How can I find out which program creates a file/folder in my C: drive?

Solution 1:

You can use Process Monitor, free from Microsoft, to do that. Set filter inside the Process Monitor to this folder, and it will show you when/if it is accessed:

Process Monitor is an advanced monitoring tool for Windows that shows real-time file system, Registry and process/thread activity.

If you think this folder is being accessed only during the boot process, you can enable boot logging by selecting the corresponding menu point under Options. When you boot Windows the next time, Process Monitor will log all system activity into a log file, which can be reviewed at a later time. You'll really need to enter a restrictive filter, otherwise your boot time will be really long.

Solution 2:

Don't delete the folder. Change permissions so that only a specific account (different than the one you normally use) has access to the folder. That ought to throw a wrench in whatever processes is doing this, hopefully allowing you to catch it.