Free Space on SSD C drive drops about 10-15 GB every hour - Win 7 Pro SP1 64 bit

[paulwb]

Good day/evening,
Just recently, the Free Space on my SSD C drive drops approx 10-15 GB every hour, reaching 0 GB at some point later in the day.
Maybe something to do with Pagefile settings?
I did receive help from your forum last week & maybe a setting was altered and not changed back to its original state.

[ATTACH]963[/ATTACH]

About an hour later free space now 149 GB.
[ATTACH]964[/ATTACH]

Let me know what can be done.
thanks for your help,

Paul

PC Info :
OS Version: Microsoft Windows 7 Professional, Service Pack 1, 64 bit
Processor: Intel(R) Core™ i7-4930K CPU @ 3.40GHz, Intel64 Family 6 Model 62 Stepping 4
Processor Count: 12
RAM: 16324 Mb
Graphics Card: NVIDIA GeForce GTX 770, -2048 Mb
Hard Drives: C: 223 GB (158 GB Free); D: 1863 GB (1243 GB Free); F: 1863 GB (1382 GB Free);
Motherboard: ASUSTeK COMPUTER INC., P9X79 LE
Antivirus: Panda Free Antivirus, Enabled and Updated,Private Firewall 7.0

[jmarket]

Please download MiniToolBox and save it to your desktop. Run the program by right clicking on it and selecting Run as administrator. When the program opens select the following boxes:

List Winsock Entries
List last 10 Event Viewer Errors
List Installed Programs
List Devices (Only Problems)
List Users, Partitions and Memory size

Please post the log in your next reply

[paulwb]

Hi jmarket,
Thanks for the quick reply.
I just realized that I haven’t run the DelFix Tool yet as recommended by malnutrition to clean things up. Don’t know if that has any bearing.

Here is the log …

MiniToolBox by Farbar Version: 17-06-2016
Ran by Owner (administrator) on 01-12-2016 at 17:57:19
Running from “C:\Users\Owner\Desktop”
Microsoft Windows 7 Professional Service Pack 1 (X64)
Model: System Product Name Manufacturer: System manufacturer
Boot Mode: Normal

---

========================= Winsock entries =====================================

Catalog5 01 C:\Windows\SysWOW64\NLAapi.dll [52224] (Microsoft Corporation)
Catalog5 02 C:\Windows\SysWOW64\napinsp.dll [52224] (Microsoft Corporation)
Catalog5 03 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 04 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 05 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog5 06 C:\Windows\SysWOW64\winrnr.dll [20992] (Microsoft Corporation)
Catalog5 07 C:\Windows\SysWOW64\wshbth.dll [36352] (Microsoft Corporation)
Catalog9 01 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 02 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 03 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 04 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 05 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 06 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 07 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 08 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 09 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 10 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
x64-Catalog5 01 C:\Windows\System32\NLAapi.dll [70656] (Microsoft Corporation)
x64-Catalog5 02 C:\Windows\System32\napinsp.dll [68096] (Microsoft Corporation)
x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 04 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 05 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog5 06 C:\Windows\System32\winrnr.dll [28672] (Microsoft Corporation)
x64-Catalog5 07 C:\Windows\System32\wshbth.dll [47104] (Microsoft Corporation)
x64-Catalog5 08 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [File Not found] ()
x64-Catalog5 09 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [File Not found] ()
x64-Catalog9 01 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 02 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 03 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 04 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 05 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 06 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 07 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 08 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 09 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 10 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)

========================= Event log errors: ===============================
[HEADING=1]Application errors:[/HEADING]
Error: (11/30/2016 11:35:16 PM) (Source: Windows Search Service) (User: )
Description: The index cannot be initialized.

Details:
The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)

Error: (11/30/2016 11:35:16 PM) (Source: Windows Search Service) (User: )
Description: The application cannot be initialized.

Context: Windows Application

Details:
The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)

Error: (11/30/2016 11:35:16 PM) (Source: Windows Search Service) (User: )
Description: The gatherer object cannot be initialized.

Context: Windows Application, SystemIndex Catalog

Details:
The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)

Error: (11/30/2016 11:35:16 PM) (Source: Windows Search Service) (User: )
Description: The plug-in in <Search.TripoliIndexer> cannot be initialized.

Context: Windows Application, SystemIndex Catalog

Details:
Element not found. (HRESULT : 0x80070490) (0x80070490)

Error: (11/30/2016 11:35:16 PM) (Source: Windows Search Service) (User: )
Description: The plug-in in <Search.JetPropStore> cannot be initialized.

Context: Windows Application, SystemIndex Catalog

Details:
The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)

Error: (11/30/2016 11:35:16 PM) (Source: Windows Search Service) (User: )
Description: The Windows Search Service cannot load the property store information.

Context: Windows Application, SystemIndex Catalog

Details:
The content index database is corrupt. (HRESULT : 0xc0041800) (0xc0041800)

Error: (11/30/2016 11:35:16 PM) (Source: Windows Search Service) (User: )
Description: The Windows Search Service is being stopped because there is a problem with the indexer: The catalog is corrupt.

Details:
The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)

Error: (11/30/2016 11:35:16 PM) (Source: Windows Search Service) (User: )
Description: The search service has detected corrupted data files in the index {id=4700}. The service will attempt to automatically correct this problem by rebuilding the index.

Details:
The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)

Error: (11/30/2016 11:35:16 PM) (Source: Windows Search Service) (User: )
Description: The Windows Search Service cannot open the Jet property store.

Details:
0x%08x (0xc0041800 - The content index database is corrupt. (HRESULT : 0xc0041800))

Error: (11/30/2016 11:35:16 PM) (Source: ESENT) (User: )
Description: Windows (2828) Windows: Error -1811 occurred while opening logfile C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\MSS0DD1A.log.
[HEADING=1]System errors:[/HEADING]
Error: (12/01/2016 09:55:34 AM) (Source: Service Control Manager) (User: )
Description: The AOMEI Backupper Scheduler Service service hung on starting.

Error: (11/30/2016 11:36:35 PM) (Source: Service Control Manager) (User: )
Description: The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Search service, but this action failed with the following error:
%%1056 = An instance of the service is already running.

Error: (11/30/2016 11:36:05 PM) (Source: Service Control Manager) (User: )
Description: The Windows Search service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.

Error: (11/30/2016 11:35:16 PM) (Source: Service Control Manager) (User: )
Description: The Windows Search service terminated with service-specific error %%-1073473535.

Error: (11/29/2016 09:31:36 PM) (Source: Service Control Manager) (User: )
Description: The NVIDIA LocalSystem Container service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 1000 milliseconds: Restart the service.

Error: (11/29/2016 09:31:36 PM) (Source: Service Control Manager) (User: )
Description: The Windows Modules Installer service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.

Error: (11/29/2016 09:31:36 PM) (Source: Service Control Manager) (User: )
Description: The Intel(R) Dynamic Application Loader Host Interface Service service terminated unexpectedly. It has done this 1 time(s).

Error: (11/29/2016 09:31:36 PM) (Source: Service Control Manager) (User: )
Description: The Intel(R) Rapid Storage Technology service terminated unexpectedly. It has done this 1 time(s).

Error: (11/29/2016 09:31:35 PM) (Source: Service Control Manager) (User: )
Description: The Windows Media Player Network Sharing Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.

Error: (11/29/2016 09:31:35 PM) (Source: Service Control Manager) (User: )
Description: The Windows Search service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.
[HEADING=1]Microsoft Office Sessions:[/HEADING]
Error: (11/30/2016 11:35:16 PM) (Source: Windows Search Service)(User: )
Description:
Details:
The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)

Error: (11/30/2016 11:35:16 PM) (Source: Windows Search Service)(User: )
Description: Context: Windows Application

Details:
The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)

Error: (11/30/2016 11:35:16 PM) (Source: Windows Search Service)(User: )
Description: Context: Windows Application, SystemIndex Catalog

Details:
The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)

Error: (11/30/2016 11:35:16 PM) (Source: Windows Search Service)(User: )
Description: Context: Windows Application, SystemIndex Catalog

Details:
Element not found. (HRESULT : 0x80070490) (0x80070490)
Search.TripoliIndexer

Error: (11/30/2016 11:35:16 PM) (Source: Windows Search Service)(User: )
Description: Context: Windows Application, SystemIndex Catalog

Details:
The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)
Search.JetPropStore

Error: (11/30/2016 11:35:16 PM) (Source: Windows Search Service)(User: )
Description: Context: Windows Application, SystemIndex Catalog

Details:
The content index database is corrupt. (HRESULT : 0xc0041800) (0xc0041800)

Error: (11/30/2016 11:35:16 PM) (Source: Windows Search Service)(User: )
Description:
Details:
The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)
The catalog is corrupt

Error: (11/30/2016 11:35:16 PM) (Source: Windows Search Service)(User: )
Description:
Details:
The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)
4700

Error: (11/30/2016 11:35:16 PM) (Source: Windows Search Service)(User: )
Description:
Details:
0x%08x (0xc0041800 - The content index database is corrupt. (HRESULT : 0xc0041800))

Error: (11/30/2016 11:35:16 PM) (Source: ESENT)(User: )
Description: Windows2828Windows: C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\MSS0DD1A.log-1811
[HEADING=1]CodeIntegrity Errors:[/HEADING]
Date: 2016-08-29 13:55:26.876
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2016-08-29 13:55:26.844
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2014-12-16 20:53:38.146
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\cmdvrt64. dll because the set of per-page image hashes could not be found on the system.

=========================== Installed Programs ============================

7-Zip 16.04 (x64 edition) (HKLM...{23170F69-40C1-2702-1604-000001000000}) (Version: 16.04.00.0 - Igor Pavlov)
Adobe Acrobat Reader DC (HKLM-x32...{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.020.20042 - Adobe Systems Incorporated)
Adobe Flash Player 23 NPAPI (HKLM-x32...\Adobe Flash Player NPAPI) (Version: 23.0.0.207 - Adobe Systems Incorporated)
Ansel (HKLM...{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Version: 375.70 - NVIDIA Corporation) Hidden
AOMEI Backupper Standard Edition 2.5 (HKLM-x32...{A83692F5-3E9B-4E95-9E7E-B5DF5536CE9D}_is1) (Version: - AOMEI Technology Co., Ltd.)
Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32...{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.16.4.0 - Asmedia Technology)
BTMM Software (HKLM-x32...\BTMM Software) (Version: - )
BTMM WSM Viewer 3.7 (HKLM-x32...{64F8E2C6-A88D-4C0A-BA07-93F9FFA11A8E}}_is1) (Version: 3.7 - Beat the Market Maker)
CCleaner (HKLM...\CCleaner) (Version: 5.24 - Piriform)
Citrix Online Launcher (HKLM-x32...{09DA5EE2-7E46-4DC4-96F9-BFEE50D40659}) (Version: 1.0.408 - Citrix)
Debut Video Capture Software (HKLM-x32...\Debut) (Version: - NCH Software)
Everything 1.3.4.686 (x64) (HKLM...\Everything) (Version: - )
FreeFileSync 7.9 (HKLM-x32...\FreeFileSync_is1) (Version: 7.9 - www.FreeFileSync.org)
FXDD Malta - MetaTrader 4 (HKLM-x32...\FXDD Malta - MetaTrader 4) (Version: 6.00 - MetaQuotes Software Corp.)
Gizmo Central (HKLM-x32...\Gizmo Central) (Version: v2.7.9 - Arainia Solutions, LLC)
Google Chrome (HKLM-x32...\Google Chrome) (Version: 54.0.2840.99 - Google Inc.)
Google Update Helper (HKLM-x32...{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.31.5 - Google Inc.) Hidden
GoToMeeting 7.26.0.5808 (HKCU...\GoToMeeting) (Version: 7.26.0.5808 - CitrixOnline)
GWX Control Panel (HKLM-x32...\UltimateOutsider_GwxControlPanel) (Version: - UltimateOutsider)
Intel(R) Management Engine Components (HKLM-x32...{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.12.1688 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM...{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
Java 8 Update 111 (HKLM-x32...{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM-x32...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft .NET Framework 4.6.1 (HKLM...{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM-x32...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Silverlight (HKLM...{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM...{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32...{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 50.0 (x86 en-US) (HKLM-x32...\Mozilla Firefox 50.0 (x86 en-US)) (Version: 50.0 - Mozilla)
Network Recording Player (HKLM-x32...{D64DFCA4-1AEC-4B6A-8A3A-6C2E1B2E16BD}) (Version: 29.11.3.4862 - Cisco WebEx LLC)
NVIDIA 3D Vision Controller Driver 369.04 (HKLM...{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 375.70 (HKLM...{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 375.70 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.1.0.52 (HKLM...{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.1.0.52 - NVIDIA Corporation)
NVIDIA Graphics Driver 375.70 (HKLM...{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 375.70 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.34.17 (HKLM...{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.17 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.16.0318 (HKLM...{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
NvNodejs (HKLM...{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvNodejs) (Version: 3.1.0.52 - NVIDIA Corporation) Hidden
NvTelemetry (HKLM...{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvTelemetry) (Version: 1.2.0.0 - NVIDIA Corporation) Hidden
Opera Stable 41.0.2353.69 (HKLM-x32...\Opera 41.0.2353.69) (Version: 41.0.2353.69 - Opera Software)
Outils de vérification linguistique 2013 de Microsoft Office - Français (HKLM-x32...{90150000-001F-040C-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Panda Cloud Cleaner (HKLM-x32...{92B2B132-C7F0-43DC-921A-4493C04F78A4}_is1) (Version: 1.1.9 - Panda Security)
Panda Devices Agent (HKLM-x32...{DDE3DECA-9139-4A39-9276-143ECA1DB75E}) (Version: 1.06.00 - Panda Security) Hidden
Panda Devices Agent (HKLM-x32...\Panda Devices Agent) (Version: 1.03.05 - Panda Security) Hidden
Panda Free Antivirus (HKLM...{293AA48A-DFC2-4F7D-9ED7-1A0F25CB5368}) (Version: 8.04.00.0000 - Panda Security) Hidden
Panda Free Antivirus (HKLM-x32...\Panda Universal Agent Endpoint) (Version: 16.0.2 - Panda Security)
Privatefirewall 7.0 (HKLM-x32...{E8EA933E-03A2-4E62-9F52-812C72BE2A6B}) (Version: 7.0.30.3 - PWI, Inc.)
PrivaZer (HKLM-x32...\PrivaZer) (Version: 3.0.12.0 - Goversoft LLC)
Realtek High Definition Audio Driver (HKLM-x32...{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7083 - Realtek Semiconductor Corp.)
SHIELD Streaming (HKLM...{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 7.1.0330 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (HKLM...{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController) (Version: 3.1.0.52 - NVIDIA Corporation) Hidden
Snagit 12 (HKLM-x32...{A232C484-23B5-4A2E-A317-A70EA1D1230D}) (Version: 12.1.0 - TechSmith Corporation) Hidden
Trader Workstation (HKLM-x32...\5889-6375-8446-2021) (Version: latest (959.1d) 20161026 17:20:13 - Interactive Brokers LLC)
Tweaking.com - Windows Repair (HKLM-x32...\Tweaking.com - Windows Repair) (Version: 3.9.17 - Tweaking.com)
VLC media player (HKLM...\VLC media player) (Version: 2.2.4 - VideoLAN)
Vulkan Run Time Libraries 1.0.26.0 (HKLM...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.3.0 (HKLM...\VulkanRT1.0.3.0) (Version: 1.0.3.0 - LunarG, Inc.)
WinRAR 5.00 (64-bit) (HKLM...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)

========================= Devices: ================================

Name: ZAM Helper Driver
Description: ZAM Helper Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: ZAM
Device ID: ROOT\LEGACY_ZAM\0000
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: ZAM Guard Driver
Description: ZAM Guard Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: ZAM_Guard
Device ID: ROOT\LEGACY_ZAM_GUARD\0000
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

========================= Memory info: ===================================

Percentage of memory in use: 19%
Total physical RAM: 14276.8 MB
Available physical RAM: 11558.18 MB
Total Virtual: 15274.98 MB
Available Virtual: 12260.81 MB

========================= Partitions: =====================================

1 Drive c: (Kingston HyperX SSD 240GB) (Fixed) (Total:223.47 GB) (Free:96.76 GB) NTFS
2 Drive d: (2TB.Seagate.Barracuda) (Fixed) (Total:1863.01 GB) (Free:1235.04 GB) NTFS
4 Drive f: (2TB.WD.Black.Caviar) (Fixed) (Total:1863.01 GB) (Free:1382.13 GB) NTFS

========================= Users: ========================================

User accounts for \PS-CORSAIR

Administrator Guest Owner

**** End of log ****

[jmarket]

Hi,

If you haven’t run DelFix, please do so now while I analyze your MTB log Please post DelFix’s log as well

[paulwb]

Hi,

If you haven’t run DelFix, please do so now while I analyze your MTB log Please post DelFix’s log as well

[HEADING=1]DelFix v1.013 - Logfile created 01/12/2016 at 18:09:36[/HEADING]
[HEADING=1]Updated 17/04/2016 by Xplode[/HEADING]
[HEADING=1]Username : Owner - PS-CORSAIR[/HEADING]
[HEADING=1]Operating System : Windows 7 Professional Service Pack 1 (64 bits)[/HEADING]
~ Removing disinfection tools …

Deleted : C:\FRST
Deleted : C:\zoek_backup
Deleted : C:\AdwCleaner
Deleted : C:\SecurityCheck
Deleted : C:\RegBackup
Deleted : C:\Users\Owner\Desktop\FRST-OlderVersion
Deleted : C:\ComboFix.1.txt
Deleted : C:\ComboFix.2.txt
Deleted : C:\ComboFix.txt
Deleted : C:\TDSSKiller.3.1.0.12_14.11.2016_12.50.13_log.txt
Deleted : C:\zoek-results.log
Deleted : C:\Users\Owner\Desktop\adwcleaner_6.030.exe
Deleted : C:\Users\Owner\Desktop\FRST64.exe
Deleted : C:\Users\Owner\Desktop\JRT.exe
Deleted : C:\Users\Owner\Desktop\MiniToolBox.exe
Deleted : C:\Users\Owner\Desktop\SecurityCheck.exe
Deleted : C:\Users\Owner\Desktop\ZHPCleaner.lnk
Deleted : C:\Users\Owner\Desktop\Zoek.Code.txt
Deleted : C:\Users\Owner\Desktop\zoek.exe
Deleted : HKCU\Software\g3n-h@ckm@n
Deleted : HKLM\SOFTWARE\g3n-h@ckm@n

~ Creating registry backup … OK

~ Cleaning system restore …

Deleted : RP #294 [JRT Pre-Junkware Removal | 11/30/2016 02:24:02]

New restore point created !

########## - EOF - ##########

[jmarket]

Alright go ahead and reboot and see where your free space is at I see right now it’s:

(Free:96.76 GB)

[paulwb]

It’s at 128 GB now, but I’ve seen it over 160 GB. The C drive is used only for the OS, not storing anything else on it, so should be much higher.
The Document & Settings folder is locked, which is strange.

[ATTACH]967[/ATTACH]

[paulwb]

Viewed again now, and Free Space down 1 GB to 127 GB.

[ATTACH]968[/ATTACH]

[jmarket]

Are you by any chance using Hibernation? That will chew quite a few GB of space, especially if it’s System managed

Windows will usually eat some space, but not gigabytes until it’s 0. It sounds like there might be foul play here.

Try using Space Sniffer. It’s free and will allow you to see visually what’s eating your space and if it matches what Windows tells you. Give it a try

[paulwb]

No, this is a desktop. I believe hibernation is only available on laptops. I’ll try space sniffer.
Foul play? Oh-oh…

[jmarket]

I believe hibernation is only available on laptops.

Hibernation is available on both desktops and laptops It’s like sleep mode but will actually shut down windows and power off then resume where it left off

Another program you might wanna try is WinDirStat It’s free also, and it will actually tell you what file(s) are eating your space. After doing more research, it sounds like a cache file is to blame.

[paulwb]

Hibernation is available on both desktops and laptops It’s like sleep mode but will actually shut down windows and power off then resume where it left off

OK. I know malnutrition recommended that it be removed on my laptop to save space, don’t remember if I also removed that function on this desktop, but it’s not showing in the Shut Down menu.

[Rustys]

The Document & Settings folder is locked, which is strange.

This [COLOR=rgb(255, 128, 0)]link will explains why.[/COLOR]

[paulwb]

Thanks Rustys …

[paulwb]

Hibernation is available on both desktops and laptops It’s like sleep mode but will actually shut down windows and power off then resume where it left off

Another program you might wanna try is WinDirStat It’s free also, and it will actually tell you what file(s) are eating your space. After doing more research, it sounds like a cache file is to blame.

I’ve run SpaceSniffer and the area circled in red is constantly flashing/changing so that, overtime, the Free Space area in green is slowly
reduced.

[ATTACH]973[/ATTACH]
[ATTACH]972[/ATTACH]