We help IT Professionals succeed at work.

virus in pc

Ernesto
Ernesto asked
on
Hi all, my disk is full and are created a several files in windows\temp\  
please help you guys!
Comment
Watch Question

Shaun VermaakSenior Consultant
Awarded 2017
Distinguished Expert 2019
Commented:
Why do you think it is a virus?

You can junction that folder to another drive with the MKLINK command
Commented:
sudenly my disk is full  whit files .appcompact
Tom CieslikIT Engineer
Distinguished Expert 2017
Commented:
You can simply delete (with shift key) all files from Windows/Temp
You not going to need it
Commented:
is that a norma behivieor ?
temp with size of 350 GB?
i dont think so
Systems Engineer
Commented:
If you are concerned about it, run some scans? Try using Malwarebytes "Customer Scan - Elect Root Kit Scanning" and CCleaner to check for registry conflicts, scheduled task that look like its bad, browser extensions/addons etc.

If after you clean all of that and you continue to compile the tempfolder from downloading things, you can use Wireshark to monitor traffic and see where its going, on what port and what appplication.

All of these options are free and really a routine set of tools to keep your system healthy.
Tom CieslikIT Engineer
Distinguished Expert 2017

Commented:
Doesn't matter if it's a virus or not, just clean this folder, you don't going to need it, then you can run Mylwarebytes, like Vostik said

https://www.malwarebytes.com/mwb-download/
Shaun VermaakSenior Consultant
Awarded 2017
Distinguished Expert 2019
Commented:
Or run this against folder
CircularLogArchiver.exe GO /LP:"C:\Windows\Temp" /LE:"*" /AI:"D" /AOT:"1" /DAOT:"7" /DOT:"3"

Open in new window

https://www.experts-exchange.com/articles/29108/Log-file-problem-CircularLogArchiver.html

Commented:
cleanmgr /sageset:10

Enable the items you wish to clean

cleanmgr /sagerun:10

Use Norton Power Eraser

Author

Commented:
oh men!
i run malwarebytes, addcleaner, and nothing found,
i remove manually those temps, and seems its done
but i thing is still something wrong
James BunchSystems Engineer

Commented:
If you think something is wrong, give us details or reasons why you think something is wrong. What do you see or feel that is happening to see something being wrong?

Have you used Wireshark to see in/out traffic on your computer. What about netstat cmd to see what connections is going on. Try to be as specific as possible to help us help you.

Commented:
Perhaps sfc/scannow
Mike SunSenior Systems Engineer (IBM - retired)

Commented:
Run chkdsk c: /f from the command prompt to schedule for next restart. There could be some corruption on the disk resulting in false indexing which should be repaired.