• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

Finding out what's deleted

For years, I've run a 1TB hard drive with pretty much always 5GB-15GB free.

Bad idea, I know, but I have.

Today, I noticed there's suddenly 80GB free, and I'm wondering what the heck happened.

Any recommendations for a utility or process that can help answer that - preferably some utility that might show a list of deleted files sorted by most recently deleted?

Win 7 ultimate.
 
Last edited:
I am fairly sure REcurva http://www.piriform.com/recuva/download still shows last modified date. I know it does on an older version I have on my win 7 machine. Do you have anything in task scheduler (such as disk cleanup) that may have run unattended or are there any related entries in Event Viewer?
 
Thanks for the help. It looks like a good program,

I'm not seeing anything that explains this.

I also checked event viewer, and it's not clear. Not running as admin, though.

Here's the kind of thing it shows:

Error 1/23/2014 11:09:47 AM MsiInstaller 11720 None
Error 1/23/2014 11:08:45 AM DNS Client Events 1012 None
Error 1/23/2014 2:16:05 AM volsnap 36 None
Error 1/22/2014 11:09:43 PM MsiInstaller 11720 None
Error 1/22/2014 11:08:42 PM DNS Client Events 1012 None
Error 1/22/2014 11:09:41 AM MsiInstaller 11720 None
Error 1/22/2014 11:08:51 AM DNS Client Events 1012 None
 
Glad to try to help, A shot in the dark - any chance system restore was cleared or turned off? If left on for a long time it can consume considerable space.
 
Last edited:
What's the error for volsnap?

I think that's all it says? I cut and pasted, there are a ton of them.

On the chkdsk - I ran it.

It took several hours. There were no errors in the first 3 stages of 5 - the last 2 there's no info, as the system was rebooted to do the check.

Be nice if there was a log of the results.
 
Last edited:
Glad to try to help, A shot in the dark - any chance system restore was cleared or turned off? If left on for a long time it can consume considerable space.

No, I've never done one. Years ago I went back on a checkpoint, but don't keep them now.
 
Another sample of the event viewer:

Error 3/7/2013 7:00:00 AM DNS Client Events 1012 None
Error 3/7/2013 3:07:59 AM volsnap 36 None
Error 3/6/2013 6:56:04 PM DNS Client Events 1012 None
Error 3/6/2013 9:08:32 AM Application Hang 1002 (101)
Error 3/6/2013 8:47:47 AM MsiInstaller 1013 None
Error 3/6/2013 6:55:28 AM DNS Client Events 1012 None
Error 3/5/2013 6:58:43 PM Application Error 1000 (100)
Error 3/5/2013 6:55:28 PM DNS Client Events 1012 None
Error 3/5/2013 1:17:14 PM DistributedCOM 10016 None
Error 3/5/2013 6:55:28 AM DNS Client Events 1012 None
Error 3/4/2013 6:55:29 PM DNS Client Events 1012 None
Error 3/4/2013 6:55:28 AM DNS Client Events 1012 None
Warning 3/4/2013 1:00:01 AM Time-Service 36 None
Error 3/3/2013 6:55:28 PM DNS Client Events 1012 None
Error 3/3/2013 6:55:29 AM DNS Client Events 1012 None
Error 3/3/2013 6:55:28 AM DNS Client Events 1012 None
Error 3/2/2013 6:55:29 PM DNS Client Events 1012 None
Warning 3/2/2013 6:00:22 PM DNS Client Events 1014 None
Error 3/2/2013 6:55:29 AM DNS Client Events 1012 None
Error 3/1/2013 6:55:28 PM DNS Client Events 1012 None
Warning 3/1/2013 12:43:10 PM DNS Client Events 1014 None
Error 3/1/2013 7:15:30 AM Application Error 1000 (100)
Error 3/1/2013 6:55:57 AM DNS Client Events 1012 None
Error 2/28/2013 7:40:45 PM volsnap 36 None

Or for an earlier one:

Error 12/4/2012 4:16:48 PM Kernel-EventTracing 0 Logging
Error 12/4/2012 4:16:48 PM Kernel-EventTracing 0 Logging
Error 12/4/2012 4:16:48 PM Kernel-EventTracing 0 Logging
Error 12/4/2012 4:16:48 PM Kernel-EventTracing 0 Logging
Error 12/4/2012 4:16:48 PM Kernel-EventTracing 0 Logging
Error 12/4/2012 4:16:48 PM Kernel-EventTracing 0 Logging
Error 12/4/2012 4:16:48 PM Kernel-EventTracing 0 Logging
Error 12/4/2012 4:16:48 PM Kernel-EventTracing 0 Logging
Error 12/4/2012 4:16:48 PM Kernel-EventTracing 0 Logging
Error 12/4/2012 4:16:48 PM Kernel-EventTracing 0 Logging
Error 12/4/2012 4:16:48 PM Kernel-EventTracing 0 Logging
Error 12/4/2012 4:16:48 PM Kernel-EventTracing 0 Logging
Error 12/4/2012 4:16:48 PM Kernel-EventTracing 0 Logging
Error 12/4/2012 4:16:48 PM Kernel-EventTracing 0 Logging
Error 12/4/2012 4:16:48 PM Kernel-EventTracing 0 Logging
Error 12/4/2012 4:16:48 PM Kernel-EventTracing 0 Logging
Error 12/4/2012 4:16:48 PM Kernel-EventTracing 0 Logging
 
Volsnap 36 means that the file system could not grow shadow volumes (comes up in low space situations like what you had). Did you run disk cleanup lately where it would have deleted those shadows? That would free a lot of space while also stopping volsnap 36.
 
Volsnap 36 means that the file system could not grow shadow volumes (comes up in low space situations like what you had). Did you run disk cleanup lately where it would have deleted those shadows? That would free a lot of space while also stopping volsnap 36.

No, I have never really run disk cleanup. Never de-fragmented (low space).

To the next poster - I have an SSD, but this issue and my chkdsk were on a 1TB hard drive.
 
Back
Top