Thumbnail preview modifying "modified date" after upgrading from nt4

[icvanstra]

Slap me upside the head with a wet noodle....!!!

Sunday we upgraded a NT4 BDC to a W2K member server. We have found that when we preview image files (in particular JPG) the screen will refresh after a few seconds and the modified date will change. It does not matter if we perform the thumbnail preview from the server or another workstation.

Server is: W2K sp3
Workstations: 98 and W2K pro

-We have tried changing the file association...no luck.
-Server based antivirus has not reported anything. Currently running another scan from a workstation and another AV product.
-each time the screen refreshes the image we see "extracting FILENAME" appear in the lower left hand corner of the explorer window.
-We have tried stopping AV to see if that was it...no luck
-Used FILEMON to see what is accessing the file:
explorer.exe and the AV engine (when running)
-Appears to be only affecting .JPG

 

[icvanstra]

Update: we have turned off opportunistic locking and it has not made a difference.

 

[doomhamur]

Hello, when it was an nt4 bdc, did you use compression on the drive? Doomhamur
Network Engineer
"Certifications? we dont need no stinking certifiaction."
yahoo IM handle: greater_vortex

 

[icvanstra]

nope... no compression.

I'm getting ready to run a chkdsk (without fix) and see if there are any problems. I've been going back through my notes and I had some "odd" problems with this server data volume some time ago.

Starting to wonder if the upgrade didn't resurrect it...

 

[icvanstra]

chkdsk didn't provide any revelations. I copied the affected files to another partition on the same server and it is still happening.

 

[icvanstra]

the problem was eventually traced to Arcserve. the ashell.dll was causing problems with explorer.exe Re-applied the last patch for arcserve and it fixed the problem