Hard drive issue

Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

nbooth

Thread Starter
Joined
Sep 12, 2003
Messages
5
An Icon popped up that said "Only 5% Hard drive space left remove programs. I have a 60g hd and after removing programs still the same. Found 51.19 gb for documents and settings and 224.091 files and 8.295gb in folders under explore. How do I get this fixed? window xp home.
 

~Candy~

Retired Administrator
Joined
Jan 27, 2001
Messages
103,706
Hi and welcome. I have the poster's hijack log here for anyone who can assist ;)

This is the reason that the user gave:
Logfile of HijackThis v1.97.2
Scan saved at 1:38:19 PM, on 9/12/2003
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\ps2.exe
C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\PROGRA~1\ACCELE~1\ANTI-V~1\DEFSCA~1.EXE
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Acceleration Software\Anti-Virus\defscangui.exe
C:\Program Files\Messenger\msmsgs.exe
c:\progra~1\mcafee.com\vso\mcvsftsn.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\mcafee.com\VSO\mcshield.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Owner\Local Settings\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe
C:\PROGRA~1\MICROS~2\Office\OUTLOOK.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-us4.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-us4.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://us4.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-us4.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://us4.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-us4.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-us4.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://us4.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-us4.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://srch-us4.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://srch-us4.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,Shellnext = http://www.weather.com/weather/hourbyhour/20020
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Freedom BHO - {56071E0D-C61B-11D3-B41C-00E02927A304} - C:\Program Files\Zero Knowledge\Freedom\FreeBHOR.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - c:\Program Files\Microsoft Money\System\mnyviewer.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Zero-Knowledge Freedom - {FA91B828-F937-4568-82C1-843627E63ED7} - C:\Program Files\Zero Knowledge\Freedom\BandObjs.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe files\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [WebScan] C:\PROGRA~1\ACCELE~1\ANTI-V~1\DEFSCA~1.EXE -k
O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKCU\..\Run: [Acme.PCHButton] C:\PROGRA~1\HPINST~1\plugin\bin\PCHButton.exe
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe"
O4 - Global Startup: EPSON Status Monitor 3 Environment Check 2.lnk = C:\WINDOWS\SYSTEM32\spool\drivers\w32x86\3\E_SRCV02.EXE
O9 - Extra button: MoneySide (HKLM)
O12 - Plugin for .mov: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://bin.mcafee.com/molbin/shared/mcinsctl/en-us/4,0,0,73/mcinsctl.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/76808a0e7ae82f/housecall.antivirus.com/housecall/xscan53.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37869.4222337963
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://bin.mcafee.com/molbin/shared/mcgdmgr/en-us/1,0,0,16/mcgdmgr.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{238265EF-71D4-46F7-B53F-75D8245546B5}: NameServer = 199.45.32.43 199.45.32.38
 
Joined
Mar 9, 2003
Messages
4,699
Nbooth, this is going to take awhile, so hang in there.

First off, do you really want HP as your home and search pages?
 

JohnWill

Retired Moderator
Joined
Oct 19, 2002
Messages
106,425
It sounds like you need to find one of the many space analyzers like Fulldisk, SizeExplorer, Space, View Folder Size, etc. These allow you to view the whole tree and find where all the space is used, then you can find out why. :)

Being in Documents and settings, I'd start by firing off disk cleanup and seeing what it finds.
 
Joined
Mar 9, 2003
Messages
4,699
JohnWill, I'm wondering if there are some garbage file and folder names that have a huge amount of space allocated to them.

I'm going to suggest some DOS and Safe Mode work to Try and do a clean up.
 
Joined
Mar 9, 2003
Messages
4,699
Start > Shutdown and Restart in MS_DOS mode

Once in DOS type in the following commands exactly:

SMARTDRV.EXE

CD \WINDOWS
DELTREE /Y COOKIES
DELTREE /Y HISTORY
DELTREE /Y RECENT
DELTREE /Y TEMP
DELTREE /Y TEMPOR~1


ctrl-alt-delete to reboot to windows

Fear not, all of these folders will be recreated when you reboot windows.

Now that you have gotten rid of that "land fill" called Temporary Internet Files, you may want to reboot into Safe Mode and run defrag.

If you have never deleted Temporary Internet Files in the past, my guess is that you can recover 50 - 100 meg of HD space. Maybe more if you have never done it since day one.

The most space I have ever recovered from someone's PC was a whopping 1.3 gig.

Oh, by the way, boot time is slightly improved and you will notice a marked reduction in time to run a virus scan and defrag.


Next power down and then as you start up hold down the crtl key (depending on manufacture some use the F8 key. If ctrl doesn't work, try again using the F8 key) Which ever way is successful you should now have a black screen with a menu of 5 or 6 choices. Select Safe Mode.

Once in Safe Mode, click on Start > Run and type in scandisk
This will take some time depending on the size of your HD and the speed of your PC in general.

Also while in Safe Mode, click on Start > Run and type in defrag. Defragging in Safe Mode is faster because defrag isn't interrupted by the windows background disk and "house keeping" calls.

Good Luck. Let us know how it works for you.
 
Joined
May 3, 2003
Messages
151
XP doesn't utilize DOS. It does have something similar in Command and CMD. Maybe that will help?
Start,run, type in CMD or Command.Not sure which will do tho'.
 

nbooth

Thread Starter
Joined
Sep 12, 2003
Messages
5
OLTRAP, Thanks, I am having trouble with typing the commands in CMD box. do i space or what? are caps needed?
 

~Candy~

Retired Administrator
Joined
Jan 27, 2001
Messages
103,706
You might try programs, accessories, command prompt.....
 

nbooth

Thread Starter
Joined
Sep 12, 2003
Messages
5
My apologies. I found the promt, just need to know the way to type in NiteHawks commands. Do I use caps? spaces? commands all on one line? do i hit enter? need novice help.
 
Joined
Mar 9, 2003
Messages
4,699
No, you don't need to use caps. That was done more to make it easier to read. :)
Take note of where the spaces are in each command.
Type in each command one at a time and hit enter.
That should do it for you.
 
Joined
Mar 9, 2003
Messages
4,699
Sorry, I didn't see your email's earlier.

The ~ is on the key just to the 1 key on the top row.

IF you can't get into DOS there are a few other methods we can use. DOS is just faster and move effective.
 
Joined
Mar 9, 2003
Messages
4,699
The first thing I would do is Empty your Recycle Trash Can. Next, open Windows Explorer and go into \Windows\Temp do a control A to select ALL files and folders and then hold down the Shift key and hit the delete key. This will bypass putting them in your Recycle Bin. You will get an error saying that one file can not be deleted, this is normal. There is always one file that is currently in use and can't be deleted.. Note the file name and then select all files again and do a ctrl left click on the noted file to unselect it. Shift + delete again and you should have ONE file left

Next go to \Windows\Temporary Internet Files and do the same thing.
NOTE: Look at the "tree directory" in the left pane of Windows Explorer and click the + on Temporary Internet Files and expand it. Click the + on Content IE5 and expand it also. You will have to delete ALL the files in each and every one of those folders that are under Temporary Internet Files. Remember, ctrl+A is a shortcut to selecting ALL files.

Empty your Recycle Bin. (If you are using Norton also empty the “Protected Files”.)

Next power down and then as you start up hold down the crtl key (depending on manufacture some use the F8 key. If ctrl doesn't work, try again using the F8 key) Which ever way is successful you should now have a black screen with a menu of 5 or 6 choices. Select Safe Mode.

Once in Safe Mode, click on Start > Run and type in defrag. Defragging in Safe Mode is faster because defrag isn't interrupted by the windows background disk and "house keeping" calls.

Good Luck. Let us know how it works for you.
 
Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Staff online

Top