All drives reporting full

A customer's System C: drive is reporting full as well as external USB backup drive. Both drives have capacity of 1Tb. Have checked files and folders and there is no way that they are full. Registry hack? I can't install nor run any program nor tool as there is "lack of space" to install anything at all.

OS is Windows 7.  Hopefully someone can help.
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Mr TorturSystem EngineerCommented:

There is no way that they are full

Why do you say that ? There is no way.. sounds as you guess the info but do not have it.
Can you access drive properties to see total space, used space and space left in order to be sure ?

Did you check if there are no hidden folders ?

Can't you delete some of the data you see in order to free up some space ?
noxchoGlobal Support CoordinatorCommented:
Get a copy of WinDirStat and check with it what is taking the space. It can be volume snapshots (restore points) which are put usually into a protected directory in System volume Information folder on each drive. here is the download link for WinDirStat. There is a similar tool TreeView which does similar work.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Mr TorturSystem EngineerCommented:
He says he cannot install nor run any program...
Active Protection takes the fight to cryptojacking

While there were several headline-grabbing ransomware attacks during in 2017, another big threat started appearing at the same time that didn’t get the same coverage – illicit cryptomining.

William FulksSystems Analyst & WebmasterCommented:
Sounds like malware to me. If you have the means to mount that drive in an external dock, you could try doing an offline scan of the drive. Figure out a way to run a scan on it or look for oddball executables in running processes and manually kill them.
noxchoGlobal Support CoordinatorCommented:
Because of free space lack? Or because of hijacked PC?
David Johnson, CD, MVPOwnerCommented:
move a few videos onto a flash drive to free up some space on the system drive. Walmart sells 8G drives for under $10.
You need to run Windirstat or Jam Treesize as an administrator or you will get misleading results as the current user doesn't have full permissions on many folders i.e. programdata, System Volume Information.

You have run disk cleanup from the right click on the drive and select cleanup?  This clearing of the tmp files will help.. even if you type %temp% into the address bar and select delete ALL you will clean up some space. It will stop on files that are in use and you can just 'ignore' them.  actually it is quite easy to fill up 2 x 1TB drives.
i would connect this disk to a working PC as second drive, and check on the free space
if still full, remove some, and check again
you can also scan for malware then !
paulmac110Author Commented:
Thaks for all yor comments. Going to mount it in other PC to check the capacity again. Will be back soon.
Boot into safe mode and run a chkdsk and see if there are issues with the MFT.
paulmac110Author Commented:
Hi  - I've solved the issue of which no-one would have guessed (including me). The problem was caused by Kaspersky internet security which my client has installed a couple of days before the issues started.  
I slaved the drive onto another machine, ran win Windirstat and seen immediately that Kaspersky trace file were occupying 834Gb of the drive. These trace files were in a custom folder called "Kaspersky Files" in the "x86 programs" folder on the system drive.
I spoke to Kaspersky UK who stated that unless the application  had been set up specifically to save trace file, otherwise this should not have happened. I will point out that my client had simply installed Kaspersky Internet Security from a CD that he bought and had no knowledge of custom installation.

Anyway, I used the Kavremover tool and it deleted all the files and the application. All is back to normal now.

Thanks for input and help on this.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Storage Hardware

From novice to tech pro — start learning today.