Yes, you are totally right....
Its not when windows crashes that the problem occurs though... its when windows boot up again after the crash. Windows (realising that it has crashed) checks and repairs the files that were still in use when windows last crated an "OK" flag...(this normally happens every 5 to 10 minutes)... so everything that was in use for the last 5 minutes before your computer crashed will likely get replaced by the temporary copy windows kept (just in case)....
I have a very thorough event logger on my computer, that comes up with pages of "useless" data that got replaced while windows runs.... after windows recovered from a crash, there were about 10 pages of "replaced" files that was over written by files stored in a swap file.
