Security Basics mailing list archives

RE: Hard Drive keeps filling up


From: "Alexander Suhovey" <asuhovey () mtu-net ru>
Date: Wed, 24 Sep 2003 04:18:17 +0400

Also, if you are running a machine that has MSCONFIG on it

just FYI:
XP version of msconfig.exe happily runs on 2k.




-----Original Message-----
From: Mark Hicks [mailto:lordhog () hotmail com]
Sent: Wednesday, September 24, 2003 12:54 AM
To: security-basics () securityfocus com
Subject: RE: Hard Drive keeps filling up

  I would head on over to http://www.sysinternals.com and download some of
their monitoring software ( Filemon, Process Explorer, ListDLLs etc... )
and
see if you can find out which process has one of these files open in the
directory where all the tmp files are. If you want to view the contents of
the tmp file I would use HexWorkshop (http://www.hexworkshop.com) or
HexEdit
(http://www.expertcomsoft.com) to view the files just to take a look
inside
of them.

  Another items is to start shutting down processes from either Task
Manager
or the Services control panel one by one to see if you can find out what
is
filling of the files. Also, look in the two RUN keys in the registry

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
and
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

to see if you can find any program that shouldn't be starting up. Also, if
you are running a machine that has MSCONFIG on it ( WinXP and I think some
of the variants of Win9x have it also ) as it will list the startup
processes.

Mark Hicks


-----Original Message-----
From: Harris Samuel W PORT [mailto:HarrisSW () mail ports navy mil]
Sent: Monday, September 22, 2003 11:09 AM
To: security-basics () securityfocus com
Subject: Hard Drive keeps filling up

      I have been having a problem for a week now and can't seem to
detect
[snip]


---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: