Solved

Incorrect Free Space on Hard Drive - Windows 2000 Server

Posted on 2004-10-04
10
137 Views
Last Modified: 2010-04-14
I've got a machine running Windows 2000 Server, with a 111GB hard drive, showing 14.5 GB free through windows.  However, when I sum the sizes of the folders/files on the drive, it comes up with 35GB used, which means 76GB should be free.  I get the same total when using DISKData (http://www.digallery.com/diskdata)

Here are the steps I've already taken:

- Changed options to show system and hidden files
- Run Norton Disk Utilities and encountered no errors
- Emptied recycle bin, cleared temp files, etc
- Run a virus scan using an updated McAffee Antivirus
- Downloaded and ran LADS.exe (a program to check for files containing ADS, alternate data streams) and found only 14meg in ADS on my system
- Defragmented the drive...

When I defragmented the drive I noticed some of the most fragmented files were things in /System Volume Information/_Tracking/DivX/....

They were all french DVDRips...which should NOT be there because this is a US college server.  When I browse to the System Volume Information folder, all I can see is a file called "tracking.log" which is 20KB.  So this computer may have been hijacked, but how can I delete all this data??

0
Comment
Question by:marker126
10 Comments
 
LVL 32

Expert Comment

by:Luc Franken
Comment Utility
Hi marker126,

As you said: "Run Norton Disk Utilities and encountered no errors"
you probably have the protected recycle bin also, try emptying it.

That your server has been used by students is pretty obvious in your case, so you'll have to change the administrator password right away, make sure it's a good password. Then start cleaning up the mess they made.

Greetings,

LucF
0
 

Author Comment

by:marker126
Comment Utility
The problem is, I still can't find any other files in the /System Volume Information/ although they are showing up when I look at the defrag report (which just shows the most fragmented files, so I'm thinking this is where all my free space has gone)
0
 
LVL 32

Expert Comment

by:Luc Franken
Comment Utility
>>I still can't find any other files in the /System Volume Information/ although they are showing up when I look at the defrag report<<
Have you tried looking at it from dos?
dir /a/s
do the files show up then? If so, they're either hidden, or set to systemfiles, both can be changed with attrib.

LucF
0
 

Author Comment

by:marker126
Comment Utility
running dir /a/s only showed the "tracking.log" file which is 20KB
0
Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

 
LVL 32

Expert Comment

by:Luc Franken
Comment Utility
then please check your norton protected recyclebin again, most likely the files are allready removed, but norton is still protecting them.

LucF
0
 

Author Comment

by:marker126
Comment Utility
I can't believe that right after I posted this question, I end up solving it myself.  Here's what I did for everyone's future reference:

I set the security properties of the "System Volume Information" folder to Full Access for the Administrator.

Although the "_Tracking" folder was not showing up at all, I tried typing the entire path into the address bar of windows explorer (C:\System Volume Information\_Tracking\) but received an error.  HOWEVER, when using the command prompt, I changed the directory to C:\System Volume Information\_Tracking\ with success!

In that folder were 73 illegal divx movies all in french, or with french subtitles, which I GLADLY deleted.
0
 

Author Comment

by:marker126
Comment Utility
There was also a folder called SCR&TS in the _Tracking directory, which I could not get to through windows explorer, and had to type cd "SCR&TS in the command prompt to get access to (notice the ")
0
 
LVL 6

Expert Comment

by:rustyrpage
Comment Utility
I use a great program called TreeSize Pro that will go through your HD's & find everything that is there....then you can sort it based on file-type, size, etc.  I know you mentioned a utility before, but I found this to be VERY good at finding even hidden things.  

http://www.jam-software.com/treesize/
0
 

Accepted Solution

by:
ee_ai_construct earned 0 total points
Comment Utility
Question answered by asker or dialog valuable.
Closed, 500 points refunded.
ee_ai_construct (replacement part #xm34)
Community Support Admin
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Join & Write a Comment

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
HOW TO: Install and Configure VMware vSphere Hypervisor 6.5 (ESXi 6.5), Step by Step Tutorial with screenshots. From Download, Checking Media, to Completed Installation.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now