matt
asked on
server full of hidden files- can't delete or see them
We have a server that in one of the volumes has about 800GB of data used out of 1TB. Changing the view to show hidden files/show operating system files still does not reveal any folders/files on the volume taking up that capacity. We installed a program winstatdir and it showed us nearly 800gb of .trc files in a directory called unknown. See attached.
any ideas how to get this massive amount of data recovered from a directory we can't see?
any ideas how to get this massive amount of data recovered from a directory we can't see?
To upload an attachment to EE, you need to press the Upload Button after choosing the file, else your file is just ignored.
.trc files are either network captures or other trace files, like for MS SQL Server Profiler. Them being located in a folder called "unknown" is very strange. WinDirStat should allow you to switch into the corresponding folder via context menu on a file, so you can locate the real location in Explorer. I would definitely look into that folder for the most recent file date - if there are files currently written to, you need to find out which process uses those. You can delete old ones then, but not the current one most probably.
.trc files are either network captures or other trace files, like for MS SQL Server Profiler. Them being located in a folder called "unknown" is very strange. WinDirStat should allow you to switch into the corresponding folder via context menu on a file, so you can locate the real location in Explorer. I would definitely look into that folder for the most recent file date - if there are files currently written to, you need to find out which process uses those. You can delete old ones then, but not the current one most probably.
A good way to get a handle on server files is to run Tree Size (Jam Software). Run it in Administrative mode and it will neatly lay everything out for you. This is what I do.
Once you see the files, you can decide what to delete.
Once you see the files, you can decide what to delete.
ASKER
What root folder and tree do these files belong to?
It seems some process has run wild.
I suggest you run a complete virus scan with your own antivirus application followed with a scan by Malwarebytes.
It seems some process has run wild.
I suggest you run a complete virus scan with your own antivirus application followed with a scan by Malwarebytes.
Thanks. Those files are in System Volume Information.
Run Disk Cleanup. When it starts. select Clean Up System Files, when that calculates. select all items for cleanup and OK. It may take a while.
Run Disk Cleanup. When it starts. select Clean Up System Files, when that calculates. select all items for cleanup and OK. It may take a while.
ASKER
You have to add Desktop Experience to the Server
ASKER
yup I did that. thats the only way Disk Cleanup would show up
So the Disk Cleanup should now run. That is the Microsoft supported way to remove old files
ASKER
in the screenshot above on the volume that is full of the "system information files" all it shows is the recycle bin.
Disk Cleanup can Cleanup the recycle bin. That is an option.
If not look in System, Profiles . Have you built excessive profiles?
If not look in System, Profiles . Have you built excessive profiles?
ASKER
all that it shows on the volume available to clean up is Recycle bin, I'm looking to find out how to delete that almost 800gb of data. disk cleanup doesn't seem to see it, file explorer doesnt seem to see them- only the 3rd party app you suggest.
Under c:\users there are 6 user folders showing, but in control panel, user accounts I only have one user account.
Under c:\users there are 6 user folders showing, but in control panel, user accounts I only have one user account.
Look in Advance System Settings, Advanced, User Profiles, Settings. You will likely see unused profiles in here. Delete these, close out and then when you can, restart the server.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
system volume information contains potentially important information. Stop trying to delete these files and START figuring out why they are there. Your backup program? Quite possibly it's your Volume Shadow Copy settings.
ASKER
AWESOME! This worked!
Change your directory to the vol. If it is not mapped you need to map the vol.
Net use x: \\unc path
X:
del *.trc /A:H /S /q