Weird system files(?) occupy space

[sacredeagle]

Hi!

I have a serious problem with a Windows XP Professional installation which claims that the system-partition is full, in a way this is true, but there should be at least 8 GB of free space available.

In C:\WINDOWS\ I’ve found some spooky files that altogether weigh 8.11 GB, most of them weigh individually exactly 754 MB. Each of these files got a name of only one symbol, a number or a letter. These files are hidden as system files and if I try to move them I get a message that this is not possible because of the file being in use by another user or a program.

I’ve run a bunch of file- and harddisk-checking software, scanned with ZoneAlarm Security Center, but everything seems OK. I’ve googled around and found nothing.

Anyone here heard of or experienced this kind of problem, and even knows the answer?

Greets,

Helgi Örn

PS: I have sent this question to several lists already without a solution, and no suggestion on what this might be about!

[Scarecrow Man]

Whats the name of the files?

[ɹəuəllıʍ ʇɐb]

Hello, and welcome to the Windows Forum!

Whats the name of the files?

And do they have a file extension (such as .exe or .dll)?

Can you try an online scan for malware from http://www.ewido.net/en/onlinescan/

[sacredeagle]

Scarecrow Man and Pat Willener, thank's for your interest, but please read my post before asking:

Each of these files got a name of only one symbol, a number or a letter.

If that is not clear enough the file names are now (no extensions): 1, 4, 5, 6, a, e, f, g, i, l, s, and y. That makes 12 objects, each file is at right now 772,584 kB, time and date is whenever the computer is started.

I have now tried several methods to delete these files but they are re-created every time I reboot the system

Hello, and welcome to the Windows Forum!

Thank's :D

And do they have a file extension (such as .exe or .dll)?

No.

Can you try an online scan for malware fromhttp://www.ewido.net/en/onlinescan/

At the moment this computer is at 57k modem only, so that has to wait. Bur I have run several other alternative scans without them finding anything suspicious.

[jason.b.c]

In C:\WINDOWS\ I’ve found some spooky files that altogether weigh 8.11 GB,

I think that "I" would find it spooky to have found C:\Windows\ in an XP system..!

If i'm not mistaken , after comparing what i've got ( win 2000 ) and my friends XP system there's really no differance in the file systems between the two , There both NTFS new style systems..

So thats why i say: It's spooky to see that you found C:\Windows\ in your XP computer..

[jason.b.c]

It should be C:\Winnt\system32\...

Have you tried this stuff..???

http://www.dr-hoiby.com/WhoLockMe/

http://www.softpedia.com/get/System/System.../Unlocker.shtml

http://www.snapfiles.com/get/removereboot.html

They work.. ;)

[Scarecrow Man]

In C:\WINDOWS\ I’ve found some spooky files that altogether weigh 8.11 GB,

I think that "I" would find it spooky to have found C:\Windows\ in an XP system..!

If i'm not mistaken , after comparing what i've got ( win 2000 ) and my friends XP system there's really no differance in the file systems between the two , There both NTFS new style systems..

So thats why i say: It's spooky to see that you found C:\Windows\ in your XP computer..

Windows XP uses C:\Windows\System32

Windows 2000 uses C:\WinNT\System32

This is normal.

Do you have an updated fully functional Virus Scanner? Might be best to run a full scan.

[cozofdeath]

Do you rip or burn cds? If so sometimes after burning temp files don't get deleted. Most likely its not an executable and is somewhere along the lines of a movie/music. There are many ways to tell what kind of file they are, but it seems you just want to get rid of them. To do that you can press shift and del so it doesn't go to the recycle bin that way it can't come back. If it won't let you delete at all, open task manager, end task on explorer.exe, go to new task and type cmd.exe, when that comes up navigate to the directory (cd C:\whatever) then delete it (del whatever). Thats assuming its attatched to explorer, an unlocker program will tell you that. If not in safe mode you can delete it.

If your sure its being recreated somehow at startup check your startup files. Easiest way is Start, run, type msconfig and hit enter. That will tell you all about what starts.

To eliminate a downloader check network connections. An easy way is typing netstat in a command prompt. That will show you who your connected to. I would run it after you delete the file and restart to make sure its not slowly downloading to your computer. Make sure you run it when no browsers/downloads open so you can see if there is a rogue connection. Hope it helps.

and yes i know you have a 56k but its still possible :D

[jason.b.c]

Windows XP uses C:\Windows\System32

Windows 2000 uses C:\WinNT\System32

This is normal.

Do you have an updated fully functional Virus Scanner? Might be best to run a full scan.

What..?? I've never noticed that..!? Huh.?

[sacredeagle]

It should be C:\Winnt\system32\...

Have you tried this stuff..???

http://www.softpedia.com/get/System/System.../Unlocker.shtml

They work.. ;)

I have tried Unlocker but without results. I can delete the files and they are back after reboot. If I try to only unlock them, the system drops dead to reboot.