<div>
/. = files with no extension from windirstat<br />
When using explorer with a view showing all hidden and all system files, the bulk of the storage is NOT accounted for.
</div>


/. = files with no extension from windirstat
When using explorer with a view showing all hidden and all system files, the bulk of the storage is NOT accounted for.

<div>
Could try running the Microsoft app from this link: <a href="http://technet.microsoft.com/en-ca/sysinternals/bb897445.aspx" rel="ugc">http://technet.microsoft.com/en-ca/sysinternals/bb897445.aspx</a><br />
<br />
The issue maybe data placed in a file stream see: &nbsp;<a href="http://technet.microsoft.com/en-us/sysinternals/bb897440.aspx" rel="ugc">http://technet.microsoft.com/en-us/sysinternals/bb897440.aspx</a>
</div>


Could try running the Microsoft app from this link: http://technet.microsoft.com/en-ca/sysinternals/bb897445.aspx [http://technet.microsoft.com/en-ca/sysinternals/bb897445.aspx]

The issue maybe data placed in a file stream see:  http://technet.microsoft.com/en-us/sysinternals/bb897440.aspx [http://technet.microsoft.com/en-us/sysinternals/bb897440.aspx]

<div>
GUI NTFS streams app:<br />
<a href="http://www.isgeo.kiev.ua/shareware/index.html" rel="ugc">http://www.isgeo.kiev.ua/shareware/index.html</a>
</div>


GUI NTFS streams app:
http://www.isgeo.kiev.ua/shareware/index.html [http://www.isgeo.kiev.ua/shareware/index.html]

<div>
Follow leew's (one of EE's most distinguished experts) instructions to keep your system partition properly managed:<br />
<br />
<a href="http://www.lwcomputing.com/tips/static/bootdrivesize.asp" rel="ugc">http://www.lwcomputing.com/tips/static/bootdrivesize.asp</a>
</div>


Follow leew's (one of EE's most distinguished experts) instructions to keep your system partition properly managed:

http://www.lwcomputing.com/tips/static/bootdrivesize.asp [http://www.lwcomputing.com/tips/static/bootdrivesize.asp]

<div>
Decided to simply build a new server and replace it then I can spend the time to analyze it out of productions.
</div>


Decided to simply build a new server and replace it then I can spend the time to analyze it out of productions.

<div>
<div class="content wysiwyg-content">
Drive C keeps filling up, but leaves enough free to keep running. &nbsp;Using WINDIRSTAT the culprit seems to be a /. file that is growing to available space always leaving 200MB free. &nbsp;Based on the behavior, I'm assumimg that the server has been hacked with a root kit. &nbsp;As I get ready to remove it from the network, I'm open to any other remedies.
</div>
</div>


Drive C keeps filling up, but leaves enough free to keep running.  Using WINDIRSTAT the culprit seems to be a /. file that is growing to available space always leaving 200MB free.  Based on the behavior, I'm assumimg that the server has been hacked with a root kit.  As I get ready to remove it from the network, I'm open to any other remedies.

Full C: drive Windows Server 2003

Windows Server 2003 was based on Windows XP and was released in four editions: Web, Standard, Enterprise and Datacenter. It also had derivative versions for clusters, storage and Microsoft’s Small Business Server. Important upgrades included integrating Internet Information Services (IIS), improvements to Active Directory (AD) and Group Policy (GP), and the migration to Automated System Recovery (ASR).