Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

hard disk shrinks!


  • Please log in to reply

#1
marcmaff333

marcmaff333

    New Member

  • Member
  • Pip
  • 3 posts
Hi all,
i have a problem with my hard disk... the C partition loses about 30Mb per hour
of free space without me adding anything. When I check the C hard disk with diskdata
i see that between windows and programs I have about 12gb occupied.
Considering that C is 32gb there should be 20gb available! Instead there's only 2
left, and they are going away quickly, about 300-400Mb per day.
I think this process was gradual and happened in the last moths as well.
Do you have any ideas what my laptop could have?
Nothing is happening apparently to the document's partition D, also 32gb.
Thx all,
M
  • 0

Advertisements


#2
Tyger

Tyger

    Member 2k

  • Member
  • PipPipPipPipPip
  • 2,896 posts
I would go into Folder Options and allow viewing of hidden files and folders, then open the C: drive and right click on all the folders and view properties and find which ones are bloated. Then just dig down until you find the excess files. If all the folders, including the hidden ones, don't add up to the 12gb then you may have a problem with the boot sector or file system.

One you've found the files you can post here and we can help with the problem.
  • 0

#3
marcmaff333

marcmaff333

    New Member

  • Topic Starter
  • Member
  • Pip
  • 3 posts
12gb is all i have, including the hidden files... have a look at the two images... free space decreases
a lot in 2 days without anything else growing significantly!

Attached Thumbnails

  • 07_25_2008.jpg
  • 07_27_11_30.jpg

  • 0

#4
marcmaff333

marcmaff333

    New Member

  • Topic Starter
  • Member
  • Pip
  • 3 posts
MIRACLEEEEEEEEEE!!!!
I ran combofix a couple of times after reading of someone with similar problems.
At first nothing, I keep working but at least HDD space seems to have stopped
decreasing rapidly, maybe i can finish my phd thesis after all...
Then , after 12 hours, suddenly, I get 20.5gb free hard disk!!!
What a relief guys...

So, I have the log file of the second time I run combofix, don't understand anything
about it, can you see something interesting that explains what was happening?
I am still scared the HDD space could disappear again...
Thanks!

ComboFix 08-07-26.1 - marco valdés 2008-07-27 18.50.03.2 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1040.18.178 [GMT 2:00]
Eseguito da: C:\Documents and Settings\marco valdés\Desktop\ComboFix.exe

ATENÇÃO - ESTA MAQUINA NAO TEM A CONSOLE DE RECUPERAÇÃO INSTALADA !!
.

((((((((((((((((((((((((( Files Creati Da 2008-06-27 al 2008-07-27 )))))))))))))))))))))))))))))))))))
.

2008-07-27 18:46 . 2008-07-27 18:46 <DIR> d-------- C:\Programmi\Trend Micro
2008-07-27 13:52 . 2008-07-27 13:52 <DIR> d-------- C:\Documents and Settings\marco valdÚs
2008-07-26 19:38 . 2008-07-26 19:38 <DIR> d-------- C:\Programmi\Security Task Manager
2008-07-26 19:38 . 2008-07-26 19:43 <DIR> d-------- C:\Documents and Settings\All Users\Dati applicazioni\SecTaskMan
2008-07-24 15:25 . 2008-07-24 15:25 <DIR> d-------- C:\Programmi\Avira
2008-07-24 15:25 . 2008-07-24 15:25 <DIR> d-------- C:\Documents and Settings\All Users\Dati applicazioni\Avira
2008-07-21 09:01 . 2008-07-21 09:01 244 --ah----- C:\sqmnoopt16.sqm
2008-07-21 09:01 . 2008-07-21 09:01 232 --ah----- C:\sqmdata16.sqm
2008-07-08 12:44 . 2008-07-08 12:44 <DIR> d-------- C:\Programmi\CCleaner
2008-07-02 23:23 . 2008-07-02 23:23 56 --ah----- C:\WINDOWS\system32\ezsidmv.dat
2008-07-02 23:10 . 2008-07-02 23:10 <DIR> d-------- C:\Programmi\File comuni\Skype
2008-06-28 23:12 . 2008-06-30 20:47 <DIR> d-------- C:\WINDOWS\system32\Adobe

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-07-27 16:53 3,387,424 --sha-w C:\WINDOWS\system32\drivers\fidbox.dat
2008-07-27 16:41 43,616 --sha-w C:\WINDOWS\system32\drivers\fidbox.idx
2008-07-26 11:23 --------- d-----w C:\Programmi\SUPERAntiSpyware
2008-07-25 23:25 --------- d-----w C:\Documents and Settings\marco valdés\Dati applicazioni\Skype
2008-07-25 23:23 --------- d-----w C:\Documents and Settings\marco valdés\Dati applicazioni\skypePM
2008-07-25 16:50 2,073,837 ----a-w C:\WINDOWS\Internet Logs\tvDebug.zip
2008-07-23 15:53 118,654 ----a-w C:\WINDOWS\Internet Logs\vsmon_2nd_2008_07_23_17_47_44_small.dmp.zip
2008-07-22 20:46 --------- d-----w C:\Programmi\eMule
2008-07-21 14:49 --------- d-----w C:\Programmi\Microsoft Works
2008-07-21 14:45 --------- d--h--w C:\Programmi\InstallShield Installation Information
2008-07-21 14:35 --------- d-----w C:\Programmi\Sony
2008-07-21 13:37 --------- d-----w C:\Programmi\File comuni\Sony Shared
2008-07-21 13:33 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\Sony Corporation
2008-07-21 13:29 --------- d-----w C:\Programmi\iPod
2008-07-21 13:25 --------- d-----w C:\Documents and Settings\marco valdés\Dati applicazioni\Sony Corporation
2008-07-21 13:23 --------- d-----w C:\Programmi\Java
2008-07-13 19:22 2,210,816 ----a-w C:\WINDOWS\Internet Logs\xDB1.tmp
2008-07-09 07:05 75,248 ----a-w C:\WINDOWS\zllsputility.exe
2008-07-09 07:05 1,086,952 ----a-w C:\WINDOWS\system32\zpeng24.dll
2008-07-08 20:47 --------- d-----w C:\Programmi\WM Recorder
2008-06-15 13:33 --------- d-----w C:\Documents and Settings\marco valdés\Dati applicazioni\iScreensaver
2008-04-30 15:15 180,224 ----a-w C:\WINDOWS\system32\cnvshell.dll
2008-02-26 09:12 32 ----a-w C:\Documents and Settings\All Users\Dati applicazioni\ezsid.dat
.

((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Nota* i valori vuoti & legittimi/default non sono visualizzati.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-19 14:00 15360]
"updateMgr"="C:\Programmi\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 17:45 313472]
"SsAAD.exe"="C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe" [2006-05-08 06:17 81920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2005-05-27 05:24 6746112]
"Apoint"="C:\Programmi\Apoint\Apoint.exe" [2003-11-07 10:21 114688]
"AzMixerSel"="C:\Programmi\Realtek\InstallShield\AzMixerSel.exe" [2005-05-20 11:06 57344]
"ISBMgr.exe"="C:\Programmi\Sony\ISB Utility\ISBMgr.exe" [2004-02-20 14:12 32768]
"VAIO Update 2"="C:\Programmi\Sony\VAIO Update 2\VAIOUpdt.exe" [2005-01-14 13:43 151552]
"Acrobat Assistant 7.0"="C:\Programmi\Adobe\Acrobat 7.0\Distillr\Acrotray.exe" [2005-03-03 21:47 483328]
"iTunesHelper"="C:\Programmi\iTunes\iTunesHelper.exe" [2005-10-18 12:58 278528]
"QuickTime Task"="C:\Programmi\QuickTime\qttask.exe" [2005-12-17 16:25 155648]
"SonyPowerCfg"="C:\Programmi\Sony\VAIO Power Management\SPMgr.exe" [2005-10-19 23:07 184320]
"TkBellExe"="C:\Programmi\File comuni\Real\Update_OB\realsched.exe" [2008-04-02 08:57 185896]
"avgnt"="C:\Programmi\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-02-12 10:06 262401]
"Mouse Suite 98 Daemon"="ICO.EXE" [2002-03-14 16:46 45056 C:\WINDOWS\system32\ico.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-19 14:00 15360]

C:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\
Avvio veloce di Adobe Reader.lnk - C:\Programmi\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 23:05:26 29696]

[HKEY_LOCAL_MACHINE\software\policies\microsoft\windows\windowsupdate\au]
"NoAutoUpdate"= 1 (0x1)

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "C:\Programmi\SUPERAntiSpyware\SASSEH.DLL" [2006-12-20 13:55 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2007-04-19 13:41 294912 C:\Programmi\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VESWinlogon]
2006-09-23 16:24 73728 C:\WINDOWS\system32\VESWinlogon.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.dvsd"= C:\PROGRA~1\FILECO~1\SONYSH~1\VideoLib\sonydv.dll

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Programmi\\Messenger\\msmsgs.exe"=
"C:\\Programmi\\iTunes\\iTunes.exe"=
"C:\\Programmi\\Sony\\VAIO Media 4.0\\Vc.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Programmi\\InternetCalls.com\\InternetCalls\\InternetCalls.exe"=
"C:\\Programmi\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Programmi\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Programmi\\Skype\\Phone\\Skype.exe"=

R2 AdobeActiveFileMonitor;Adobe Active File Monitor;C:\Programmi\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe [2004-10-20 04:47]
R3 SPI;Sony Programmable I/O Control Device;C:\WINDOWS\system32\DRIVERS\SonyPI.sys [2002-08-20 04:59]
S3 Image Converter video recording monitor for VAIO Entertainment;Image Converter video recording monitor for VAIO Entertainment;C:\Programmi\Sony\Image Converter 2\IcVzMon.exe [2005-04-05 13:06]

*Newly Created Service* - CATCHME
.
.
------- Supplementary Scan -------
.
R0 -: HKCU-Main,Start Page = hxxp://arxiv.org/list/astro-ph/new
R0 -: HKCU-Main,SearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
R1 -: HKCU-SearchURL,(Default) = hxxp://www.google.com/search?q=%s
O8 -: &Search - http://kn.bar.need2f...earch.html?p=KN
O8 -: E&sporta in Microsoft Excel - C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000

O16 -: Microsoft XML Parser for Java - file://C:\WINDOWS\Java\classes\xmldso.cab
C:\WINDOWS\Downloaded Program Files\Microsoft XML Parser for Java.osd

O16 -: {CE8267C2-D41A-4A50-A69D-F32B5C289F14} - hxxp://plugin.fileopen.com/current/FileOpen.CAB
C:\WINDOWS\Downloaded Program Files\FileOpenInstall.OSD
C:\WINDOWS\Downloaded Program Files\FileOpenInstall.dll

O16 -: {E61135DF-716D-49A7-B29B-8287A1CD072C} - hxxp://quattroruote.immanens.com/it/widelook/widelookX.cab
C:\WINDOWS\Downloaded Program Files\WidelookX.inf


**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-07-27 18:53:15
Windows 5.1.2600 Service Pack 2 NTFS

scansione processi nascosti ...

scansione entrate autostart nascoste ...

Scansione files nascosti ...

Scansione completata con successo
Files nascosti: 0

**************************************************************************
.
Ora fine scansione: 2008-07-27 18:58:10
ComboFix-quarantined-files.txt 2008-07-27 16:58:03
ComboFix2.txt 2008-07-27 11:52:34

Pre-Run: 2,713,923,584 byte disponibili
Post-Run: 2,705,481,728 byte disponibili

132 --- E O F --- 2008-02-13 09:15:39
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP