View original (French)

Temporary file continuously filling up under W10

Solved
Pacou -  
Malekal_morte- Posted messages 178136 Registration date   Status Modérateur, Contributeur sécurité Last intervention   -
Hello,

I’m creating this post based on the advice of members with whom I’ve already discussed my issue in order to further my investigation:

https://forums.commentcamarche.net/forum/affich-36264367-fichiers-temporaires-fantomes-qui-prennent-13-go#p36268291

Indeed, my problem is that I almost constantly have over 300 GB of temporary files that are eating up my hard drive space and severely slowing down my PC. I emptied the Windows\Temp temporary folder yesterday and installed AVAST because I realized during my investigation that Windows Defender was inactive, and I couldn’t launch anything related to it!!!

But today, while continuously observing the Temp folder that I had emptied, I noticed that it was filling up at the speed of about forty temporary files of the type "event logs" each several MB large, some of which are 20 MB. You can imagine how quickly the Temp folder can reach several hundred GB!!!

After installing AVAST, I of course did a scan, but nothing unusual was found. Could you please help me?

Thank you in advance for your cooperation!
Pascal

4 réponses

Réponse 1 / 4
Malekal_morte- Posted messages 178136 Registration date   Status Modérateur, Contributeur sécurité Last intervention   24 711
 
Hello,

On Windows 10, uninstall Avast! and leave Windows Defender.
Lighter.

Then:

To free up disk space, you can start with a Windows cleanup:
Windows key + R
Type cleanmgr
Perform the cleanup.

Then, follow this tutorial: how to free up disk space on Windows
From the link, use WindirStat to visualize what is taking up space abnormally and clean up accordingly.
Try to determine what is taking up space abnormally with WindirStat.

Some areas to check mentioned in the link:
  • Clean up with the Windows cleanup program and free up disk space in the Windows folder: How to reduce the size of the Windows folder
  • Check for misconfigurations, System Restore, Antivirus, etc...
  • Presence of the windows.old folder following a Windows 10 update or reset
  • Check if you have videos or others taking up space as well


It is important to use the WindirStat program to see what may be taking up space; feel free to share a screenshot if needed.
A screenshot of the list of folders
Another screenshot with the Windows folder expanded.
This will allow you to see what is taking up space.

--
Please press any key to continue the disinfection...
0
Pacou
 
Hello Malekal! In fact, I already have the answer, the problem is the Windows\Temp folder which fills up at an insane speed as I mentioned earlier! That's the issue and why this problem, that's the question! Thanks again for your reply!
See you!
0
Malekal_morte- Posted messages 178136 Registration date   Status Modérateur, Contributeur sécurité Last intervention   24 711 > Pacou
 
It's often the antivirus.
What antivirus do you have?
0
Pacou
 
I was using Windows Defender but it was unresponsive and I was unable to initiate any requests to open a window related to it, such as by right-clicking on the Windows Security icon in the bottom right corner. The same goes for going through the Windows settings!!! So I installed AVAST to run a scan, but nothing to report, that's where I am now. I created a shortcut to the Windows\Temp folder on my desktop and I clear it out from time to time!
0
Pacou
 
Additional info: Sometimes nothing happens and the Temp folder remains empty, then for no apparent reason, it starts dumping dozens of large files (event logs) that ultimately add up to 20 or 30 GB in just one morning!!!
0
Réponse 2 / 4
Malekal_morte- Posted messages 178136 Registration date   Status Modérateur, Contributeur sécurité Last intervention   24 711
 
Uninstall Avast!
Let Windows Defender be lighter.

To check your computer for potential infections and get a general state of the system:

Follow the FRST tutorial by clicking on this blue link. ( take the time to read carefully - everything is well explained ).

Download and run the FRST scan,
Wait for the scan to finish, a message will indicate that the analysis is complete.

Three FRST reports will be generated:
  • FRST.txt
  • Shortcut.
  • Additional.txt


Send these 3 reports to the site https://pjjoint.malekal.com/ and in return provide the 3 pjjoint links leading to the reports here in a new reply so we can review them.

(The blue links lead to step-by-step explanatory tutorials, click on them for more detailed instructions to follow).

--
Please press any key to continue the disinfection...
0
Pacou
 
Isn't it better to leave AVAST for now since Windows Defender doesn't seem to be operational?
0
Malekal_morte- Posted messages 178136 Registration date   Status Modérateur, Contributeur sécurité Last intervention   24 711 > Pacou
 
We can get it back up and running with FRST.
So I think you can uninstall it.
0
Pacou
 
Ok
0
Pacou
 
Here is Malekal, with AVAST uninstalled, here are the 3 links in question:

FRST:
https://pjjoint.malekal.com/files.php?id=FRST_20191025_o14h8v11m12v9

ADDITION:
https://pjjoint.malekal.com/files.php?id=20191025_f13q5t15v15n5

SHORTCUT:
https://pjjoint.malekal.com/files.php?id=20191025_y10f5j8p10f11

I also take this opportunity to attach a screenshot taken this morning via this download link:
https://pjjoint.malekal.com/files.php?id=20191025_h5v11j13s7m12

Essentially, approximately 5000 files (mostly with evtx extension) are continuously created in this Windows\Temp folder in 1.5 hours, which amounts to about 50 GB in one morning!!!

Sometimes nothing happens, the Temp folder, once emptied, remains empty at startup, for example, and then suddenly it starts again and continuously fills up. I haven't been able to identify any particular action on my part that would trigger this phenomenon!

Thank you again for your cooperation,
Regards
Pascal
0
Réponse 3 / 4
Malekal_morte- Posted messages 178136 Registration date   Status Modérateur, Contributeur sécurité Last intervention   24 711
 
Apparently, it's a bug in one of the monthly updates of 1903: https://borncity.com/win/2019/08/02/windows-10-v1903-update-kb4505903-fills-disk-with-event-log/
You need to uninstall KB4505903.
=> How to uninstall an update on Windows

Otherwise:

You have installed the pesky Ask extension on Chrome.
Warning - to read The pesky extensions and Adwares: Adwares, PUPs by extensions on Google Chrome and Mozilla Firefox

If you are surfing with Google Chrome:
Repair Google Chrome (Follow the first paragraph)
Follow the Limiter_les_impacts_des_sites_WEB paragraph on the page How to speed up Google Chrome
Install uBlock and The Great Suspender

If you are surfing with Mozilla Firefox:
Repair Mozilla Firefox (Follow the first paragraph)
Install uBlock and Tab Suspender as extensions.
See the following page for all best practices to follow: Speed up Mozilla Firefox

--
Please press a key to continue the disinfection...
0
Pacou
 
Sure, I'll check that quickly! Thanks, see you later!
0
Pacou
 
Sorry Malekal, but I no longer have update KB4505903 from July 2019. The oldest information I have in my control panel window/installed updates dates back to 09/08/2019. It is true that when my problem occurred, I tried to free up as much space as possible on my hard drive, which was full. I was just starting to understand what was happening, and I remember having deleted updates as I had read during my haphazard investigations!!! What should I do then, Doctor?
Thank you, Malekal!
Pascal
0
Malekal_morte- Posted messages 178136 Registration date   Status Modérateur, Contributeur sécurité Last intervention   24 711 > Pacou
 
Are the evtx files still being created?

If so, right-click the Start menu
Powershell (admin)

Get-AppxPackage Microsoft.windowscommunicationsapps | Remove-AppxPackage

and if that doesn't help:

Press Windows + R, type regedit, and hit OK.
WIN+R and type regedit.exe
On the left, expand HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AppXSvc
On the right, change the Start value to 4
Restart the PC.
0
Pacou
 
Hi Malekal! I've waited several days to see how my PC would behave after doing the two actions you mentioned above, but there's been no change. At one point, I thought things were resolved, but it was in vain. Maybe I should keep doing this by clearing the Windows\Temp folder when it's too full and wait for the next Windows update to fix the issue?
Thanks and see you!
0
Malekal_morte- Posted messages 178136 Registration date   Status Modérateur, Contributeur sécurité Last intervention   24 711 > Pacou
 
Even with the latest tweaks from message #14, is it still not working?
0
Réponse 4 / 4
Malekal_morte- Posted messages 178136 Registration date   Status Modérateur, Contributeur sécurité Last intervention   24 711
 
I’m getting back to you about other cases: https://www.askwoody.com/2019/reports-of-surface-pro-swamping-temp-folder-with-bogus-evtx-files/

Try in PowerShell as admin:

Get-AppxPackage *surface* | Remove-AppxPackage

--
Please press any key to continue the disinfection...
0
Pacou
 
Thank you Malekal, noted but for now, for the last two days, the problem seems to be stopped so I won't do anything for the moment and if it happens again, I will immediately do your above-mentioned procedure.
I will keep you updated and get back to you in a week to give you another update!
Thanks and talk to you later!

Pascal
0
Malekal_morte- Posted messages 178136 Registration date   Status Modérateur, Contributeur sécurité Last intervention   24 711 > Pacou
 
great, that’s good =)
0
Pacou
 
Hi Malekal! Sorry, but I have a doubt because I don't know if I've already posted this comment due to a serious PC issue. Regarding my problem that was the subject of this post, I no longer have the issue with the temp file filling up by itself. However, lately, my vertical scrolling keeps making the window jump to the bottom. Could it be a virus? If you can help me! Damn, it's happening again! Well, see you later and thanks in advance... Pascal
0
Malekal_morte- Posted messages 178136 Registration date   Status Modérateur, Contributeur sécurité Last intervention   24 711 > Pacou
 
No, it's not related to viruses; it's something else.
If it's a wireless mouse, check the batteries or interference from something.
0
Pacou
 
No, same problem with two different wired mice as well as without a mouse directly on the PAD! Right now I'm typing this message while keeping my left hand finger on the SHIFT key to be able to write, otherwise it's impossible to type!!!
0