NoteHKLM\SYSTEM\CurrentControlSet\Control\Session Manager\
The FileRenameOperations subkey stores the names of files to be deleted when the system is restarted.
The system adds this entry to the registry when a user or program tries to delete a file that is in use. The file names are stored in the value of this entry until the computer is restarted and then they are deleted.
Note
The files identified by this entry are deleted before the system creates its paging files. This sequence allows the system to delete paging files from previous startups.