Vista - 43 GB System File in System Volume Information on 160 GB partition

(1) File name:
{ca0a01b4-d58c-11db-8afb-0013720efba8}{3808876b-c176-4e48-b7ae-04046e6cc752}.

(2) Partition is NOT System partition.

(3) System Restore on this partition was ENabled by default, but is now
DISabled.

(4) File is modified after each boot. (System log entry nearest to
Date/Time Modified is Windows Modules Installer service entering stopped
state.)

A single file consuming over 25% of a partition seems excessive. Any
ideas?

TIA.

Brent

Run Disk CleanUp, More, Options, System Restore. What affect does it
have on the file size?

--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


"Brent" <HarvestThis@Spammers.Net> wrote in message
news:%23LxvtSUfHHA.4868@TK2MSFTNGP06.phx.gbl...
> (1) File name:
> {ca0a01b4-d58c-11db-8afb-0013720efba8}{3808876b-c176-4e48-b7ae-04046e6cc752}.
>
> (2) Partition is NOT System partition.
>
> (3) System Restore on this partition was ENabled by default, but
> is now
> DISabled.
>
> (4) File is modified after each boot. (System log entry nearest to
> Date/Time Modified is Windows Modules Installer service entering
> stopped
> state.)
>
> A single file consuming over 25% of a partition seems excessive.
> Any
> ideas?
>
> TIA.
>
>

Should have mentioned that I already tried that, to no avail.

Thanks for responding.


"Gerry Cornell" <gcjcvis@nospam.com> wrote in message
news:%23Oq%23GjVfHHA.208@TK2MSFTNGP05.phx.gbl...
> Brent
>
> Run Disk CleanUp, More, Options, System Restore. What affect does it
> have on the file size?
>
> --
>
>
> Hope this helps.
>
> Gerry
> ~~~~
> FCA
> Stourport, England
> Enquire, plan and execute
> ~~~~~~~~~~~~~~~~~~~
>
>
> "Brent" <HarvestThis@Spammers.Net> wrote in message
> news:%23LxvtSUfHHA.4868@TK2MSFTNGP06.phx.gbl...
>> (1) File name:
>> {ca0a01b4-d58c-11db-8afb-0013720efba8}{3808876b-c176-4e48-b7ae-04046e6cc752}.
>>
>> (2) Partition is NOT System partition.
>>
>> (3) System Restore on this partition was ENabled by default, but is
>> now
>> DISabled.
>>
>> (4) File is modified after each boot. (System log entry nearest to
>> Date/Time Modified is Windows Modules Installer service entering
>> stopped
>> state.)
>>
>> A single file consuming over 25% of a partition seems excessive. Any
>> ideas?
>>
>> TIA.
>>
>>
>

Brent

What is the file extension?

Have you searched your registry using regedit to see if the guid (if
that is what they are?) appears in the registry to get a programme
name?

--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

"Brent" <HarvestThis@Spammers.Net> wrote in message
news:%23u6vtsWfHHA.4156@TK2MSFTNGP02.phx.gbl...
> Should have mentioned that I already tried that, to no avail.
>
> Thanks for responding.
>
>
> "Gerry Cornell" <gcjcvis@nospam.com> wrote in message
> news:%23Oq%23GjVfHHA.208@TK2MSFTNGP05.phx.gbl...
>> Brent
>>
>> Run Disk CleanUp, More, Options, System Restore. What affect does
>> it have on the file size?
>>
>> --
>>
>>
>> Hope this helps.
>>
>> Gerry
>> ~~~~
>> FCA
>> Stourport, England
>> Enquire, plan and execute
>> ~~~~~~~~~~~~~~~~~~~
>>
>>
>> "Brent" <HarvestThis@Spammers.Net> wrote in message
>> news:%23LxvtSUfHHA.4868@TK2MSFTNGP06.phx.gbl...
>>> (1) File name:
>>> {ca0a01b4-d58c-11db-8afb-0013720efba8}{3808876b-c176-4e48-b7ae-04046e6cc752}.
>>>
>>> (2) Partition is NOT System partition.
>>>
>>> (3) System Restore on this partition was ENabled by default, but
>>> is now
>>> DISabled.
>>>
>>> (4) File is modified after each boot. (System log entry nearest
>>> to
>>> Date/Time Modified is Windows Modules Installer service entering
>>> stopped
>>> state.)
>>>
>>> A single file consuming over 25% of a partition seems excessive.
>>> Any
>>> ideas?
>>>
>>> TIA.
>>>
>>>
>>
>

It is a System File with NO extension.

Your excellent suggestion about the registry search turned up:

HKLM\SYSTEM\CurrentControlSet\Control\BackupRestore\FilesNotToBackup\VSS
Default Provider

with a value of

\System Volume Information\*{3808876B-C176-4e48-B7AE-04046E6CC752} /s

Obviously SVI files ending with {3808876B-C176-4e48-B7AE-04046E6CC752}
are not to be backed up by Volume Shadow copy Service, but beyond that
I'm clueless.

The other 2 partitions, System and Users, have 4 and 31 files,
respectively, in System Volume Information ending with
{3808876B-C176-4e48-B7AE-04046E6CC752} and varying in size from 30 MB to
5.5 GB.

Thanks for the assistance.


"Gerry Cornell" <gcjcvis@nospam.com> wrote in message
news:OJB5RfZfHHA.1456@TK2MSFTNGP04.phx.gbl...
> Brent
>
> What is the file extension?
>
> Have you searched your registry using regedit to see if the guid (if
> that is what they are?) appears in the registry to get a programme
> name?
>
> --
>
>
> Hope this helps.
>
> Gerry
> ~~~~
> FCA
> Stourport, England
> Enquire, plan and execute
> ~~~~~~~~~~~~~~~~~~~
>
> "Brent" <HarvestThis@Spammers.Net> wrote in message
> news:%23u6vtsWfHHA.4156@TK2MSFTNGP02.phx.gbl...
>> Should have mentioned that I already tried that, to no avail.
>>
>> Thanks for responding.
>>
>>
>> "Gerry Cornell" <gcjcvis@nospam.com> wrote in message
>> news:%23Oq%23GjVfHHA.208@TK2MSFTNGP05.phx.gbl...
>>> Brent
>>>
>>> Run Disk CleanUp, More, Options, System Restore. What affect does it
>>> have on the file size?
>>>
>>> --
>>>
>>>
>>> Hope this helps.
>>>
>>> Gerry
>>> ~~~~
>>> FCA
>>> Stourport, England
>>> Enquire, plan and execute
>>> ~~~~~~~~~~~~~~~~~~~
>>>
>>>
>>> "Brent" <HarvestThis@Spammers.Net> wrote in message
>>> news:%23LxvtSUfHHA.4868@TK2MSFTNGP06.phx.gbl...
>>>> (1) File name:
>>>> {ca0a01b4-d58c-11db-8afb-0013720efba8}{3808876b-c176-4e48-b7ae-04046e6cc752}.
>>>>
>>>> (2) Partition is NOT System partition.
>>>>
>>>> (3) System Restore on this partition was ENabled by default, but is
>>>> now
>>>> DISabled.
>>>>
>>>> (4) File is modified after each boot. (System log entry nearest to
>>>> Date/Time Modified is Windows Modules Installer service entering
>>>> stopped
>>>> state.)
>>>>
>>>> A single file consuming over 25% of a partition seems excessive.
>>>> Any
>>>> ideas?
>>>>
>>>> TIA.
>>>>
>>>>
>>>
>>
>

Brent

You can control the size of System Restore folders without turning
off System Restore.
http://bertk.mvps.org/html/diskspacev.html

--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


"Brent" <HarvestThis@Spammers.Net> wrote in message
news:eHISqyZfHHA.928@TK2MSFTNGP02.phx.gbl...
> It is a System File with NO extension.
>
> Your excellent suggestion about the registry search turned up:
>
> HKLM\SYSTEM\CurrentControlSet\Control\BackupRestore\FilesNotToBackup\VSS
> Default Provider
>
> with a value of
>
> \System Volume Information\*{3808876B-C176-4e48-B7AE-04046E6CC752}
> /s
>
> Obviously SVI files ending with
> {3808876B-C176-4e48-B7AE-04046E6CC752} are not to be backed up by
> Volume Shadow copy Service, but beyond that I'm clueless.
>
> The other 2 partitions, System and Users, have 4 and 31 files,
> respectively, in System Volume Information ending with
> {3808876B-C176-4e48-B7AE-04046E6CC752} and varying in size from 30
> MB to 5.5 GB.
>
> Thanks for the assistance.
>
>

They're shadow copy files themselves used for restore points and the like.

Check out

http://blogs.technet.com/filecab/arc...ows-vista.aspx

Joe

"Brent" <HarvestThis@Spammers.Net> wrote in message
news:eHISqyZfHHA.928@TK2MSFTNGP02.phx.gbl...
> It is a System File with NO extension.
>
> Your excellent suggestion about the registry search turned up:
>
> HKLM\SYSTEM\CurrentControlSet\Control\BackupRestore\FilesNotToBackup\VSS
> Default Provider
>
> with a value of
>
> \System Volume Information\*{3808876B-C176-4e48-B7AE-04046E6CC752} /s
>
> Obviously SVI files ending with {3808876B-C176-4e48-B7AE-04046E6CC752} are
> not to be backed up by Volume Shadow copy Service, but beyond that I'm
> clueless.
>
> The other 2 partitions, System and Users, have 4 and 31 files,
> respectively, in System Volume Information ending with
> {3808876B-C176-4e48-B7AE-04046E6CC752} and varying in size from 30 MB to
> 5.5 GB.
>
> Thanks for the assistance.
>
>
> "Gerry Cornell" <gcjcvis@nospam.com> wrote in message
> news:OJB5RfZfHHA.1456@TK2MSFTNGP04.phx.gbl...
>> Brent
>>
>> What is the file extension?
>>
>> Have you searched your registry using regedit to see if the guid (if that
>> is what they are?) appears in the registry to get a programme name?
>>
>> --
>>
>>
>> Hope this helps.
>>
>> Gerry
>> ~~~~
>> FCA
>> Stourport, England
>> Enquire, plan and execute
>> ~~~~~~~~~~~~~~~~~~~
>>
>> "Brent" <HarvestThis@Spammers.Net> wrote in message
>> news:%23u6vtsWfHHA.4156@TK2MSFTNGP02.phx.gbl...
>>> Should have mentioned that I already tried that, to no avail.
>>>
>>> Thanks for responding.
>>>
>>>
>>> "Gerry Cornell" <gcjcvis@nospam.com> wrote in message
>>> news:%23Oq%23GjVfHHA.208@TK2MSFTNGP05.phx.gbl...
>>>> Brent
>>>>
>>>> Run Disk CleanUp, More, Options, System Restore. What affect does it
>>>> have on the file size?
>>>>
>>>> --
>>>>
>>>>
>>>> Hope this helps.
>>>>
>>>> Gerry
>>>> ~~~~
>>>> FCA
>>>> Stourport, England
>>>> Enquire, plan and execute
>>>> ~~~~~~~~~~~~~~~~~~~
>>>>
>>>>
>>>> "Brent" <HarvestThis@Spammers.Net> wrote in message
>>>> news:%23LxvtSUfHHA.4868@TK2MSFTNGP06.phx.gbl...
>>>>> (1) File name:
>>>>> {ca0a01b4-d58c-11db-8afb-0013720efba8}{3808876b-c176-4e48-b7ae-04046e6cc752}.
>>>>>
>>>>> (2) Partition is NOT System partition.
>>>>>
>>>>> (3) System Restore on this partition was ENabled by default, but is
>>>>> now
>>>>> DISabled.
>>>>>
>>>>> (4) File is modified after each boot. (System log entry nearest to
>>>>> Date/Time Modified is Windows Modules Installer service entering
>>>>> stopped
>>>>> state.)
>>>>>
>>>>> A single file consuming over 25% of a partition seems excessive. Any
>>>>> ideas?
>>>>>
>>>>> TIA.
>>>>>
>>>>>
>>>>
>>>
>>
>

Hello Everyone,

I granted myself full control NTFS permissions over the System Volume
Information folder through the local administrators group.

Used SystemInternals Process Explorer to "find" the guid and close the
handle System had on the file.

The files "dropped off" as each file handle was closed.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


--
jcrhoten
------------------------------------------------------------------------
jcrhoten's Profile: http://forums.techarena.in/members/155720.htm
View this thread: http://forums.techarena.in/vista-help/724347.htm

http://forums.techarena.in