View original (French)

Temporary file continuously filling up under W10

Solved
Pacou -  
Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   -
Hello,

I’m creating this post based on the advice of members with whom I’ve already discussed my issue in order to further my investigation:

https://forums.commentcamarche.net/forum/affich-36264367-fichiers-temporaires-fantomes-qui-prennent-13-go#p36268291

Indeed, my problem is that I almost constantly have over 300 GB of temporary files that are eating up my hard drive space and severely slowing down my PC. I emptied the Windows\Temp temporary folder yesterday and installed AVAST because I realized during my investigation that Windows Defender was inactive, and I couldn’t launch anything related to it!!!

But today, while continuously observing the Temp folder that I had emptied, I noticed that it was filling up at the speed of about forty temporary files of the type "event logs" each several MB large, some of which are 20 MB. You can imagine how quickly the Temp folder can reach several hundred GB!!!

After installing AVAST, I of course did a scan, but nothing unusual was found. Could you please help me?

Thank you in advance for your cooperation!
Pascal

4 answers

  1.
    Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 713
     
    Hello,

    On Windows 10, uninstall Avast! and leave Windows Defender.
    Lighter.

    Then:

    To free up disk space, you can start with a Windows cleanup:
    Windows key + R
    Type cleanmgr
    Perform the cleanup.

    Then, follow this tutorial: how to free up disk space on Windows
    From the link, use WindirStat to visualize what is taking up space abnormally and clean up accordingly.
    Try to determine what is taking up space abnormally with WindirStat.

    Some areas to check mentioned in the link:
    • Clean up with the Windows cleanup program and free up disk space in the Windows folder: How to reduce the size of the Windows folder
    • Check for misconfigurations, System Restore, Antivirus, etc...
    • Presence of the windows.old folder following a Windows 10 update or reset
    • Check if you have videos or others taking up space as well


    It is important to use the WindirStat program to see what may be taking up space; feel free to share a screenshot if needed.
    A screenshot of the list of folders
    Another screenshot with the Windows folder expanded.
    This will allow you to see what is taking up space.

    --
    Please press any key to continue the disinfection...
    0
    1. Pacou
       
      Hello Malekal! In fact, I already have the answer, the problem is the Windows\Temp folder which fills up at an insane speed as I mentioned earlier! That's the issue and why this problem, that's the question! Thanks again for your reply!
      See you!
      0
      1. Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 713 > Pacou
         
        It's often the antivirus.
        What antivirus do you have?
        0
    2. Pacou
       
      I was using Windows Defender but it was unresponsive and I was unable to initiate any requests to open a window related to it, such as by right-clicking on the Windows Security icon in the bottom right corner. The same goes for going through the Windows settings!!! So I installed AVAST to run a scan, but nothing to report, that's where I am now. I created a shortcut to the Windows\Temp folder on my desktop and I clear it out from time to time!
      0
    3. Pacou
       
      Additional info: Sometimes nothing happens and the Temp folder remains empty, then for no apparent reason, it starts dumping dozens of large files (event logs) that ultimately add up to 20 or 30 GB in just one morning!!!
      0
  2. Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 713
     
    Uninstall Avast!
    Let Windows Defender be lighter.

    To check your computer for potential infections and get a general state of the system:

    Follow the FRST tutorial by clicking on this blue link. ( take the time to read carefully - everything is well explained ).

    Download and run the FRST scan,
    Wait for the scan to finish, a message will indicate that the analysis is complete.

    Three FRST reports will be generated:
    • FRST.txt
    • Shortcut.
    • Additional.txt


    Send these 3 reports to the site https://pjjoint.malekal.com/ and in return provide the 3 pjjoint links leading to the reports here in a new reply so we can review them.

    (The blue links lead to step-by-step explanatory tutorials, click on them for more detailed instructions to follow).

    --
    Please press any key to continue the disinfection...
    0
    1. Pacou
       
      Isn't it better to leave AVAST for now since Windows Defender doesn't seem to be operational?
      0
      1. Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 713 > Pacou
         
        We can get it back up and running with FRST.
        So I think you can uninstall it.
        0
    2. Pacou
       
      Ok
      0
    3. Pacou
       
      Here is Malekal, with AVAST uninstalled, here are the 3 links in question:

      FRST:
      https://pjjoint.malekal.com/files.php?id=FRST_20191025_o14h8v11m12v9

      ADDITION:
      https://pjjoint.malekal.com/files.php?id=20191025_f13q5t15v15n5

      SHORTCUT:
      https://pjjoint.malekal.com/files.php?id=20191025_y10f5j8p10f11

      I also take this opportunity to attach a screenshot taken this morning via this download link:
      https://pjjoint.malekal.com/files.php?id=20191025_h5v11j13s7m12

      Essentially, approximately 5000 files (mostly with evtx extension) are continuously created in this Windows\Temp folder in 1.5 hours, which amounts to about 50 GB in one morning!!!

      Sometimes nothing happens, the Temp folder, once emptied, remains empty at startup, for example, and then suddenly it starts again and continuously fills up. I haven't been able to identify any particular action on my part that would trigger this phenomenon!

      Thank you again for your cooperation,
      Regards
      Pascal
      0
  3. Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 713
     
    Apparently, it's a bug in one of the monthly updates of 1903: https://borncity.com/win/2019/08/02/windows-10-v1903-update-kb4505903-fills-disk-with-event-log/
    You need to uninstall KB4505903.
    => How to uninstall an update on Windows

    Otherwise:

    You have installed the pesky Ask extension on Chrome.
    Warning - to read The pesky extensions and Adwares: Adwares, PUPs by extensions on Google Chrome and Mozilla Firefox

    If you are surfing with Google Chrome:
    Repair Google Chrome (Follow the first paragraph)
    Follow the Limiter_les_impacts_des_sites_WEB paragraph on the page How to speed up Google Chrome
    Install uBlock and The Great Suspender

    If you are surfing with Mozilla Firefox:
    Repair Mozilla Firefox (Follow the first paragraph)
    Install uBlock and Tab Suspender as extensions.
    See the following page for all best practices to follow: Speed up Mozilla Firefox

    --
    Please press a key to continue the disinfection...
    0
    1. Pacou
       
      Sure, I'll check that quickly! Thanks, see you later!
      0
    2. Pacou
       
      Sorry Malekal, but I no longer have update KB4505903 from July 2019. The oldest information I have in my control panel window/installed updates dates back to 09/08/2019. It is true that when my problem occurred, I tried to free up as much space as possible on my hard drive, which was full. I was just starting to understand what was happening, and I remember having deleted updates as I had read during my haphazard investigations!!! What should I do then, Doctor?
      Thank you, Malekal!
      Pascal
      0
    3. Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 713 > Pacou
       
      Are the evtx files still being created?

      If so, right-click the Start menu
      Powershell (admin)

      Get-AppxPackage Microsoft.windowscommunicationsapps | Remove-AppxPackage

      and if that doesn't help:

      Press Windows + R, type regedit, and hit OK.
      WIN+R and type regedit.exe
      On the left, expand HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AppXSvc
      On the right, change the Start value to 4
      Restart the PC.
      0
    4. Pacou
       
      Hi Malekal! I've waited several days to see how my PC would behave after doing the two actions you mentioned above, but there's been no change. At one point, I thought things were resolved, but it was in vain. Maybe I should keep doing this by clearing the Windows\Temp folder when it's too full and wait for the next Windows update to fix the issue?
      Thanks and see you!
      0
    5. Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 713 > Pacou
       
      Even with the latest tweaks from message #14, is it still not working?
      0
  4. Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 713
     
    I’m getting back to you about other cases: https://www.askwoody.com/2019/reports-of-surface-pro-swamping-temp-folder-with-bogus-evtx-files/

    Try in PowerShell as admin:

    Get-AppxPackage *surface* | Remove-AppxPackage

    --
    Please press any key to continue the disinfection...
    0
    1. Pacou
       
      Thank you Malekal, noted but for now, for the last two days, the problem seems to be stopped so I won't do anything for the moment and if it happens again, I will immediately do your above-mentioned procedure.
      I will keep you updated and get back to you in a week to give you another update!
      Thanks and talk to you later!

      Pascal
      0
    2. Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 713 > Pacou
       
      great, that’s good =)
      0
    3. Pacou
       
      Hi Malekal! Sorry, but I have a doubt because I don't know if I've already posted this comment due to a serious PC issue. Regarding my problem that was the subject of this post, I no longer have the issue with the temp file filling up by itself. However, lately, my vertical scrolling keeps making the window jump to the bottom. Could it be a virus? If you can help me! Damn, it's happening again! Well, see you later and thanks in advance... Pascal
      0
    4. Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 713 > Pacou
       
      No, it's not related to viruses; it's something else.
      If it's a wireless mouse, check the batteries or interference from something.
      0
    5. Pacou
       
      No, same problem with two different wired mice as well as without a mouse directly on the PAD! Right now I'm typing this message while keeping my left hand finger on the SHIFT key to be able to write, otherwise it's impossible to type!!!
      0