server full of hidden files- can't delete or see them

We have a server that in one of the volumes has about 800GB of data used out of 1TB. Changing the view to show hidden files/show operating system files still does not reveal any folders/files on the volume taking up that capacity. We installed a program winstatdir and it showed us nearly 800gb of .trc files in a directory called unknown. See attached.
any ideas how to get this massive amount of data recovered from a directory we can't see?
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

yo_beeDirector of Information TechnologyCommented:
You can use the command prompt and use the command

Change your directory to the vol. If it is not mapped you need to map the vol.

Net use x: \\unc path
del *.trc /A:H /S /q
Qlemo"Batchelor", Developer and EE Topic AdvisorCommented:
To upload an attachment to EE, you need to press the Upload Button after choosing the file, else your file is just ignored.

.trc files are either network captures or other trace files, like for MS SQL Server Profiler. Them being located in a folder called "unknown" is very strange. WinDirStat should allow you to switch into the corresponding folder via context menu on a file, so you can locate the real location in Explorer. I would definitely look into that folder for the most recent file date - if there are files currently written to, you need to find out which process uses those. You can delete old ones then, but not the current one most probably.
JohnBusiness Consultant (Owner)Commented:
A good way to get a handle on server files is to run Tree Size (Jam Software). Run it in Administrative mode and it will neatly lay everything out for you. This is what I do.

Once you see the files, you can decide what to delete.
CompTIA Network+

Prepare for the CompTIA Network+ exam by learning how to troubleshoot, configure, and manage both wired and wireless networks.

350ztnAuthor Commented:
screenshothopefully this screenshot works. what is this file? it says it is system files, this is being generated on our F:\ volume which is not a system directory.
JohnBusiness Consultant (Owner)Commented:
What root folder and tree do these files belong to?

It seems some process has run wild.

I suggest you run a complete virus scan with your own antivirus application followed with a scan by Malwarebytes.
350ztnAuthor Commented:
ran malwarebytes- it didnt find anything in that directory
JohnBusiness Consultant (Owner)Commented:
Thanks. Those files are in System Volume Information.

Run Disk Cleanup. When it starts. select Clean Up System Files, when that calculates. select all items for cleanup and OK. It may take a while.
350ztnAuthor Commented:
it doesn't allow disk clean up- it doesnt even show them. with windows file browser it doesn't see the directory at all, I have ti use a third party tool to even find them.
disk cleanup
JohnBusiness Consultant (Owner)Commented:
You have to add Desktop Experience to the Server
350ztnAuthor Commented:
yup I did that. thats the only way Disk Cleanup would show up
JohnBusiness Consultant (Owner)Commented:
So the Disk Cleanup should now run. That is the Microsoft supported way to remove old files
350ztnAuthor Commented:
in the screenshot above on the volume that is full of the "system information files" all it shows is the recycle bin.
JohnBusiness Consultant (Owner)Commented:
Disk Cleanup can Cleanup the recycle bin. That is an option.

If not look in System, Profiles . Have you built excessive profiles?
350ztnAuthor Commented:
all that it shows on the volume available to clean up is Recycle bin, I'm looking to find out how to delete that almost 800gb of data. disk cleanup doesn't seem to see it, file explorer doesnt seem to see them- only the 3rd party app you suggest.
Under c:\users there are 6 user folders showing, but in control panel, user accounts I only have one user account.
JohnBusiness Consultant (Owner)Commented:
Look in Advance System Settings, Advanced, User Profiles, Settings. You will likely see unused profiles in here. Delete these, close out and then when you can, restart the server.
Qlemo"Batchelor", Developer and EE Topic AdvisorCommented:
Looks like shadow copies, created by backup programs or file revision history. FIrst of all, check
   vssadmin list shadowstorage
to see for configured limits (should be 10%) and actual allocation. In particular after restoring from a Restore Point limits might get to 100% instead of the 10% set up by default, consuming all free space. However, as soon as you need space, that area will be cleaned out by some amount to allow for sufficient free space.
You can see more details about managing System Volume Information at e.g,

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Lee W, MVPTechnology and Business Process AdvisorCommented:
system volume information contains potentially important information.  Stop trying to delete these files and START figuring out why they are there.  Your backup program?  Quite possibly it's your Volume Shadow Copy settings.
350ztnAuthor Commented:
AWESOME! This worked!
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2012

From novice to tech pro — start learning today.