Ask a new question

The file ~sctemp.tmp keeps reappearing on an IronKey

I am trying to delete the file ~sctemp.tmp in the secure partition of an IronKey flash drive, but every time I delete it, the file immediately reappears.  I used to copy files to the folder using Second Copy, but no longer do, so I was trying to delete the entire folder structure when I found the folder path to the ~sctemp.tmp file would not delete, and the file was reappearing.  I have tried deleting the files using the IronKey on other systems where Second Copy has never been installed, so I don't think Second Copy is the issue.

When I use UltraSentry from IDM to delete the folder structure, the entire structure is recreated with letters for the folder names.  In my Internet searches I have seen the file associated to Second Copy, which is installed, but I have stopped the application and stopped the "Second Copy VSS Service x64" service while deleting it as well.

I can find no associations of the file name to IronKey in my searches.

The rows from Process Monitor filtered on the file names are shown below.  The action attributed to Explorer.exe seem attributed to be attributed to whatever whatever application deleted the file, so if I use another app to delete the file, then all the actions will be attributed to it.

Thanks in advance for any help you can offer.


10:59:17.1794941 AM Explorer.EXE 3488 CreateFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
10:59:17.1823780 AM Explorer.EXE 3488 QueryBasicInformationFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS CreationTime: 1/1/2012 10:24:37 AM, LastAccessTime: 1/1/2012 12:00:00 AM, LastWriteTime: 1/1/2012 10:25:52 AM, ChangeTime: 0, FileAttributes: N
10:59:17.1838661 AM Explorer.EXE 3488 CloseFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS
10:59:17.1879651 AM Explorer.EXE 3488 QueryDirectory F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS Filter: ~SCTEMP.TMP, 1: ~SCTEMP.TMP
10:59:17.1887367 AM Explorer.EXE 3488 CreateFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
10:59:17.1916179 AM Explorer.EXE 3488 QueryBasicInformationFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS CreationTime: 1/1/2012 10:24:37 AM, LastAccessTime: 1/1/2012 12:00:00 AM, LastWriteTime: 1/1/2012 10:25:52 AM, ChangeTime: 0, FileAttributes: N
10:59:17.1929856 AM Explorer.EXE 3488 CloseFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS
10:59:17.1970895 AM Explorer.EXE 3488 QueryDirectory F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS Filter: ~SCTEMP.TMP, 1: ~SCTEMP.TMP
10:59:17.1974889 AM Explorer.EXE 3488 CreateFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS Desired Access: Synchronize, Disposition: Open, Options: , Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
10:59:17.2003670 AM Explorer.EXE 3488 QueryNameInformationFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS Name: \ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP
10:59:17.2018632 AM Explorer.EXE 3488 CloseFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS
10:59:17.2026722 AM Explorer.EXE 3488 CreateFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
10:59:17.2056552 AM Explorer.EXE 3488 QueryBasicInformationFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS CreationTime: 1/1/2012 10:24:37 AM, LastAccessTime: 1/1/2012 12:00:00 AM, LastWriteTime: 1/1/2012 10:25:52 AM, ChangeTime: 0, FileAttributes: N
10:59:17.2070322 AM Explorer.EXE 3488 CloseFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS
10:59:17.2113668 AM Explorer.EXE 3488 QueryDirectory F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS Filter: ~SCTEMP.TMP, 1: ~SCTEMP.TMP
10:59:17.2121678 AM Explorer.EXE 3488 CreateFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
10:59:17.2151660 AM Explorer.EXE 3488 QueryBasicInformationFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS CreationTime: 1/1/2012 10:24:37 AM, LastAccessTime: 1/1/2012 12:00:00 AM, LastWriteTime: 1/1/2012 10:25:52 AM, ChangeTime: 0, FileAttributes: N
10:59:17.2167911 AM Explorer.EXE 3488 CloseFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS
10:59:17.2212159 AM Explorer.EXE 3488 QueryDirectory F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS Filter: ~SCTEMP.TMP, 1: ~SCTEMP.TMP
10:59:17.2403646 AM Explorer.EXE 3488 CreateFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Delete, AllocationSize: n/a, OpenResult: Opened
10:59:17.2446256 AM Explorer.EXE 3488 QueryStandardInformationFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP FILE CORRUPT
10:59:17.2475082 AM Explorer.EXE 3488 CloseFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS
10:59:17.2482462 AM Explorer.EXE 3488 CreateFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
10:59:17.2511208 AM Explorer.EXE 3488 QueryBasicInformationFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS CreationTime: 1/1/2012 10:24:37 AM, LastAccessTime: 1/1/2012 12:00:00 AM, LastWriteTime: 1/1/2012 10:25:52 AM, ChangeTime: 0, FileAttributes: N
10:59:17.2524969 AM Explorer.EXE 3488 CloseFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS
10:59:17.2567249 AM Explorer.EXE 3488 QueryDirectory F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS Filter: ~SCTEMP.TMP, 1: ~SCTEMP.TMP
10:59:17.2574888 AM Explorer.EXE 3488 CreateFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
10:59:17.2602465 AM Explorer.EXE 3488 QueryBasicInformationFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS CreationTime: 1/1/2012 10:24:37 AM, LastAccessTime: 1/1/2012 12:00:00 AM, LastWriteTime: 1/1/2012 10:25:52 AM, ChangeTime: 0, FileAttributes: N
10:59:17.2616200 AM Explorer.EXE 3488 CloseFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS
10:59:17.2719090 AM Explorer.EXE 3488 QueryDirectory F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS Filter: ~SCTEMP.TMP, 1: ~SCTEMP.TMP
10:59:17.2757625 AM Explorer.EXE 3488 CreateFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS Desired Access: Synchronize, Disposition: Open, Options: , Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
10:59:17.2786157 AM Explorer.EXE 3488 QueryNameInformationFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS Name: \ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP
10:59:17.2799958 AM Explorer.EXE 3488 CloseFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS
10:59:17.2807392 AM Explorer.EXE 3488 CreateFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
10:59:17.2836125 AM Explorer.EXE 3488 QueryBasicInformationFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS CreationTime: 1/1/2012 10:24:37 AM, LastAccessTime: 1/1/2012 12:00:00 AM, LastWriteTime: 1/1/2012 10:25:52 AM, ChangeTime: 0, FileAttributes: N
10:59:17.2849828 AM Explorer.EXE 3488 CloseFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS
10:59:17.2890907 AM Explorer.EXE 3488 QueryDirectory F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS Filter: ~SCTEMP.TMP, 1: ~SCTEMP.TMP
10:59:17.2898703 AM Explorer.EXE 3488 CreateFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
10:59:17.2927560 AM Explorer.EXE 3488 QueryBasicInformationFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS CreationTime: 1/1/2012 10:24:37 AM, LastAccessTime: 1/1/2012 12:00:00 AM, LastWriteTime: 1/1/2012 10:25:52 AM, ChangeTime: 0, FileAttributes: N
10:59:17.2941183 AM Explorer.EXE 3488 CloseFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS
10:59:17.2983454 AM Explorer.EXE 3488 QueryDirectory F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS Filter: ~SCTEMP.TMP, 1: ~SCTEMP.TMP
10:59:17.2987479 AM Explorer.EXE 3488 CreateFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Delete, AllocationSize: n/a, OpenResult: Opened
10:59:17.3032347 AM Explorer.EXE 3488 QueryStandardInformationFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP FILE CORRUPT
10:59:17.3057429 AM Explorer.EXE 3488 CloseFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS
10:59:17.3061712 AM Explorer.EXE 3488 CreateFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS Desired Access: Read Attributes, Delete, Disposition: Open, Options: Non-Directory File, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
10:59:17.3088678 AM Explorer.EXE 3488 QueryAttributeTagFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP INVALID PARAMETER
10:59:17.3103675 AM Explorer.EXE 3488 SetDispositionInformationFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS Delete: True
10:59:17.3322605 AM Explorer.EXE 3488 CloseFile F:\ddddddd\fff\hhhhhhh\eeeeeee\ccccccc\~SCTEMP.TMP SUCCESS

Hi,

 

 

Have you made any changes to the computer prior to this issue?

 

 

I would suggest you to try these methods and check the issue status.

 

 

Method 1:

Delete files using Disk Cleanup.

http://windows.microsoft.com/en-US/windows7/Delete-files-using-Disk-Cleanup

 

Method 2:

I would suggest you to scan your computer with Microsoft Safety Scanner, which would help us to get rid of viruses, spyware, and other malicious software. The Microsoft Safety Scanner is a free downloadable security tool that provides on-demand scanning and helps remove viruses, spyware, and other malicious software. It works with your existing antivirus software.
http://www.microsoft.com/security/scanner/en-us/default.aspx
Note: The Microsoft Safety Scanner expires 10 days after being downloaded. To rerun a scan with the latest anti-malware definitions, download and run the Microsoft Safety Scanner again.

Important: While performing scanning on the hard drive if any bad sectors are found on the hard drive when scanning tries to repair that sector if any data available on that might be lost.

 

You can also by connecting flash drive to different computer.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

 
 

Question Info

Last updated August 16, 2023 Views 459 Applies to: