1. Welcome to TechPowerUp Forums, Guest! Please check out our forum guidelines for info related to our community.

How to get rid of mysterious "Toshiba drivers" folder from my desktop?

Discussion in 'Networking & Security' started by qubit, Feb 3, 2014.

  1. qubit

    qubit Overclocked quantum bit

    Joined:
    Dec 6, 2007
    Messages:
    9,870 (3.88/day)
    Thanks Received:
    3,498
    Location:
    Quantum well (UK)
    Ok, this is a weird one.

    With my old install of Windows 7 I had this mysterious "Toshiba drivers" folder spontaneously appear on my desktop. If I deleted it, it would always return, either within a few minutes or a few hours or a day and the folder was always empty. I tried to figure out where it was coming from, especially as I don't have any Toshiba hardware in my PC, but came up blank and googling didn't find anything on it, either. The only thing I could do was to set it to hidden and it's been like that for a good couple of years.

    My Windows install had become problematic, with lots of niggly things not working, so I've just installed a fresh copy on another drive and patched it. Everything was working fine, until I browsed the profile on my old Windows install to retrieve the files there. After allowing the permissions to be changed, I could open the Desktop folder and move the files over.

    And you guessed it, this bloody folder has now appeared on my new install! I deleted it and it returned within a few minutes. I deleted it again and it's still not shown up yet, but it will eventually.

    Now, besides being damned annoying, I wonder if there's some kind of malware doing this that browsing my old profile infected my new install? Note that I haven't installed Kasperky Internet Security yet. Perhaps if I had, it would have blocked this? I did run virus scans on the old install previously, using different security suites, but they never found anything.

    Any ideas on how to get rid of this once and for all?
     
    Last edited: Feb 4, 2014
  2. FX-GMC

    FX-GMC

    Joined:
    Aug 26, 2013
    Messages:
    887 (1.95/day)
    Thanks Received:
    346
    Location:
    Cumberland Plateau
    Curious issue you have here.

    Couple things that come to mind:

    -Search the registry for anything containing Toshiba drivers and see if anything looks suspect.
    -It also wouldn't hurt to see if something scheduled a task in the task scheduler.

    Also, have you checked the directory via command prompt to verify that the folder is actually empty. I've seen situations where windows explorer wouldn't see folders that were Hidden even with that view option turned on.
     
  3. qubit

    qubit Overclocked quantum bit

    Joined:
    Dec 6, 2007
    Messages:
    9,870 (3.88/day)
    Thanks Received:
    3,498
    Location:
    Quantum well (UK)
    I searched the registry for "toshiba drivers" and came up blank. I searched just for "toshiba" and it found a couple of entries, but they didn't look likely at all.
    I checked the Task Scheduler and again nothing.
    I did this for the old install way back when and just now on the new one. I also checked msconfig on both installs and nothing.

    No, I haven't looked at the directory via the command prompt, but I don't see what advantage that would have? The folder keeps getting recreated if I delete it and isn't even hidden. If it's already present though, duplicates are not created.

    Is there a monitoring program that one can run which will log what program or service/process has manipulated files and folders? Imagine targeting it at my desktop and getting a log file of the offending process that created it? Mystery solved.
     
  4. FX-GMC

    FX-GMC

    Joined:
    Aug 26, 2013
    Messages:
    887 (1.95/day)
    Thanks Received:
    346
    Location:
    Cumberland Plateau
    Running dir will tell you if there are any files in the directory. If there are, you could use something like process monitor (http://technet.microsoft.com/en-us/sysinternals/bb896645.aspx) to see what app is using the files.

    Found a couple of apps that monitor directories. http://brutaldev.com/page/Directory-Monitor http://www.ghacks.net/2013/04/08/monitor-windows-folders-for-file-changes/

    Unfortunately they do not say which process made the changes.
     
    qubit says thanks.
  5. jsfitz54

    jsfitz54

    Joined:
    Jun 18, 2010
    Messages:
    903 (0.56/day)
    Thanks Received:
    242
    Do you have a firmware install utility for the Samsung DVD drive listed in your "specs" aka TSST Corp? I just updated a SH-222BB with it.
     
  6. qubit

    qubit Overclocked quantum bit

    Joined:
    Dec 6, 2007
    Messages:
    9,870 (3.88/day)
    Thanks Received:
    3,498
    Location:
    Quantum well (UK)
    @Fx - I tried DIR, setting it to show hidden files and it didn't show me anything more than the equivalent Windows Explorer view. Thanks for the utility links, I'll try those. For now, that folder still hasn't returned.

    @js - No I don't have a firmware utility, but it has made me realize that Samsung DVD drive is actually a Toshiba-Samsung product. That drive is relatively new though and the problem has been around much longer than that, plus this is the only drive of this brand that I have.
     
  7. Solaris17

    Solaris17 Creator Solaris Utility DVD

    Joined:
    Aug 16, 2005
    Messages:
    17,347 (5.12/day)
    Thanks Received:
    3,656
    Location:
    Florida
    damn i was really banking on the task sheduler.

    hm so lets see service?

    ms config?

    appdata?

    check your event logs maybe. desktop iirc is an admin protected resource. which means that whatever it is should be leaving a log.


    WAIT

    check the desktop folder in the public/default user folder in the root of C:\ I used to use this trick in domains to keep users from deleting things on the desktop.
     
  8. Arjai

    Arjai

    Joined:
    Apr 3, 2012
    Messages:
    2,196 (2.28/day)
    Thanks Received:
    3,653
    Location:
    St. Paul, MN
    Buy an ASUS! :rolleyes:

    :laugh:
     
    Crunching for Team TPU
  9. FX-GMC

    FX-GMC

    Joined:
    Aug 26, 2013
    Messages:
    887 (1.95/day)
    Thanks Received:
    346
    Location:
    Cumberland Plateau
    Good call, forgot about that. Public is the one you want. Default is only on user creation.

    Deleting a folder from the user's desktop deletes it from the public user's desktop.
     
    Solaris17 says thanks.
  10. Solaris17

    Solaris17 Creator Solaris Utility DVD

    Joined:
    Aug 16, 2005
    Messages:
    17,347 (5.12/day)
    Thanks Received:
    3,656
    Location:
    Florida
    this is true only if the folder permissions allow it. if something created it in public and it is owned by system then he wont be able to it will re-appear. Especially since he migrated settings from an old Os install all of those folders are probably permission locked from being part of a seperate Os install none of the guids will match.
     
  11. FX-GMC

    FX-GMC

    Joined:
    Aug 26, 2013
    Messages:
    887 (1.95/day)
    Thanks Received:
    346
    Location:
    Cumberland Plateau
    So instead of giving a permissions error, it will disappear and re-appear?
     
  12. Solaris17

    Solaris17 Creator Solaris Utility DVD

    Joined:
    Aug 16, 2005
    Messages:
    17,347 (5.12/day)
    Thanks Received:
    3,656
    Location:
    Florida
    you got me it would.
     
  13. zsolt_93

    Joined:
    Jul 21, 2010
    Messages:
    310 (0.20/day)
    Thanks Received:
    83
    Location:
    Romania
    It is from Bluetooth drivers, checked out and your mobo seems to have Bluetooth. Toshiba Blutetooth Stack makes it appear.
     
    qubit says thanks.
  14. qubit

    qubit Overclocked quantum bit

    Joined:
    Dec 6, 2007
    Messages:
    9,870 (3.88/day)
    Thanks Received:
    3,498
    Location:
    Quantum well (UK)
    Thanks my mobo does have Bluetooth. I'll install the driver when I get home and see if this thing goes away. It's still kinda weird how it pops up for this one thing. Imagine if a folder popped up for every device without a driver?!

    The folder got created again btw. :laugh:
     
  15. RCoon

    RCoon Gaming Moderator Staff Member

    Joined:
    Apr 19, 2012
    Messages:
    7,734 (8.16/day)
    Thanks Received:
    3,846
    Location:
    Gypsyland, UK
    Drive to Toshiba HQ, set fire to laptop, throw at front entrance.
    Problem solved, don't buy Toshiba again.
     
    qubit says thanks.
  16. qubit

    qubit Overclocked quantum bit

    Joined:
    Dec 6, 2007
    Messages:
    9,870 (3.88/day)
    Thanks Received:
    3,498
    Location:
    Quantum well (UK)
    rofl :roll:
     

Currently Active Users Viewing This Thread: 1 (0 members and 1 guest)

Share This Page