disc c is growing itself

Viruses and worms
1

Hi, like in topic, my disc (partition C) is growing itself. I add to this post log from AdwCleaner

2

Log from Malwarebytes’ Anti-Malware

3

hey also attach a otl log and aswmbr from this guide

http://forum.avast.com/index.php?topic=53253.0

a malware expert will help you from there.

what do you mean with disc c is growing? storage on a hard drive usually decreases over the years when you have install programs and so one.

a picture would be nice.

4

I remove everything and I have 12GB free space, but after some hours I have again just 2,5GB free space and I did nothing, so it doesn’t look like normal. In attachment OTL log

5

You forget that many applications are putting temporary files on the drive.
Especially browsers do so.
Check your browser settings to see how much space is allowed for temporary (cache) files.

6

dont forget aswmbr log: http://forum.avast.com/index.php?topic=53253.0

7

yes, I know, but I have some problem with my computer, because when aswmbr is scaning in some time Blue Screen is showing - f… :/. Is it possible to start aswmbr from boot CD (without Windows)?

8

Try this and let me know what the result is

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

https://dl.dropbox.com/u/73555776/OTL_Fix.GIF


:Commands
[CREATERESTOREPOINT]

:OTL
O4 - HKLM..\Run: [winn] C:\Windows\System32\winn\winn.exe ()

:Files
C:\Windows\System32\winn

:Commands
[resethosts]
[emptytemp]
[Reboot]

[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

9

At this moment I have 5.6GB, so we will see what will be going on with free space. I had 2.6GB, but I transfer from desktop 2GB, so your command remove/give me just 1GB more. I really had more than 10GB. We will see in next hours.

10

OTL only cleared about 150Mb monitor and let me know if it is stable

11

Today I have 1.73GB → I really remove a lot of stuff, and still I have less free space → it is unnormal :(. I will try to find these files.

12

Download and run Windirstat http://windirstat.info/ this will show which folders are eating the space

13
I remove everything and I have 12GB free space, but after some hours I have again just 2,5GB free space and I did nothing
So you booted the system and did nothing? That is something I don't believe. You didn't used any application in those hours? If so, then why booting the system if you don't do anything with it?
because when aswmbr is scaning in some time Blue Screen is showing
What is the [b]EXACT[/b] error on the bsod?
14

Hi, off course that I do some thing, but I didn’t install new program, I didn’t put on my disk any big files and etc. I was running FF na Thunderbird (I have file on D partition), so I was using my computer but I didn’t do anything to lose free space on C partition.

This BSOD is IRQL NOT LESS OR EQUAL, and I found my dump file and discovered that problem is with some driver.

Windirstat give me this information:
c:\windows → 27.7GB
c:\windows\winsxs → 14GB
c:\windows\Installer → 5GB
c:\windows\System32-> 4GB

C:\System Volume Information → 22.5GB
C:\System Volume Information{699a6eaf-3100-11e3-be8d-001b38ad9955}{3808876b-c176-4e48-b7ae-04046e6cc752} → 3.7GB
C:\System Volume Information{ba710e85-2ff9-11e3-9773-001b38ad9955}{3808876b-c176-4e48-b7ae-04046e6cc752} → 3.7GB
C:\System Volume Information{b54cfaf9-2fce-11e3-af3c-001b38ad9955}{3808876b-c176-4e48-b7ae-04046e6cc752} → 3.5GB
C:\System Volume Information{14c0ac07-3098-11e3-bfd5-001b38ad9955}{3808876b-c176-4e48-b7ae-04046e6cc752} → 2.8GB
C:\System Volume Information{5d9debdc-2f0f-11e3-80f5-001b38ad9955}{3808876b-c176-4e48-b7ae-04046e6cc752} → 2.4GB
C:\System Volume Information{5d9debea-2f0f-11e3-80f5-001b38ad9955}{3808876b-c176-4e48-b7ae-04046e6cc752} → 1.5GB
C:\System Volume Information{2e37cdd7-303a-11e3-9cd7-001b38ad9955}{3808876b-c176-4e48-b7ae-04046e6cc752} → 1.3GB
C:\System Volume Information{699a6eab-3100-11e3-be8d-001b38ad9955}{3808876b-c176-4e48-b7ae-04046e6cc752} → 1.3GB
C:\System Volume Information{ba710e67-2ff9-11e3-9773-001b38ad9955}{3808876b-c176-4e48-b7ae-04046e6cc752} → 1.2GB
C:\System Volume Information{ba710e65-2ff9-11e3-9773-001b38ad9955}{3808876b-c176-4e48-b7ae-04046e6cc752} → 1GB

C:\Program Files → 19.9GB

C:\Users → 10.8GB

C:\pagefile.sys → 3.3GB

C:\hiberfil.sys → 3.0GB

There are the most eatable files. What are these C:\System Volume Information{…}? OK I remove restore options and it removes C:\System Volume Information, so now I have 28.9GB free space on C partition. I will be watching this free space and tell you what is going on.

15

Yes you did do something to loose space. You have used FF. It uses temporary files.

Get CCleaner and let see if it can free up more space.

16

Plus the system restore backups are using 22Gb so you can delete all but the last one to recover more space

17

I remove recovery files and now I have 29GB free space. I will be watching this free space and tell if it will be again less ans less. Probably it is not virus, but it was this recovery tool and when I move files from C to another partition it made recovery, so I lose this free space. Thanks.

18

Maybe you should buy an external hard drive. You can copy all important files off from your PC.

And you can plug in the harddrive when you need it, and your files are mostly safe from viruses which in fect your PC
but not the harddrive when its not plugged in.

I am doing this at the moment.

19

A cd-r(w)/dvd-r(w) would also work. Backup data. That is the most important. Applications can always be downloaded/installed again.

20

I have external disc 1TB and 200MB in my computer. Definitely problem was with windows restore backups. When I have removed files and have had more extra free space, windows have created new restore backup so again I have lose free space, and again and again. Now I have 28.9GB free space, so everything works well. Thank you everybody and sorry for alert. BTW I use external disc to make backups - not system partition.