43 GB System File in System Volume Information on 160 GB partition

(1) File name:
{ca0a01b4-d58c-11db-8afb-0013720efba8}{3808876b-c176-4e48-b7ae-04046e6cc752}.

(2) Partition is NOT System partition.

(3) System Restore on this partition was ENabled by default, but is now
DISabled.

(4) File is modified after each boot. (System log entry nearest to
Date/Time Modified is Windows Modules Installer service entering stopped
state.)

A single file consuming over 25% of a partition seems excessive. Any
ideas?

Run Disk CleanUp, More, Options, System Restore. What affect does it
have on the file size?
Should have mentioned that I already tried that, to no avail.

What is the file extension?

Have you searched your registry using regedit to see if the guid (if
that is what they are?) appears in the registry to get a programme
name?

It is a System File with NO extension.

Your excellent suggestion about the registry search turned up:

HKLM\SYSTEM\CurrentControlSet\Control\BackupRestore\FilesNotToBackup\VSS
Default Provider

with a value of

\System Volume Information\*{3808876B-C176-4e48-B7AE-04046E6CC752} /s

Obviously SVI files ending with {3808876B-C176-4e48-B7AE-04046E6CC752}
are not to be backed up by Volume Shadow copy Service, but beyond that
I'm clueless.

The other 2 partitions, System and Users, have 4 and 31 files,
respectively, in System Volume Information ending with
{3808876B-C176-4e48-B7AE-04046E6CC752} and varying in size from 30 MB to
5.5 GB.

You can control the size of System Restore folders without turning
off System Restore.
http://bertk.mvps.org/html/diskspacev.html

They're shadow copy files themselves used for restore points and the like.

Check out

http://blogs.technet.com/filecab/arc...ows-vista.aspx

[jcrhoten]

Hello Everyone,

I granted myself full control NTFS permissions over the System Volume Information folder through the local administrators group.

Used SystemInternals Process Explorer to "find" the guid and close the handle System had on the file.

The files "dropped off" as each file handle was closed.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[schoone]

I did do many things like turning off indexing service and a had already disabled the volune shadow copy for that drive. I took control over the system volune information and removed the write access from the system account, but it did not matter. Now I limmited the size of the volume shadow copy to the minimum of 320MB and the big file were gone!!!

Regards