HDD space disappearing as fast as I make it

[monkeyking]

Happy New Year!

idk whether this is a malware issue or not, but it feels like it...

My C drive ran out of space, and after using CCleaner and the windows diskclean utilities only a few hundred Mb were freed up, so I decided to make more by moving and removing a few things.
Made what should have been about 10Gb of space, but it only showed about 3Gb, then that rapidly went also, and now is only a few hundred Mb again.

I ran a MBAM rootkit scan, and it found what, looking at the forums, may have been a false positive, trojan carberp ED, in a filepath related to some of the software I uninstalled (was a Nokia pc suite), then after this did not help I did a boot time scan using Avast free version, it found some sweetFB and adware stuff, and something called a "decompression bomb", all fixed automatically, and none of it helped.

Do I have a malware problem, or is it something else? Any ideas?

[daledoc1]

Hello and welcome back:
 
It's impossible to know without a bit of data.
 
For starters, I suggest that you please read the following and attach to your next reply the 3 requested logs - Diagnostic Logs (the 3 logs are: FRST.txt, Addition.txt and CheckResults.txt)

 

Additional tools may be needed, but those 3 logs will provide a good starting point.

I have not personally used this one, but I have seen others here suggest it:

http://www.jam-software.com/treesize_free/

Thanks,

[monkeyking]

Ok, here goes...

FRST.txt

Addition.txt

CheckResults.txt

[AdvancedSetup]

I'm not aware of any infection aside from some worms that take space. Though the computer does appear to have some items that might indicate it is infected.

I would suggest following the advice from the topic here Available Assistance for Possibly Infected Computers and having one of the Experts assist you with looking into your issue.

They will assist you further in making sure the computer is not infected and then if the issue remains we can look at other items.

[David H. Lipman]

"few hundred Mb were freed up"

 

Mb = Megabit and is specific nomenclature.  Since you are posting a query about disk size you have to be specific and exact so if you mean Mega-Byte then the nomenclature is MB and we should not have to guess.

 

Same goes with "10Gb" which means 10 Gigabit.  If you mean 10 Giga-Byte then the nomenclature is 10GB.

A Bit is 1/8^th of a Byte.

 

So to start with you need to know, and express the size of the hard disk (Ex:: 250GB) how much space is free (Ex: 75GB) and work from the Point of View (POV).  Then we need to know roughly how long you have had it and what is the OS and flavour is installed on the undefined pltaform (Ex:  Windows 7 / 64 bit ).

 

Giving the information as I have gives us a reference point to work from and you need to know and express that information to discuss it.

[daledoc1]

Thanks for the helpful clarification about nomenclature, David.
 

 It does seem as if the C: drive is indeed out of space, for whatever reason?
 

==================== Drives ================================

Drive c: (ACER) (Fixed) (Total:113.36 GB) (Free:0.64 GB) NTFS ==>[system with boot components (obtained from reading drive)]
Drive d: (Backup Disk) (Fixed) (Total:149.05 GB) (Free:92.91 GB) NTFS
Drive e: (DATA) (Fixed) (Total:170.08 GB) (Free:116.32 GB) NTFS
Drive g: (3Connect) (CDROM) (Total:0.02 GB) (Free:0 GB) CDFS

 
@monkeyking:
 
In addition to David's expert advice, I would suggest following the recommendations of our forum Admin, AdvancedSetup:
 

i would suggest following the advice from the topic here Available Assistance for Possibly Infected Computers and having one of the Experts assist you with looking into your issue.

 

 
As he mentioned, after your malware helper gives you the "all clear", he or she may refer you back here, if there are other, non-malware problems to address.
 
Thanks,

[CWB]

hmmm ...

just a SWAG : perhaps the "auto backup/restore/imaging" has made a double fist-full of backups ?

although , it would require the backups to be other than on the (usually) small "backup/restore" partition .

i have noticed a similar situation on some comps i have repaired ... the owner installed a "backup" program and it was capable of using/used the whole of the "C" drive .

[monkeyking]

I run Vista, so have no control over the amount of space system restore uses...

I did look at how many restore points I had the other day, not quite 20, but more than I thought necessary so I removed about half and got myself about 24GB of space back, which is now down to 19GB already...

[gonzo]

Decompression bombs are designed to do exactly what the user is reporting.  They're not terribly common, but often associated with downloading from certain nefarious websites who have pricy software available free.  I am NOT saying that is the cause here, but its common.

[Firefox]

.....

I would suggest following the advice from the topic here Available Assistance for Possibly Infected Computers and having one of the Experts assist you with looking into your issue.

They will assist you further in making sure the computer is not infected and then if the issue remains we can look at other items.

This is what you need to do, there is no further help for you in this section of the forum, please follow the advice from AdvancedSetup...