Huge files in \RECYCLER but can't find

[buildingit]

Hello,

I have a huge hard disk and just noticed much of it is filled but the numbers don't add up: I should have about 1/10 of the spaced used as it says I does.

I checked the disk defragmenter program and it is listing a bunch of fragments (like 10-20) per drive of 14,638 KB or 24,414 KB being used by:

\RECYCLER\S-1-5-21-1547161642-1599820......

I have no idea what this means?

But I don't have a \RECYCLER directory on any of my drives and I have cleaned out my recycle bin and rebooted.

So, not knowing where these (or this) file(s) are, I can't delete them.

Does anyone know what I can do about this or what this even means? I am runnin out of disk space which is ridiculous as I have a 40GB hard drive and I'd guess no more than 15GB of real stuff on it.

thanx, I'd appreciate any ideas you may have,

Catherine

[kevinq]

sry.....the ony thing i can think of is going into seach..in the menu of xp...i guess ur using...and type the file in there...if it finds it, it will tell u whwre it is

[buildingit]

thanx

I already tried searching for *recycler*.* and *1599*.* but got nothing.

I'm starting to get scared here..... I figured there would be some obvious thing I was overlooking......


Its win2k btw. But still, so strange?

[buildingit]

OK, well I found the RECYCLER directories: they were hidden system files which were not showing up. I changed the option in "folder options/view" in Explorer and found them.


But when I changed the option, Explorer gave a popup window saying that removing hidden system files could really cause trouble so I am not sure if I should delete them, though I don't see what else I can do?

And oddly, they (the RECYCLER directories) all have the same date: 10/28/2003 which is of no significance to me- I installed my OS over 2 years ago and don't recall doing anything special on October 28......

If anyone has heard of this and knows if I should delete these files, I'd really apreciate knowing what you think.


thanx

[buildingit]

Ah well, I think was hacked.....

At the exact date and time of the Recycler entries, I have the following file. And yup, my fault, I had not changed the password on SQL Server. So lucky at least I got a "friendly" (sort of) hacker.


So I think I will just cross my fingers and delete these files.


****************

How you did see here, your system was not really good protected!!!

In this way it is possible to deleted all your data on this server. Just as well it is possible to destroy the hardware of the system!!

My tip! Take a moment, and think about security on your system!!!

1. Change your passwords into difficult combinations of letters and numbers (both on NT and SQL)

2. delete it all not used users (guest...)

3. Update your system with the newest servicepacks! (close the RPC entrance)

Much success

Netzdiver

HP: I had made your system a little more safety, by changing your password for the administrator / sa entrance!!
That it is possible for you to change it: new Password is - > be_more_safety

*******************************


thanx

[TwoRails]

That is where you deleted file go! Just empy (or view) your "Recycle Bin" ...

[buildingit]

Thanx


I had already emptied my recycle bin. The hacker or whoever it was added new directories to those hidden \RECYCLER directories and filled them up with a bunch of garbage.

Anyway, I deleted them and rebooted and all seems ok...... but couldn't delete every file becasue one .dll is in use. But I hope I have it all.


Thanks again for your help!