x64
    Thread Starter
       #5

    Hearsepilot said:
    Have you tried within safe mode?
    Yes, tried in Safe Mode, but would have been surprised if that had worked since they couldn't be deleted from outside Windows. Also, I ran sfc /scannow and the DISM routine including RestoreHealth. I did find that some, but not all, the folders could be deleted by setting them one at a time to enable inheritance. About half of them refused to open the window for resetting. I may be onto something, though. After restoring an old (3-13) Macrium backup, the Windows\Temp folder was empty. It stayed that way until I updated some programs with Winget. After that, there were a couple dozen stubborn folders in Windows\Temp. I hadn't applied any Windows updates yet. That seems to be strong evidence that a program is causing all those folders to pop up. I restored the backup again and will update programs slowly and one at a time (not through Winget) while keeping a close eye on Windows\Temp. Maybe that will pinpoint the culprit. I'll hold off on marking this solved until I corner a suspect.
      My Computer


  6. Posts : 8,126
    windows 10
       #6

    Have you run storage space and removed any install files
      My Computer


  7. Posts : 3,363
    Windows 10 Pro x64
    Thread Starter
       #7

    Sorry for taking so long to reply. I keep all my install files in another location and don't have any on this laptop.

    I have somewhat narrowed things down a bit. The folders I can't delete all start with tmp and are followed by 8 random digits including numbers, letters and _. Inside each of those folders is another (gen_py) that I can't open. I'm guessing that is connected to the programming language Python. The only program on the computer that includes elements of Python is GIMP and I've since used Revo Uninstaller to get rid of every scrap of that (GIMP is installed on 2 other PCs, but not causing this problem on them). I have been able to delete a few of these folders by individually enabling permission inheritance, but most won't let me access the security page needed for doing that. Total undeletable folders left now are 22. Defender full scan still insists there are no threats.
      My Computer


  8. Posts : 1,600
    win10 home
       #8

    Try this method,no third party tools involved.
    select the file/folder
    RIGHT click on the selection
    select ---Properties ---
    select the ---Details ---tab
    At the bottom of the window,select ---Remove properties and personal information --
    in the new window select the SECOND radio button ---Remove the following peoperties from the file ---
    in the same window click on ---Select all---
    Then ---OK ---
    in the ---Details ---tab window select ---OK ---
    It is Windows own method and worth a try.
      My Computer


  9. Posts : 3,363
    Windows 10 Pro x64
    Thread Starter
       #9

    Thanks, joeandmarg0, but there is no Details tab on properties for those folders. Available tabs are General, Sharing, Security, Previous Versions and Customize. Files in the Windows\Temp folder do have the Details tab. Unfortunately, I can't get far enough into the problem folders to see if there are any files or not.

    I'm thinking it's probably going to take a clean install to resolve this problem. New folders are still being created by something. I thought GIMP with its Python plugin might be the culprit, but uninstalling that solved nothing. Auditing Temp for creation of these folders might be an option if an owner was indicated, but they all show "Unable to display current owner."
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 17:16.
Find Us




Windows 10 Forums