Gradual Loss of Free Space is Driving me insane

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by drunk_donkey, Dec 29, 2005.

  1. drunk_donkey

    drunk_donkey Private E-2

    SOMEONE PLEASE HELP!!!! Everyday I have 1GB less free space. It keeps decreasing. This started a while ago and I ran sfc /scannow. My memory returned but it began to go down again. Once it reached really low again and so I uninstalled what I thought the problem might be (Limewire) then I ran all the chkdsks (chkdsk c:/f , /v, /p ,/r) and sfc /scannow along with Disk Cleanup. This too gave me all my memory back but once again it began to go down again. I have run all the chkdsk, sfc /scannow and Disk Cleanup but its not working. I'm not getting any of my free space back. I have installed numerous anti-spyware and malicious software removers and Diagnostics but thay all come up with nothing. I am ussually pretty good at solving computer problems but I can't figure this out. My friend had something like this happen to him. He said it was a backdoor where people uploaded things onto your computer but I wouldn't know how to find out if thats what this is. I have Windows XP. Please post if you have any suggestions. All help is greatly appreciated.

    Thanks
     
  2. drunk_donkey

    drunk_donkey Private E-2

    For the people that really know their stuuf. I ran Hijackthis and heres the results. I know nothing about what is good and bad by looking at the results but I'm sure some of you geniuses will know. Please tell me if theirs something there that is bad.

    Edit: Removed inline log file
     
    Last edited by a moderator: Dec 29, 2005
  3. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    Moved thread to the spyware forum for you :)


    Please follow the steps below:

    Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

    Make sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


    After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis:

    Downloading, Installing, and Running HijackThis
     
  4. drunk_donkey

    drunk_donkey Private E-2

    Oops.

    I followed the instructions but nothing came up. All the scans found were some cookies that I'm sure would noth effect my computer so greatly and also must have just gotten on because every day I run numerous scans. The bitdefender scan did not work for me but thats the only one I didnot run. What is suggested I do next?
     
  5. drunk_donkey

    drunk_donkey Private E-2

  6. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    drunk_donkey,

    Please ATTACH a fresh HJT log.
     
  7. drunk_donkey

    drunk_donkey Private E-2

    Heres the new HijackThis scan I just ran. If I did something wrong I'm happy to do it again but it should be good.
     

    Attached Files:

    Last edited by a moderator: Dec 30, 2005
  8. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Attach the log to your post using the manage attachments feature.
     
  9. drunk_donkey

    drunk_donkey Private E-2

    I attached it using the manage attachments. Nothing is appearing on the writting box but I will post this and hopefully it will work.
     
  10. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Your posting me the link for the download, I need you to attach it to your post.
     
  11. drunk_donkey

    drunk_donkey Private E-2

    with the URL section?
     
  12. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Click on "Post Reply" and at the bottom of this box where you type click on "Manage Attachments" and then upload your HJT log.
     
  13. drunk_donkey

    drunk_donkey Private E-2

    It says I've already uploaded it
     
  14. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Run HJT and save it again, this time rename it and try again. If you cant do this time just paste the log inline and I will attach it for you.
     
  15. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You are using that stupid Paper clip and inserting the attachments as links. Don't do it that way. I'll change your log for you so you will not have to repost it right now. Just remember from now on not to use the Paper clip.

    See message # 7 where I know made it a normal attachment.
     
  16. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    drunk_donkey,

    I notice you are running more than one antivirus. You must pick one and uninstall the others. Running more than one will cause conflicts on your computer.

    Have HJT fix the entry below...

    O23 - Service: McAfee AntiSpyware Service - Unknown owner - (no file)

    After you complete the above, run CCleaner to cleanup any junk/temp files.
     
  17. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Your log looks clean to me, I dont think your problem is malware related. I would recommend posting this back in the Software Forum unless Chaslang has any suggestions.
     
  18. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    drunk_donkey,

    Well first, let's stop confusing memory and disk space. They are two totally different things. What you ran in you first message affect disk space not memory.

    How large is your hard disk and how much space is available on it right now?
    How large is System Restore?
    Do you have any programs installed that do any kind of file system backups?
    When you say it decreases 1Gb everyday, do you really mean that in 5 days your total available disk space goes down by 5 Gb. Or did you just mean while you are logged in for the day your disk space is decreasing as the day goes on?

    Have you run Ccleaner? How much did it remove?

    Suggestion: You have WAY too many full blown antispyware applications running. While I don't think these have anything to do with your disk space decreasing, they are a tremendous drain on system resources. You have:

    Spyware Doctor
    PestPatrol
    Microsoft AntiSpyware
    Spy Sweeper\
    SpywareGuard

    All installed and running will slow your system down and waste disk space to store the program itself and all of their quarantine folders. They may also conflict with each other and make it difficult for you to fix problems. Did you purchase SpywareDoctor, PestPatrol and SpySweeper. Any of these you did not purchase uninstall. If you bought all of them, that was too much. Out of that list of 5 full blown antispyware application, I would keep only one installed. If you do not want to buy anything or pay for updates, then keep MS Antispyware since it is free and is probably better than SpywareGuard.

    You can also have HJT fix the below lines but they have nothing to do with malware or your disk space problem:

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
     
  19. drunk_donkey

    drunk_donkey Private E-2

    Thanks.

    My total Hard Disk Capacity is 71.5 GB
    How it decreases is I will log on at the beginning of the day and start using the computer. I will check the memory and it will be say 24GB if I stop what I'm doing and check again an hour later it will say something like 23.5GB and before I log of 23GB. 1GB is not exactly how much dissapears each day bit its a close average.
    Yesterday I ran the about:blank removing stuff and the other usual stuff such as chkdsk and a tool that related to my problem. The tool removes a program called W32/Alcra-B. I found the tool on a forum. After running the tools my disk space returned to what I'm pretty sure my disk space should be (around 48GB). But already I can see its begining to decrease again.
    I ran CCleaner and it removed quite a bit. Probably 300Mb worth of stuff.
    SpySweeper and Spyware Doctor are just trials and can't remove anything so I will uninstall them. PestPatrol was an evaluation version and its ending soon so I will uninstall it. If microsofts anti-spyware is better then Spy-Guard then theirs no point having spy-guard and it will be removed too.
    Thanks for the suggestion.
    Does anyone have any-ideas yet why this might be happening?
     
  20. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Please read my previous message again. Disk space and memory are not the samething. Do not confuse them.

    What is
    I don't know what that means. What tool exactly are you running and tell use exactly what filename and location it is finding the W32/Alcra-B infection. This infection often come from file sharing networks. Are you using software like that. See: http://securityresponse.symantec.com/avcenter/venc/data/w32.alcra.b.html
     
  21. drunk_donkey

    drunk_donkey Private E-2

    Ooops sorry. I thought I had revised all the places where I said memmory out.
    The W32/Alcra-B remover according to the results at the end did not remove anything. I got the tool from here:

    http://www.sophos.com/support/disinfection/alcra.html

    I had been using Limewire for a while and although the problem didn't start till a few weeks after installing limewire I think limewire's the problem because I knew someone who had the same problem as me (his disk space kept decreasing) and he would find a folder called "complete" with tons of junk in it. It turned out limewire was putting it on his computer. I'm not 100% sure that limewire has made this start happening but I wouldn't be supprised. I unistalled limewire a while ago.
     
  22. drunk_donkey

    drunk_donkey Private E-2

    Well thanks a lot for all the help. I fixed my problem. I tell you how for future reference.

    The spyware removal tools recomended all came up with nothing so I googled "spyware" and found tons of programs I never heard of and some reviews of them. I downloaded a few ( Examples of some are NoAdware,StopItBlockIt, XoftSpy and Spyware detector). All the websites idn't look very proffesional but I bet all these tools are produced by small companys and I wouldn't be supprised if many peole hadn't heard of them (I hadn't). All the tools came up with stuff.....stuff as serious as trojans. I didn't buy the software cause I'm kinda a cheap ass and only downloaded the free scan. So instead of buying the programs I deleted the stuff myself. To do this I first turned off system restore. When the scans finished it gives you the name of the problem and the location. So if its a file you can search it and delete it and for registry problems I clicked:

    Start ,Run, Regedit, then you just follow allong with where it is.....I know that sonuds weird so if the location was

    HKEY_LOCAL_MACHINE/SOFTWARE/Classes/*

    You would go into registry editor click the plus sign beside HKEY_LOCAL_MACHINE which would expand that folder then you would go through the contents of the folder find software click the plus sign to expand it find classes click the plus and so on till you found the right place then you delete the Registry Entrie it says. Now messing with your registry is REALLY DANGEROUS so don't do this unless you really know what your doing. And even then when you find the right entry right click on it and click export and save it to make a backup so you can fix it if you made a mistake. ONCE AGAIN DOING THIS IS REALLY DANGEROUS. I probably would suggest just buying the tool instead but if your like me my way is another option. The one I found the best was NoAdware.

    Hope this helps.


    BE CAREFUL WHEN EDITING THE REGISTRY!!!!!!!!!!!!!
     
  23. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    The registry key you mentioned is a valid registry key. I am referring to:

    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*

    It should not be deleted!
     
  24. drunk_donkey

    drunk_donkey Private E-2

    Ya sorry if that isn't clear. I just was using that as an example.
     
  25. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Not very useful then to post what you did. If you cannot describe exactly what registry key you need to remove and what it was related to, this is of no use and I will probably delete it to keep people from killing their PCs.
     
  26. drunk_donkey

    drunk_donkey Private E-2

    you the boss. Thanks again chaslang
     
  27. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome! It's just that you did not post anything specific to what was found and what needed to be fixed. No specific file names, no exact registry keys. I just don't see the point of the message.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds