Rapidly Growing Protect File
I'm not sure this is the right forum to ask. I was referred here by "Where is the forum for..."I have a rapidly growing (5.4 GB on disk) file with path:C:\Documents and Settings\Local Service\Application Data\Microsoft\Protect\S-1-5-19I am learningSQL Server Express 2008, etc. on a machine running XP Home Edition, SP3.I have no idea what is going on, or if it is even a problem. If this is the proper place to ask, I will provide more details. If there is a better place to ask, please direct me.Thanks.BillThanks,Bill
June 5th, 2009 12:43am
hi bill,Below is the link for well know SID http://support.microsoft.com/kb/243330 are you sure you are seeing protect folder in the above said location ?because usually protect folder is seen under c:\WINDOWS\system32\Microsoft\Protect\ <followed by the SID >also make sure which file is occupying the maximum storage. please make sure you have full version AV setup and perform a thorough check.sainath
windows driver development.
Free Windows Admin Tool Kit Click here and download it now
June 5th, 2009 9:55am
Sainath,Thanks for responding.I verified the above path to the growing protect folder. The protect folder contains the S-1-5-19 SID folder and a file named CREDHIST.I noticed over the past few weeks that the virus scan during my weekly OneCare tune-up was getting longer and longer. The scan seems to hang up on the above protect folder for hours, but when the scan was complete, the result is always, "OneCare found no petentially harmful or unwanted software on your computer."The offending S-1-5-19 folder will not open properly. It now contains about 1.4 million files. A scan of that specific folder shows the scan running through what appear to be some kind of long hex IDs.I assume the weekly OneCare tune-up does a full version AV check.A little background. The machine with the offending folder is a laptop running XP Home Edition, SP3and is wirelessly networked though a simple home network with a desktop running Vista Home Premium, SP2. Lately, I started learning C# and keep my C# data files in an "untrusted" shared folder on the desktop. (The idea was to save disk space on the laptop.)Thanks again for the response.Bill
June 5th, 2009 4:44pm
hi bill , it seems to be that your system has compromised / unless there is a service which is writing into the SID in a rapid way.In order to check what is causing the issue, you should check when does the folder grow, is that during start of a service / does it grown even when the system is in idle state. installation of SQL doesnt bother about the SID , but if you have installed your sql server as a local service then there will be an entry onto it. if you have databases , tables, store procedures configured, then i would suggest to take a backup and uninstall the sql and check if the folder size is growing. sainath
windows driver development.
Free Windows Admin Tool Kit Click here and download it now
June 5th, 2009 5:51pm
Sainath,The folder protect continued to grow, even though I haven't used SQL Server for a couple of months as I learn more about C#. All my SQL Server databases arestored onthis laptop.Let me track the folder growth patternsand record some statistics as I try using different applications, etc. I'll respond again as soon as I see a pattern...Thanks again for the help.Bill
June 5th, 2009 7:48pm
Sainath,Is it now safe to delete the S-5-1-19 folder?I removed all instances of SQL Server 2008, and the file has stopped growing.Thanks again,BillPS It took a while to check whether the file was growing (about an hour and a halfeach time Iclicked properties).
Free Windows Admin Tool Kit Click here and download it now
June 6th, 2009 8:47pm
Sainath,Just want to let you know I really appreciate your help, andtell youthat my computer is running much better now thanks to your good advice. I went ahead and deleted the huge, massively fragmented S-1-5-19 folder. It took about 20 hours or so to delete and empty the recycle bin.I did a OneCare tune-up this morning, and it completed in an hour or so (a normal time).Thanks again. I will be more vigilant in the future.Bill
June 10th, 2009 5:31pm


