Windows 2003 Domain Controller drive full - but it really is not

I have a Windows 2003 DC - it is showing as only 35mb are free on the partition that holds sysvol but I can only see about 4 gb of real used space.  The partition is 25 gb.  I can't figure out where the data is...if it is really there and how to correct this problem.
mrsmileynsAsked:
Who is Participating?

[Webinar] Streamline your web hosting managementRegister Today

x
 
GranModConnect With a Mentor Commented:
Closed, 500 points refunded.
GranMod
The Experts Exchange
Community Support Moderator of all Ages
0
 
TheCleanerCommented:
Are you certain the actual partition size is 25GB?

What if you go to that partition, click Folder options, and show all files and folders?

THen do a search (F3) and do a search for *.* over 20MB in size.  That will give you a list of all the major files in that partition...
0
 
mrsmileynsAuthor Commented:
yes it is 27gb actually.  when i go to the partition i have 6 folders on it.  I am showing all hidden as well.  The total of the 6 folders added up is about 3gb.  

0
Upgrade your Question Security!

Your question, your audience. Choose who sees your identity—and your question—with question security.

 
TheCleanerCommented:
Did you check to see if there are errors in the system log?  What about running chkdsk on the partition?
0
 
Netman66Commented:
Sounds like Malware.  Some of this scumware hides itself by misrepresenting the drive size in Explorer.

Try running some scans with:

Spybot:  http://www.safer-networking.org/en/download/
Adaware: http://www.lavasoft.de/software/adaware/
CWShredder: http://www.intermute.com/spysubtract/cwshredder_download.html

and as a last resort - RootKit Revealer:  http://www.sysinternals.com/Utilities/RootkitRevealer.html

Of course, the latest AV definitions and a scan there would be a good thing.

Let us know.
0
 
mrsmileynsAuthor Commented:
no errors that would relate to this situation

i would...if possible prefer to solve this without downing the server to run a chkdsk
0
 
mrsmileynsAuthor Commented:
I suppose it could be spyware - but 23gb worth?  On a server that never browses the internet at all and is in a secure network.  I am not sure.
0
 
TheCleanerCommented:
you can run chkdsk from the cmd prompt, no need to reboot.  Just run it without any parameters on the volume in question.
0
 
mrsmileynsAuthor Commented:
after showing protected OS files I have found it is the VSS files - I need to reconfigure the limits on this
0
 
Netman66Commented:
That would do it, yes.

I wasn't suggesting there was 23GB of Malware.  Some types of malware mask their presence by changing the reported free space to something other than it really is.  This serves to confuse those looking for it.

VSS would certainly eat up space - hopefully you get this sorted out before the server shuts down due to insufficient free space.

Keep us posted.
0
 
mrsmileynsAuthor Commented:
I see...sorry for the misunderstanding :)

We are all squared away and have the VSS settings set properly with realistic limitations etc.  We are back to about 20gb free space.
0
 
Netman66Commented:
Super job!

Sometimes all it takes is someone else to listen!

0
All Courses

From novice to tech pro — start learning today.