We help IT Professionals succeed at work.

Check out our new AWS podcast with Certified Expert, Phil Phillips! Listen to "How to Execute a Seamless AWS Migration" on EE or on your favorite podcast platform. Listen Now

x

Remote PC suddenly got noneresponsive!!

High Priority
169 Views
Last Modified: 2020-03-08
Hi Experts,

I was in middle working remotely to my work PC and suddenly it got unresponsive.
I realized thru logmein that the remote PC C drive is 99% full.
Is there any way I can do something remotely in order to get access to that PC.
I can see that PC from another PC on that network, and it list me all files/folders.

Thanks
Comment
Watch Question

CERTIFIED EXPERT

Commented:
You can try to delete some files from your PC. If that won't be enough to get back to your PC, you can try to use pstools from sysinternals (Ms). You can use them so remotely execute and kill processes, control services and more ...
CERTIFIED EXPERT
Distinguished Expert 2019

Commented:
If the remote PC C drive is 99% full, you need to have physical access to the remote PC to start the PC by a Win PE boot disc or Windows setup DVD or USB before you can fix the problem.
Nagendra Pratap SinghDesktop Applications Specialist
CERTIFIED EXPERT

Commented:
You should be able to delete many files from the C$ share.

In case you don't want to delete it, you can move it to your other PC. I would start by moving/deleting user profiles and temp folders.

c:\windows\temp & c:\windows\softwaredistribution

After the PC is responsive, use windirstat or similar to find the large and runaway files.
CERTIFIED EXPERT

Author

Commented:
Hi Experts,

Meanwhile I was able to get thru that PC using GoToMyPC, then I started running disk cleanup as there were about 140 GB on C:\Windows\Temp folder.

I also managed to move some large files to a storage device.

While all these were on action, I realized Outlook was not responding, I tried killing it from task manager, then my PC became unresponsive again...

What do you suggest I try next?

Thanks,
Ben
Qlemo"Batchelor", Developer and EE Topic Advisor
CERTIFIED EXPERT
Top Expert 2015

Commented:
If the PC is still unresponsive because of Outlook, you can try to force kill Outlook from another machine with
taskkill /s yourpc /im Outlook.exe /f

Open in new window

(you can add /u and /p for username and password if required). A forced reboot with the shutdown command is another option if nothing else helps.
Robert RComputer Service Technician
CERTIFIED EXPERT

Commented:
I would wait until the files in the temp directory are deleted that is a lot of data taking up space on the drive and will take a while for it to delete. Once it deletes you should be able to continue with your remote sessions.
CERTIFIED EXPERT

Author

Commented:
Hi Experts,

Today I had someone at premises restarting that PC, then I continued moving stuff to external storage drive, but suddenly I got kicked out again...
And both times was after receiving a message that could not read certain file, asking if should skip it, I selected yes and repeat to All...

However now I'm back in, and temp folder has over 232 GB!! while the disk cleanup claims it can only free up to 1.73 GB...

See attached pics.

Wondering what should be my next step...?

Thanks,
Ben
132
Qlemo"Batchelor", Developer and EE Topic Advisor
CERTIFIED EXPERT
Top Expert 2015

Commented:
The big files are no temp files but files created by Windows Update (in a separate folder CBS). Those gigantic log files hint towards repeated massive issues with updates.

Cleanup Wizard will detect much more if you press the "Clean up system files" button, which restarts scanning and includes many more locations.
CERTIFIED EXPERT

Author

Commented:
Those gigantic log files hint towards repeated massive issues with updates.
Doesn't the attached looks suspicious...?

"Clean up system files" button
I've done that yesterday, but can try it again.

Thanks,
Ben
Untitled.png
Qlemo"Batchelor", Developer and EE Topic Advisor
CERTIFIED EXPERT
Top Expert 2015

Commented:
Yes, that is suspicious. makecab is a process "zipping" files into CAB format, used e.g. for compressing and archiving older update logs. That explains why free space it ate up soon. By cleaning up such logs there shouldn't be as much processes and tries to compress etc.

BTW, mind to use "embed" when posting screenshots? I've edited your prior comment to that regard already ...
CERTIFIED EXPERT

Author

Commented:
Hi,

I was whole day unable to access that PC (was showing offline), just got hold of it and this is what I see on login screen.

1
Thanks,
Ben
CERTIFIED EXPERT

Author

Commented:
Now it let me thru,

Started moving stuff to my external storage, see below.

1
However during the day it had 49 free GB, and now it was full (29 MB free...), looks like the process above (or something else) is creating files...

What can I do at the moment to save my PC?!

Thanks,
Ben
Qlemo"Batchelor", Developer and EE Topic Advisor
CERTIFIED EXPERT
Top Expert 2015

Commented:
It will be difficult from remote to find the culprit. I would start with deleting everything in Windows\Temp  - you will get error messages about files in use you cannot delete, just skip those -  and then restart the machine quickly to wipe out or at least reduce the processes creating the CAB files.

After reboot, check if CAB files are still created. If yes, running Process Explorer from www.sysinternals.com you should be able to see the process tree and which processes are spawning those CAB creating ones. Killing those might help or not.
Robert RComputer Service Technician
CERTIFIED EXPERT

Commented:
once you finish backing up the files as mentioned delete the files in the temp folder, if they are Continually been recreated and filling up the drive it may be something sinister that is happening like a virus that is creating files and filling up the drive.  Only when you are installing a major service pack such as moving toward a different version of windows 10 will large cab files be developed. Have you tried to delete the temp files again?  Are they repopulating? Maybe you need to do a malware/virus scan.
CERTIFIED EXPERT

Author

Commented:
Hi Experts,

Just updating...

I've tried e/t what has been suggested nothing helped, the PC was getting worse by the day/hour...
Finally I called an IT company and this is what it turned out...
https://answers.microsoft.com/en-us/windows/forum/windows_7-files/cabxxxx-files-found-in-windowstemp-folder/2e86137e-7e6b-4cb7-9a3c-4ee73f665742
They claim to have deleted the large files causing it and will see next few days if that resolves the issue...

Thanks,
Ben
Robert RComputer Service Technician
CERTIFIED EXPERT

Commented:
Yes this is what we have been suggesting you delete the files in this folder through out this thread.
CERTIFIED EXPERT

Author

Commented:
Hi Robert,

...as mentioned delete the files in the temp folder,
I did that and it didn't help.
What it helped according to that IT guy was removing 3 large files under C:\Windows\Logs\CBS folder.

See for example following
https://www.computerworld.com/article/3112358/windows-7-log-file-compression-bug-can-fill-up-your-hard-drive.html

Thanks,
Ben
Robert RComputer Service Technician
CERTIFIED EXPERT

Commented:
ok thanks for the clarification, i missed that part
CERTIFIED EXPERT

Author

Commented:
Hi Experts,


I am at the same situation again, cannot login to my PC although it seems to be online...
Any suggestion?


Thanks,
Ben
Qlemo"Batchelor", Developer and EE Topic Advisor
CERTIFIED EXPERT
Top Expert 2015

Commented:
That is no surprise, as you didn't resolve the basic issue. To regain access from remote, you'll have to get free space again - by deleting big files in CBS and TEMP folders. Then it is important to find out why updates don't work as expected (what the CBS folder is for). The CBS log in that folder should help to get better hints.
CERTIFIED EXPERT

Author

Commented:
Hi .
I was using this PC since then w/o any problems, not sure if this is same problem at all...
BTW, I've opened a new thread for this.
https://www.experts-exchange.com/questions/29175072/Connect-remotely-to-unresponsive-PC-2.html#questionAdd
Thanks,
Ben
Get access with a 7-day free trial.
Thanks for using Experts Exchange.

Please provide your email to receive a free trial preview!

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.