Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Latest News:    New GPUBreach attack enables system takeover via GPU rowhammer

Featured Deal: Protect up to 9 devices from ads and tracking for just $16 in this AdGuard deal

Latest Buyer's Guide:     Best VPNs in 2025

Generic User Avatar

60gb unknown file in windirstat

Started by zakisbak , Jul 03 2015 02:22 PM

  • Please log in to reply
28 replies to this topic

#1 zakisbak

zakisbak

  • Avatar image
  • Members
  • 110 posts
  • OFFLINE
    •  
  • Local time:11:34 PM

Posted 03 July 2015 - 02:22 PM

Hi

My windirstat shows a 60gb unknown file.

When I do maintenance,I always delete the large system restore file in cleanup,but I do not think it is this as it is too large.
I have just done disk cleanup and removed System Restore and Shadow copies,and removed 36gb from my hard drive.
windirstat now shows 24gb unknown file,ie,roughly 36gb smaller.

Is this normal for system restore files?
What is the remaining 24gb,should it worry me?

Vista Ultimate SP2
Athlon X2 250 3.00ghz
4gb RAM

Thanks
 


BC AdBot (Login to Remove)

 

#2 Aura

Aura

    Bleepin' Special Ops


  • Avatar image
  • Malware Response Team
  • 19,709 posts
  • OFFLINE
    •  
  • Gender:Male
  • Local time:07:34 PM

Posted 03 July 2015 - 04:06 PM

Hi zakisbak :)

Is WinDirStat showing that 24GB of files at the root of the C: drive? If not, where is it located?

animinionsmalltext.gif

#3 zakisbak

zakisbak
  • Topic Starter

  • Avatar image
  • Members
  • 110 posts
  • OFFLINE
    •  
  • Local time:11:34 PM

Posted 04 July 2015 - 05:28 AM

Hi Aura :tophat:

Attached File  ScreenHunter_47 Jul. 04 11.22.jpg   197.96KB   0 downloads

It is C Users.

It is has grown by 6gb overnight!

Could this be the System Restore/Shadow Copy?
It seems a bit large and doesn't completely remove when System Restore/Shadow Copy deleted.


#4 Willy22

Willy22

  • Avatar image
  • Members
  • 945 posts
  • OFFLINE
    •  
  • Gender:Not Telling
  • Location:Planet Earth
  • Local time:12:34 AM

Posted 04 July 2015 - 07:24 AM

- Make a new System Restore Point. Does that file grow ? And by how much ?

- One or another program seems to be adding to that file upon startup. Are there any suspect tasks in Task Scheduler ? What kind of "System Restore Option" did you choose ?


Edited by Willy22, 04 July 2015 - 07:35 AM.

#5 Aura

Aura

    Bleepin' Special Ops


  • Avatar image
  • Malware Response Team
  • 19,709 posts
  • OFFLINE
    •  
  • Gender:Male
  • Local time:07:34 PM

Posted 04 July 2015 - 08:21 AM

Go in the Folder Options and check Show hidden files, folders and drives and uncheck Hide protected operating system files (recommended). Once done, give me a screenshot of your C: drive via Windows Explorer.

animinionsmalltext.gif

#6 zakisbak

zakisbak
  • Topic Starter

  • Avatar image
  • Members
  • 110 posts
  • OFFLINE
    •  
  • Local time:11:34 PM

Posted 11 July 2015 - 04:14 PM

You mean double click on C disc and screenshot that?


#7 Aura

Aura

    Bleepin' Special Ops


  • Avatar image
  • Malware Response Team
  • 19,709 posts
  • OFFLINE
    •  
  • Gender:Male
  • Local time:07:34 PM

Posted 11 July 2015 - 04:15 PM

No, you'll open the Windows Explorer and go on the C: drive (the root of it) then take a screenshot and attach it here :)

animinionsmalltext.gif

#8 zakisbak

zakisbak
  • Topic Starter

  • Avatar image
  • Members
  • 110 posts
  • OFFLINE
    •  
  • Local time:11:34 PM

Posted 12 July 2015 - 04:36 AM

Attached File  ScreenHunter_85 Jul. 12 10.34.jpg   154.46KB   0 downloads

Ok


#9 Aura

Aura

    Bleepin' Special Ops


  • Avatar image
  • Malware Response Team
  • 19,709 posts
  • OFFLINE
    •  
  • Gender:Male
  • Local time:07:34 PM

Posted 12 July 2015 - 08:09 AM

This isn't your C: drive. Enter C: in the address bar at the top and press on Enter. Then take a screenshot and attach it.

animinionsmalltext.gif

#10 zakisbak

zakisbak
  • Topic Starter

  • Avatar image
  • Members
  • 110 posts
  • OFFLINE
    •  
  • Local time:11:34 PM

Posted 12 July 2015 - 01:30 PM

Attached File  ScreenHunter_86 Jul. 12 19.25.jpg   178.81KB   0 downloadsAttached File  ScreenHunter_87 Jul. 12 19.25.jpg   234.73KB   0 downloadsAttached File  ScreenHunter_88 Jul. 12 19.25.jpg   224.44KB   0 downloadsAttached File  ScreenHunter_89 Jul. 12 19.25.jpg   223.45KB   0 downloadsAttached File  ScreenHunter_90 Jul. 12 19.25.jpg   231.17KB   0 downloadsAttached File  ScreenHunter_91 Jul. 12 19.26.jpg   232.21KB   0 downloadsAttached File  ScreenHunter_92 Jul. 12 19.26.jpg   228.59KB   0 downloads


#11 Aura

Aura

    Bleepin' Special Ops


  • Avatar image
  • Malware Response Team
  • 19,709 posts
  • OFFLINE
    •  
  • Gender:Male
  • Local time:07:34 PM

Posted 12 July 2015 - 01:33 PM

You can delete all these "Windows Cabinet File" and empty your Recycle Bin after.

animinionsmalltext.gif

#12 zakisbak

zakisbak
  • Topic Starter

  • Avatar image
  • Members
  • 110 posts
  • OFFLINE
    •  
  • Local time:11:34 PM

Posted 12 July 2015 - 01:42 PM

- Make a new System Restore Point. Does that file grow ? And by how much ?

- One or another program seems to be adding to that file upon startup. Are there any suspect tasks in Task Scheduler ? What kind of "System Restore Option" did you choose ?

- Where do I look for System Restore Point file,and its size?

- I do not have enough knowledge to spot suspect task in Task Scheduler.

- I have not chosen any System Restore Options,so I presume default settings.


When I do disc cleanup in weekly maintenance,I click on More Options-then System Restore and Shadow Copies.
This removes about 30GB of the Unknown File,leaving about 20GB.
I think it pretty quickly enlarges again.




 


#13 zakisbak

zakisbak
  • Topic Starter

  • Avatar image
  • Members
  • 110 posts
  • OFFLINE
    •  
  • Local time:11:34 PM

Posted 12 July 2015 - 02:09 PM

You can delete all these "Windows Cabinet File" and empty your Recycle Bin after.

Done.

Unknown was still 38.2GB.

Ran disc cleanup-more options-system restore and shadow copies.

Unknown now 22.5GB.


#14 Aura

Aura

    Bleepin' Special Ops


  • Avatar image
  • Malware Response Team
  • 19,709 posts
  • OFFLINE
    •  
  • Gender:Male
  • Local time:07:34 PM

Posted 12 July 2015 - 02:12 PM

Can you take a new screenshot of your C: drive and show me? I'll list you what else to delete, I think I found the file.

animinionsmalltext.gif

#15 zakisbak

zakisbak
  • Topic Starter

  • Avatar image
  • Members
  • 110 posts
  • OFFLINE
    •  
  • Local time:11:34 PM

Posted 12 July 2015 - 02:21 PM

Attached File  ScreenHunter_93 Jul. 12 20.16.jpg   179.81KB   0 downloads

System Volume?

Or it could be windirstat error?

C-r click-properties now shows correct/expected size:117GB used,115 free.

I'll see how it changes over next few days.

 


Back to Windows Vista


1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users


  1. BleepingComputer Forums
  2. → Microsoft Windows Support
  3. → Legacy Windows Operating Systems
  4. → Windows Vista
  5. Privacy Policy
  6. Rules ·