Shrinking Hd

[Cage72]

My C: Drive upon startup says I have a little over 3 gigs..and in very little time I start getting prompts asking me if I want to uninstall anything to freeup space. I Update and Download Virus Defs Daily...Dump Cache and IE Temp Files daily also Defragging rather often...and running Spybot and Adaware. I had my page file system on my c: drive turned off and only enabled on the D: Drive. I went and re-enabled the Page file system On C: to see if it would phase anything..and no dice..didn't put a dent in the problem at all. I'm reallly stumped at what this is or what is causing this. Any Help would be appreciated, Thanks in Advance.

System Specs:

Intel P4 D845WN Mobo
Intel P4 1.5 CPU
640 SDRAM
Windows XP Home Edition

[boyzeee]

decrease your recycle bin or turn it off and you could turn off system restore aswell if its enabled, also with reference to your page file set the size yourself making the initial size the same as the maximum size, 2.5x your installed memory is a good start, but at least what windows recommends, ie start at say 400mb and finish at 400mb, it wont fragment and it will stay in the same place ;) other than what you are doing already im not sure what else you could do. ;)

edit...ive just seen that you have quite a bit of memory installed so set the page file as low as you can get away with ;)

[Cage72]

I'm not sure if this has any direct bearing on what is going on..but I did recently find a trojan on my sysem using Anti-Trojan 5.5 after the scan it prompted me to reboot for things to work..so i'm assuming that it ridded me of that particular trojan...but is it possible it has created/latched on associations to the trojan elsewhere? Why NAV Corporate 8.1 didn't catch this...kinda pisses me off. I'm not sure how long that had been on my drive..as that it was found out by the Anti-Trojan program that had been put on my system within the last few weeks, and not Norton.

Norton Corporate 8.1 Log

11/18/03-W32.Mapson.D.Worm
11/04/03-W32.Mapson.D.Worm
*few other dates showing this worm*

10/31/03-W32.HLLW.Logpole
10/28/03-W32.HLLW.Logpole


AVG Log

11/18/03-Trojan horse Dropper.Swicer.A (Showed up 3x)

[clocker]

Cage,

What exactly is the problem, that you are actually down to 3 GBs or that Windows keeps nagging you about it?
If you are not having any other troubles and are just tired of MS playing Mommy all the time, then disable "low disk space notification".

[Cage72]

Problem is that ..when I check to see what HD Space I have available on my C: Drive it says roughly 3.5 gigs..within less then 30 min..0 available Space is left and this shouldn't be happening. It would be nice if it were just getting that notification..and that easy. Space on my C: drive shouldn't be getting zapped like that down to 0KB..and it has gotten down to just that 0KB..and I have to reboot..and gives me no Functionality of my system.

[clocker]

Ah, I see.

And the missing space reappears after rebooting, only to ebb away again?

[Cage72]

Yep...that is exactly what is happening.

[bronco]

Get Tweek XP.

That little prog got me back alot of HD space.

Amazing app, try it.

[Cage72]

something more is needed then just using say disk cleanup for this I think.

[balamm]

HAve you installed one or those registry monitoring tools? I had that proble once, 500mb text log file in about 30 mins.


Oh, and Norton corporate is not an anti trojan. Trojans are trojans, viruses are viruses. Some are similar enough to cross the line and be caught but most are unique.

[Cage72]

I did a Search Under *.log and this is what i found. Is this type of log file normal or should I treat this as suspect and is being caused by some bits of remaning trojan associaton of some type? Also the date states as being created YESTERDAY..iv'e been having this problem for almost 1 1/2 weeks now.


http://www.chinkii.com/uploads/album/misc/log.JPG

[boyzeee]

no that aint normal, i just ran a search on mine and it found 111 files= 15mb of log .txt files all mostly under 100KB, look through them and see if any are sticking out like a sore thumb, suspect names or programs you not sure of, the biggest file i got is 4mb. something aint right ;) if its any consolation i think you on the right track, looks like a trojan or something nasty writing a huge log file.

[balamm]

Look around for windows management instrumentation or something similar and see if logging is enabled. Or open that log file and see what program it does belong to. whatever it is, it's logging way too much information. An average log file shouldn't need to get over about 500kb

[Evil Gemini]

It sounds more like a virus that keeps adding size to a file until you run out of space :blink:

[boyzeee]

i looked up the virus you posted earlier w32.mapson.d.worm and this is symantecs response HERE (http://www.symantec.com/avcenter/venc/data/w32.mapson.d.worm.html)
looks like quite a nasty, it tries to turn of your av and anti trojan progs. have a read ;)

edit.. W32.HLLW.Logpole (http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.logpole.c.html) heres the other one aswell.

[Cage72]

Went looking through the Windows Directory on my C: Drive...I found that Windows Management Insturmentaion thing...there is nothing in the drop down menus that says anything about logging. I guess this configues and controls windows management insturmentation (WMI) and I guess it's a service...Could that possibly be disabled and fix things or could that serioulsy f***up my sysem?..and also tried to open up that particular log using the wmi program..


http://www.chinkii.com/uploads/album/misc/WMI.JPG

[balamm]

Before seeing this, I was under the impression that WMI was only used in server 2003. I really don't think you need it running unless you're are using it to monitor performance or check your system.

You might want to check google to be sure but I don't think there'd be any harm in disabling it.

Oh, and open that log with notepad and see what attributes it has. It should give some indication of what and why it's monitoring.

[Cage72]

I went into msconfig..under services and unchecked wmi...but that didn't seem to phase that log file..it keeps rebuilding. That Log File is too big to look at using Notepad..what other program could i use to look at the the log file?

[balamm]

Command prompt maybe? I'm not sure if you could just enter the location and file name and have it open or??? Can you right click and choose open with command prompt or dos prompt? Do you not get any association other than note pad when you go to properties? It should say what program created it and when.

[MadDog-2000]

Here is the root of all evil!

http://maddog.250free.com/aol9.0.jpg

[adamp2p]

I did not read the entire thread, of anything, but something immediately alarmed me: you have no antivirus protection?

Thanks bad
:ph34r:

Time to reinstall Windows!

Follow this guide! (http://www.tweakhound.com/xp/installxp/installXP1.htm)

[Cage72]

Just says opens with notepad...doesn't say what program created it either

[Smurfette]

Google group search pointed me HERE (http://groups.google.com/groups?hl=en&lr=lang_en&ie=UTF-8&oe=UTF-8&newwindow=1&safe=off&threadm=3f550cd9.0110311853.7fd2cbd1%40posting.google.com&rnum=6&prev=/groups%3Fnum%3D100%26hl%3Den%26lr%3Dlang_en%26ie%3DUTF-8%26oe%3DUTF-8%26newwindow%3D1%26safe%3Doff%26q%3Dhuge%2Btrace.log).

Perhaps this is the problem you're having.

[Smurfette]

Originally posted by MadDog-2000@22 November 2003 - 04:29
Here is the root of all evil!

http://maddog.250free.com/aol9.0.jpg
:spam:

[Cage72]

I went and tried giving it a wack at deleting today..and you know..the goddamm thing actually did this time...but cant help wonder if any associations with that logfile aren't elsewhere? One of those Trojans mentioned earlier in my post..stated on Symantec as having a link and being spread through KaZaa lite amongst others? I know this is going from a hardware to software question...but what programs would be best to use to prevent this? I'll list what i currently have on my system..feel free to add suggestion.


Sygate Firewall 5.5 Pro
Norton AV Corporate Edition 8.0
AVG 7.0
Anti-Trojan 5.5
SpybotSD
Ad-Aware


Edit: Friggen Bootvis I had on my system as of yesterday..Thanks Smurfette..also Thanks balamm for helping me out.

[nanotek]

are u using both antivirus produkts at the same time ? this could also be a problem !

[Cage72]

Yes I do use both AV's...AVG i only use a couple times a week. Norton failed to find and snub a trojan that showed up 3x..where AVG found it. That is why I have 2 AV apz on my system.

[MadDog-2000]

Originally posted by Smurfette+22 November 2003 - 09:44--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (Smurfette @ 22 November 2003 - 09:44)</td></tr><tr><td id='QUOTE'> <!--QuoteBegin-MadDog&#045;2000@22 November 2003 - 04:29
Here is the root of all evil&#33;

http://maddog.250free.com/aol9.0.jpg
:spam: [/b][/quote]
<_< no sense of humor...