>The only way that would happen is if the site had somehow remapped the temp directory to c:\windows\temp.
>Issue a %temp% at the command prompt and see what it comes back with.
>It can be overridden in the user section of environment variables.

That is so if you assume these files were created by his app. But it's equally possible that they were created by anything else that crashed and left them. That they contain "VFP" in any shape means nothing - looking at my .tmp files, I've found only three files (out of 120+ some) containing "foxpro", and all three were indexes created on something - I could see type+id+padr(name,20) as the key definition - and there was an entry "visual foxpro debugger" in each of them.

However, one of the offending files being an executable... my bet (not much, just one beer) is that these files are just random blocks allocated for something that crashed. The content in them may not even be initialized - it may be just whatever was on the disk in the allocated blocks. Alternately, these may come from some installer which unpacked them (along with other files) but then crashed before completing.