finding what made a file

[imported_jb]

i got a bunch of 0-byte files in C:\ that are most likely NOT from spyware. they're named like:
t1a0.3, t19c.3, t19c, etc. all starting w/ "t1" followed by XX being 0-9, a-z, and if there is an extension, it is 0-9.
i thought google said it 'could' be from MySQL, but i highly doubt it now.
is there anyway to find out what created the files?

 

[Nothinman]

If the files have been closed, not likely. Grab filemon and see if there is still a process with a filehandle for those files. You could also take a way creation rights from the root directory and see what complains, crashes, etc but you run the risk of locking yourself out of your machine if you do it incorrectly.