Solved 320GB HD almost full

[bootsmom]

I have a bad problem. I have only 17.7GB free on a 320GB HD.

This is day 3 of my problem. I have run AVG, scanned with Housecall and ESET NOD32, MBAM, HjT and am clean.

I ran WinDirStat today and most of my resources are occupied by over 168GB of .rcd files. I cannot locate any information about these specific types of files, but as near as I can figure, they have something to do with the backups of Avanquest Fix-it Utilities file undeleter (which I have DISABLED) and/or MXCYCLE. I remember having similar problems with MXCYCLE back about 10 years ago, don't remember how to fix this though.

I'm not sure if it is safe for me to delete these .rcd files in the application data folder. I need help quickly because I'm running out of resources here. Any ideas?

TIA,
Bootsmom

 

[Ztruker]

The only info I could find was this:

The RCD file type is primarily associated with 'Arcade' by Kirk Martini, University of Virginia. Arcade is a computer program that models structures in real time using computational methods from computer games. It is a free program. The RCD file is binary input represeting a physical model for dynamic analysis.

The path in your post, C:\_BACKUP.RC led me to this:

The directory C:_Backup.rc stores your restore script/backups for Anvanquest System Suite 8

 

[bootsmom]

thanks for your reply Ztruker..

That's interesting because I don't use Avanquest System Suite 8, I am running Avanquest Fix-it Utilities 9 Professional. I believe they might be the 'undo' files after I use the registry cleaner. In any case, I have over 22,000 individual files which begin with C:\_Backup...(with a file extension of .rcd) taking up a LOT of space..... do you know if it is safe for me to delete them from my application data folder?

 

[smarteyeball]

To avoid conflicts down the track, is there a way to delete these backups from within the application? Never ever heard of that app, let alone used it, but it would be odd if that option was omitted.

Manually deleting them shouldn't hurt windows, but it may cause issues with the app.

 

[A Guy]

Wow, that's a lot of registry cleaning! So it is a backup before every cleaning, and assuming your PC is running ok, delete all but the last one and confirm it is creating 1 each time you use the cleaner. It's report.wer.rcd, so maybe a backup of Windows Error Report? Can you manually navigate to C:\_Backup folder and see if the files are dated. I can't see the full path because your screen shot is of a minimized window. What is the full path? (Screenshot with window maximized) A Guy

 

[bootsmom]

thanks for your responses folks. I finally managed to expand all folders and found that the culprit was Fix-it Utilities Recovery Commander wreaking the havoc. Needless to say something must have gone wrong with my Fix-it install, as I did NOT have Recovery Commander set to recover anything. I found approx 168GB of Fix-it backups, including File Undeleter backups as well (again: not selected in the settings). Seems Fix-it 9 had a mind of its' own.

In any case, I had help from a friend last evening who told me it is safe to delete all the .rcd backups. Unfortunately for me, it's going to take quite some time, as most filenames are too big for the recycle bin, so I bypassed it, but still getting the nag message. *sigh* thanks again

Boots

 

[Ztruker]

Uninstall Avanquest Fix-it Utilities 9 Professional and you're problem will go away

In my opinion it rates right up there with snake oil and whoopie cushions as do most Fix-It tools.

If you hold down the Shift key while deleting a file or folder, it bypasses the Recycle Bin completely. You are not even prompted to make a choice.

 

[bootsmom]

To avoid conflicts down the track, is there a way to delete these backups from within the application? Never ever heard of that app, let alone used it, but it would be odd if that option was omitted.

Manually deleting them shouldn't hurt windows, but it may cause issues with the app.

Thanks for your question smarteyeball. Uh no... there isn't a way to delete them from within the app (you'd think huh?). I've been using Fix-it for the utilities only for as long as it's been available....certainly over 10 years now....without incident (until now).

more replies follow....and an update.

 

[bootsmom]

thanks for your thoughts "A Guy" .

In the past week I have been able to delete the files only. As of this writing the _Backup.RC folder contains no more files, but 558 folders which are "undeletable" due to their names being too long for the recycle bin. When I try to delete them by bypassing the recycle bin, same result: unable to delete. They won't delete in safe mode either (more about that later). By deleting the FILES only, I was able to recover 45 GB, so now I'm up to 72GB space from a paltry 17GB.

I have requested help from Avanquest, but....won't hold my breath.

In the past week (with the help of a tech buddy) I have run CHKDSK and sfc /scannow, sent him the logs and he determined any errors reported were fixed (there weren't all that many).

I did the online scan with Housecall....no infection. I have run ESET and AVG (full computer scan) Malwarebytes (full scan) and HiJack this....all scanned clean.

I have also taken many screenshots of WinDirStat results, this one below is the most recent. One thing I found odd is that the time shown (last change) is usually 4 hours ahead of the time I ran the scan, and that has been the case since scan 1 on August 12.

My most recent WDS scan is below.

Note line two......178GB of "unknown" ...that's what I'm missing. I am completely lost, tired and frustrated. Note the discrepancy in disk sizes in the properties screenshot (sorry they are so big ! yikes)

 

[A Guy]

For detecting disc space, download the free Space Sniffer. Run the program, and you can single click the space you want to see details, or double click it to get a full screen detail. Right click on individual files to get the path.

For deleting the "undeletable" folders, suggest either Unlocker , or Lock Hunter. Both should identify the locking process, and allow you to close it. Or at the least, delete on restart.

A Guy

 

[Barman58]

Last ditch possibility for deletion of the folders is a Live Linux CD or USB Stick - takes windows out of the loop.

Of course this is a last resort option but with care can give required results.

   Warning

Only use as last resort and only after backing up everything you can

 

[preiius]

Next time, stay away from such system tuning software, except maybe CCleaner. Microsoft has done it right this time, win7 runs great out of the box, and stays that way.

Just install a free antivirus software such as MSE, Avira or Avast. Use a standard user account. Together with the built-in firewall, that's all you need to keep your machine fast and secure.

Create a system image once in a while. Do your data backup more often. Remember it's a question when, not if, a file becomes corrupted or hd stops working.

 

[bootsmom]

For detecting disc space, download the free Space Sniffer. Run the program, and you can single click the space you want to see details, or double click it to get a full screen detail. Right click on individual files to get the path.

For deleting the "undeletable" folders, suggest either Unlocker , or Lock Hunter. Both should identify the locking process, and allow you to close it. Or at the least, delete on restart.

A Guy

Barman 58
I'm not sure what a Live Linux CD is, and my USB stick only holds 4GB, not 178GB LOL, so I would take it to a tech before I would attempt that, thanks for the suggestion though.

A Guy
thank you for your suggestion of SpaceSniffer. I ran it. It confirmed my suspicions: the backup is occupying 178GB of my 320GB HD. At least now I know for sure where my missing disk space is

I ran unlocker and lockhunter, couldn't delete the _Backup.RC folder, nor any of the subfolders. I was able to unlock the folder (which was locked by Explorer.exe) but still can't delete any (folders).

I asked Avanquest for help but so far they have been less than "helpful". Despite pointing them to this thread, they seem to be unable to understand what the problem is.

 

[Barman58]

FYI a "Live CD" or "Live USB Stick" is an operating system that boots & runs directly from either a CD or Stick.

This allows you to work on the files on a system without any of the system protection that would normally prevent access to the files.

As you say this is probably an option for a local technician as incorrect use can cause serious damage to the system.

 

[A Guy]

Hmmm, usually either Unlocker or LockHunter will give the option to delete on reboot. OK, here's an idea, download the free FileKiller. Open the exe file, navigate to the folder with all the files, left click and highlight several as a test. Click on Kill Files on Grid.

Click Yes on confirmation popup.

See if it will delete them. If so, left click and highlight them all, and then delete away. Let us know. I'm sure we can figure out how to get them deleted. A Guy

 

[bootsmom]

FYI a "Live CD" or "Live USB Stick" is an operating system that boots & runs directly from either a CD or Stick.

This allows you to work on the files on a system without any of the system protection that would normally prevent access to the files.

As you say this is probably an option for a local technician as incorrect use can cause serious damage to the system.

oh ! thank you for the explanation LOL.

 

[bootsmom]

hello again "A Guy"
thank you for the FileKiller. Unfortunately it kills only files, not folders.

I have discovered an even more complicated mess since I was last here though... brace yourself !! Thank you so much for your help....and your patience

I will start off by saying that I have never liked using Windows system backups, because I just do NOT understand all the complicated instructions. I have been using EASEUS backup to a 1TB XHD each week. I backup my desktop (where I keep everything) to my USB thumbdrive daily. I've been doing it that way for a long time because I'm comfortable with it. I repeat: I will NEVER be comfortable with Windows system backups.

Well... somehow this computer was set to back up every day, (it may have come from Dell that way for all I know) and that's why I have 178 GB of backups to get rid of.

As a diagnostic, and on a hunch, I created a restore point this morning at 955 am, then turned off system restore. System backup is off.

I discovered that the folder in question is NOT an Avanquest recovery commander backup (also RC) - it is a system folder with the attribute RHSD. No wonder I couldn't delete it. Oddly, I was able to delete the files within it.

R read only
H hidden
S system
D ? directory ?

There is a screenshot of the folder attached to this posting.

contents of the folder:

title contains create date previous versions tab

CP156 12 folders sept 26, 2010 aug 22, 2011 955 am
CP158 12 folders oct. 10, 2010 as above
CP159 12 folders oct. 10, 2010 as above
CP160 12 folders dec. 8, 2010 as above
CP162 12 folders + jan 25, 2011 as above
CP163 12 folders april 9, 2011 as above
CP164 12 folders april 16, 2011 as above
CP165 12 folders may 7, 2011 as above
CP166 12 folders july 9, 2011 as above
CP168 177 folders aug 6, 2011 as above


fyi the properties of that backup folder say there are 7805 items in there


+ AVG command line scan (safe mode) identified this:

C:\_Backup.RC\Windows\CP162\D0000000.rcd\AppData.rcd\Local.rcd\Application Data.rcd\Application Data.rcd\Application Data.rcd\Application Data.rcd\Application Data.rcd\Application Data.rcd\Application Data.rcd\Application Data.rcd\Application Data.rcd\Application Data.rcd\Application Data.rcd\Application Data.rcd\Application Data.rcd\Application Data.rcd\Application Data.rcd\Application Data.rcd\Application Data.rcd\Application Data.rcd\Application Data.rcd\Application Data.rcd\Application Data.rcd\Application Data.rcd\Application Data.rcd\Application Data.rcd\Application Data.rcd\Application Data.rcd\Application Data.rcd\Application Data.rcd\Application Data.rcd\Application Data.rcd\Google.rcd\Chrome.rcd\Application.rcd\8.0.552.237.rcd\gears.dll.rcd Corrupted executable file Object was moved to Virus Vault.

I have no idea what to do next to get rid of these restore points. When I go into System Restore it shows only the latest restore point of this morning....August 22, 2011 @955 a.m.

*sigh*

 

[A Guy]

Ahhh, an interesting wrinkle, good job on the detective work. There must be a task scheduled to make these backups. You'd have to do some digging to find it though. Suggest you open the Task Scheduler:

Start> All Programs> Accesories> System Tools> Task Scheduler

You will see a section titled Active Tasks

One of these will be your task. Hopefully obviously named (or another member will know the name and post here). That task will be scheduled to run every day if it is running everyday as you say. You'd want to stop the task creating these backups as deleting the folder will be useless if it is then recreated.

To delete this folder, I believe you'd have to log in to the hidden Administrator account, and then should be able to delete the folder.

Hold tight, I am going to post to the Gurus here asking for more help.

A Guy

 

[bootsmom]

Ahhh, an interesting wrinkle, good job on the detective work. There must be a task scheduled to make these backups. You'd have to do some digging to find it though. Suggest you open the Task Scheduler:

Start> All Programs> Accesories> System Tools> Task Scheduler

You will see a section titled Active Tasks

One of these will be your task. Hopefully obviously named (or another member will know the name and post here). That task will be scheduled to run every day if it is running everyday as you say. You'd want to stop the task creating these backups as deleting the folder will be useless if it is then recreated.

To delete this folder, I believe you'd have to log in to the hidden Administrator account, and then should be able to delete the folder.

Hold tight, I am going to post to the Gurus here asking for more help.

A Guy

oh wow what a find......I have 85 scheduled tasks! I did not set these up.

thank you so much - I found the following entry !
sorry I'll try to calm down here, got a little excited

task: system restore
next run time: 935 this evening (aug 22)
trigger: at 1:35 pm every day - after triggered, repeat every 1 hour indefinitely ~!

I found another called

task: SR (system snapshot on startup)
next run time is blank
trigger: at system startup

I went into "Task Scheduler Library" , found "system restore" and SR and disabled them both YAY !
not to worry I have one restore point left, created this morning.

I found 48 entries similar to this : (numbers)
{F36D6867-389C-4400-9769-F9997A39482D}
trigger: when the task is created or modified

I examined their properties and they are programs like Windows Live Mail, Paint Shop Pro, etc. I deleted some of them already.

thank you for everything you are doing to help, much appreciated.

Boots

 

[karlsnooks]

you are doing well.

You are on the right track.

Via Task Scheduler,
simple Disable all tasks (don't worry your computer won't crash and burn) despite what some of the old-timers think and I'm older than nearly all of them.

Now you go back and delete all of those you don't recognize. Once again, thou shalt sweat it not.
----------------------------------------
Make yourself a System Repair disc.
---------------------------------------

​

CREATE A SYSTEM REPAIR DISC

START | type System Repair | Enter key | Create Disc button

​

-------------------------------------
Boot from the System Repair disc.
-------------------------------------

​

GO TO A COMMAND PROMPT USING A SYSTEM REPAIR DISC

1) Insert System Repair Disc into optical reader.
2) Shutdown computer.
3) Boot up computer from the System Repair Disc
If your computer doesn’t boot from the optical drive, then
Immediately after pushing your Power ON button,
start tapping the F2 key to get to the BIOS to change the boot order

On some computers, Immediately after pushing the Power ON button, start tapping the F12 key and choose CD/DVD to change the boot order only for this time.
4) Wait while a mini-version of Windows is loaded and finally the SYSTEM RECOVERY OPTIONS dialog appears.
5) NEXT | SYSTEM RECOVERY OPTIONS dialog
will search your system for installed versions of Windows.
6) select the Use recovery tools that can help fix problems starting Windows radio button |
7) NEXT | Choose Command Prompt

Run desired commands and type EXIT when finished.
Remove the System Repair Disc.
Shutdown computer.
Power on computer.

​

Go to a command prompt and see if you can't get rid of many of those troublesome files.

Also Win 7 Backup is much, much better than thqt from vista or xp. In fact, Win 7 Backup and Restore works perfectly. This is the only backup that I use or will recommend. If you get around to that point, there is a marvelous tutorial here on making a System Image backup.
http://www.sevenforums.com/tutorials/663-backup-complete-computer-create-image-backup.html