Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Hardrive Fulling Up


  • Please log in to reply
8 replies to this topic

#1 jpd9930

jpd9930

  • Members
  • 221 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:32 PM

Posted 11 August 2008 - 04:05 PM

Hi guys,

posted earlier about this but didnt get any response...I dont think I had email notification checked..

anyway my C: drive keeps filling up. Right now I have 0MB available. I continually delete software to make room but within hours even 200MB is used up...I have run Trend-micro internet security 2007, housecall, Hijackthis 2x and ad-aware SE. Nothing has come up.

I run a P4 with XP Pro and 750MB Ram

I am fairly proficient with finding rouge software and deleting it.

any help will be much appreciated.

thanks

Edited by jpd9930, 11 August 2008 - 04:06 PM.


BC AdBot (Login to Remove)

 


#2 Galadriel

Galadriel

    Bleepin Elf


  • Malware Response Team
  • 2,753 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Missouri, USA
  • Local time:12:32 PM

Posted 11 August 2008 - 09:06 PM

There are several possibilities.

Have a look at which folders take up the most space. Usually uncontrollable loss of disk space is due to one of two things. Either it's a worm replicating, or you are using some P2P app and downloading stuff in the background. Have you run disk cleanup?

I would be inclined to think there's an infection though. If you are proficient, I'd assume you know how much space you're supposed to have. Windows will not run nicely with anything less than 15% free space, so you have quite an urgent problem on your hands. I suggest you look into what is taking up that space soon. I'd be really interested in seeing the Hijack This log, are you absolutely sure it was all clean?
I cemna prestar aen. Han mathon ne nen. Han mathon ne chae. A han noston ne 'wilith. - Galadriel
'The avatar is changed; I can feel it in the water, I can feel it in the earth, I can smell it in the air.'

Phear teh ceiling cat, for he is roofkittehd! - Basement Cat

I'm a Bleeping Folder, are you? - Join BC in the fight against diseases - Click here
Become a BleepingComputer fan: Facebook

#3 DaChew

DaChew

    Visiting Alien


  • BC Advisor
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:02:32 PM

Posted 12 August 2008 - 07:16 AM

How big is your C partition?
Chewy

No. Try not. Do... or do not. There is no try.

#4 jpd9930

jpd9930
  • Topic Starter

  • Members
  • 221 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:32 PM

Posted 12 August 2008 - 01:57 PM

What the heck is Fulling up? I think I would have to scratch my head over that one...


I can post my HJT here if you like...

My first physical drive is 40G with 16G allocated to C:. Currently on the entire drive I have about 4 gigs free. I've tried partition magic but I get an error...I assume due to no available space.

I'm not sure about the P2P apps... I would need some guidience on that.

I have not run anything that will detect vundo but will today.

Edited by jpd9930, 12 August 2008 - 01:58 PM.


#5 DaChew

DaChew

    Visiting Alien


  • BC Advisor
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:02:32 PM

Posted 12 August 2008 - 05:45 PM

First let's make so more room, go into add/remove programs and uninstall any big program than can be reinstalled to another partition

Run disk cleanup as suggested

Turn off hibernation

Move any data off the drive

Once you get at least 2 gigs free run defrag

Then run a scan with MBAM and post the log

http://www.bleepingcomputer.com/forums/ind...st&p=876163

If you choose to go the HJT route then post in that forum so this thread can be closed

If you want a thread with general help with XP you need to post in that forum

Edited by DaChew, 12 August 2008 - 05:46 PM.

Chewy

No. Try not. Do... or do not. There is no try.

#6 jpd9930

jpd9930
  • Topic Starter

  • Members
  • 221 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:32 PM

Posted 13 August 2008 - 10:57 AM

I ran disk cleanup and got 1.4G so I ran defrag...didnt do much..I think I still need more room (only 8% Free) before I get any real benefit from defrag...

I ran MBAM. here is the log ( I am rerunning it now):

Malwarebytes' Anti-Malware 1.24
Database version: 1046
Windows 5.1.2600 Service Pack 2

11:56:14 AM 8/13/2008
mbam-log-8-13-2008 (11-56-14).txt

Scan type: Full Scan (C:\|F:\|)
Objects scanned: 90833
Time elapsed: 58 minute(s), 26 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 5
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CLASSES_ROOT\Typelib\{3c2d2a1e-031f-4397-9614-87c932a848e0}

(Adware.Minibug) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\minibugtransporter.minibugtransporterx (Adware.Minibug) ->

Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\minibugtransporter.minibugtransporterx.1 (Adware.Minibug) ->

Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\AdvRemoteDbg (Adware.Agent) ->

Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\MediaHoldings (Adware.PlayMP3Z) ->

Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\WINDOWS\system32\WhoisCL.exe (Adware.BHO) -> Quarantined and deleted

successfully.

Edited by jpd9930, 13 August 2008 - 10:58 AM.


#7 DaChew

DaChew

    Visiting Alien


  • BC Advisor
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:02:32 PM

Posted 13 August 2008 - 11:33 AM

If this is not a laptop, did you turn off hibernation?

http://www.tunexp.com/tips/maintain_your_c...bernation_file/

that would be another 750 megs

I keep 9 gigs free on my 15 gig C partition, certain video programs like to have a lot available for temp files
Chewy

No. Try not. Do... or do not. There is no try.

#8 jpd9930

jpd9930
  • Topic Starter

  • Members
  • 221 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:32 PM

Posted 13 August 2008 - 09:42 PM

No this is not a laptop...turned off hybernation..used discleanup....so far no excessive use of disk space...

we will see how it goes

thanks for the help

#9 DaChew

DaChew

    Visiting Alien


  • BC Advisor
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:02:32 PM

Posted 14 August 2008 - 06:09 AM

This is a very debatable subject, but system restore can eat a lot of your hard drive space, many swear by it, I don't use it myself. I did have it turned on for service pack 3. It seems that newer malware has found better uses for it tho.
The first thing it does is erase all the good restore points and then make a new one backing itself up.

You might want to set a new restore point then delete the older ones with advanced disk cleanup and then run defrag again

Edited by DaChew, 14 August 2008 - 06:11 AM.

Chewy

No. Try not. Do... or do not. There is no try.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users