System drive inexplicably full

Discussion in 'Malware Help (A Specialist Will Reply)' started by goliano, Jul 14, 2013.

  1. goliano

    goliano Corporal

    After noticing my 1 TB hard drive (C:) reaching capacity, a couple months ago, I purchased a new one, moved 583 GB to it, and today, the C: drive was at 0 bytes free.

    About an hour ago I moved the rest of my video files from it to the new 1 TB drive and it was at 26.4 GB free, but NOW it's at 24 GB free, and I haven't saved anything to it! It seems to be filling up on it's own. What's going on?

    I do remember installing something that turned out to be sketchy, about 4 weeks ago, that I quickly had to use Revo Uninstaller to get rid of, and when that wasn't working I restored the system to an earlier time.

    I did a search for the problem, here, and ran the steps listed in this post: http://forums.majorgeeks.com/showthread.php?p=1827228#post1827228

    Don't know if it applies to me, but I've attached the log.

    HELP! It's now at 23.8 GB free.
     

    Attached Files:

    goliano, Jul 14, 2013
    #1
  2. goliano

    goliano Corporal

    Just an FYI: The task manager shows two processes running - nvvsvc.exe and nvxdsync.exe - that online searches say are nonessential, but task manager won't let me end them.
     
    goliano, Jul 14, 2013
    #2
  3. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Probably not a malware problem, however proper malware removal and investigation procedure is to run the below and attach the logs:


    READ & RUN ME FIRST. Malware Removal Guide


    My first guess however would be: Are you filling it up will files from Oracle? What are you running?
     
    chaslang, Jul 14, 2013
    #3
  4. goliano

    goliano Corporal

    Haven't touched Oracle on here since installing the new drive.

    I've attached the Read And Run Me First, log files.
     

    Attached Files:

    goliano, Jul 15, 2013
    #4
  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You may not have touched it but it is still running.

    You problems are not due to malware. You need to check what new files are taking up disk space. Possible areas to check:

    • Is Orcale saving things?
    • Is Acronis saving things?
    • What about System Restore points?
    • Anything else running automatically? I see some very large ISO files?


    Since you are not having malware problems, it is time to do our final steps:
    1. We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware.
    2. Renable your Disk Emulation software with Defogger if you had disabled it in step 4 of the READ & RUN ME.
    3. Go to add/remove programs and uninstall HijackThis. If you don't see it or it will not uninstall, don't worry about it. Just move on to the next step.
    4. If running Vista, Win 7 or Win 8, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    5. Now goto the C:\MGtools folder and find the MGclean.bat file. Double click ( if running Vista, Win7, or Win 8 Right Click and Run As Administrator ) on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
    6. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
     
    chaslang, Jul 15, 2013
    #5
  6. goliano

    goliano Corporal

    Dude! Oracle was indeed the culprit. I couldn't find it in remove programs, so I just deleted the entire folder, and went from less than 1 gig free to 737 gigs free! :eek: I'm sure that's not normal behavior for an Oracle installation, so what do you think I might've done wrong?

    Anyway, thanks for the tip. Is there something I can run, for you to look at, to make sure it's completely gone?

    Edit: When I deleted the following in HijackThis:

    They immediately reappeared. :(
     
    Last edited: Jul 16, 2013
    goliano, Jul 16, 2013
    #6
  7. goliano

    goliano Corporal

    Never mind the edit in my previous post. I deleted the still running Oracle items using CCleaner's Registry Cleaner, rebooted and now they're gone from HijackThis. Still wondering if there are any leftovers, though.
     
    goliano, Jul 17, 2013
    #7
  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You can post in the Software Forum for non-malware related issues. ;)
     
    chaslang, Jul 17, 2013
    #8

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds