Deleted Word Files Reappear on Network

I can't figure this one out and it's starting to really make me look bad.

Here's the deal. Users are working in and saving Word 2002 files to a network share from Windows XP Pro desktop/laptops to a Server 2003 file server... nothing fancy, just normal active directory ...all machines running the same OS (XP Pro) and Office XP. Latest service packs on everything.

Lately when users cut and paste files to and from folders on the file server... or delete files... the files reappear back in their original location. They essentially either get recreated or copied... not moved.

So, to reiterate... a user cuts a Word file from one directory on the server and pastes it into another... after about 45 minutes or so the file suddenly reappears back where it was originally cut from and is also where the user intended to paste it to.

Sounded like a virus to me so I ran our Trend Micro clients on each machine with the latest DATS and found nothing. I also scanned the server... nothing suspicious.

There's no permission errors either... the server is allowing the user to do what they want... it seems to work and then blammo... the cut or deleted files later reappear.

The only anomaly I can report is that we had some visitors here using Citrix Metaframe XP when this started happening. I uninstalled their Citrix clients after they went back to their respective offices in NYC... but, it was a long shot that Citrix had anything to do with anything and it still seems to be happening.

I've heard of this happening with Roaming Profiles... but I ain't got none... so, that ain't it.

Any ideas?

Did you ever find the solution to this problem. I am beginning to come across this problem myself and nowhere in anyplace I have seen anyone post the problem that you and have.

After much frustration, it turns out that one user in our office was running some software called "Second Copy". The program synchronizes whatever local directory you specify with a network share.

This particular user had Second Copy set incorrectly and whenever anyone deleted or changed a file in the network share, Second Copy would detect the change to the directory and "synchronize" or change the network share back to the state of the folder on the user's laptop.

So, if my described problem is happening to you... look locally before you start blaming Server 2003's Shadow Copy service... which was the only other thing besides a virus that I could possibly equate with the symptoms.

Second Copy is actually a decent tool if it's configured and tested before it's put into practice. What the user actually wanted to do was to have his laptop files updated from the network share, not synchronized. The settings interface is chock-full of vernacular that users get confused by....so, my guess is that this happens a lot with this software.

Cheers...