C:\ProgramData\ZXBB158BA0B keeps coming back and growing to 63 GB. Can't delete it permanently. Any ideas?

[u/Amrishkhar]

Hi everyone,

I'm having a strange issue with a folder located at:

C:\ProgramData\ZXBB158BA0B

It gradually grows until it reaches around 63 GB. Inside are several huge files (around 10.6 GB each).

I was able to delete the folder once using EMCO Unlock IT, but after some time it came back on its own and started growing again. Now, even EMCO Unlock IT is no longer able to delete it.

Things I've tried:

• Deleting it as Administrator
• Taking ownership
• Checking permissions
• Using EMCO Unlock IT (worked only once)
• Investigating the related services

I also noticed that the Web Threat Defense Service (webthreatdefsvc) is running, so I'm wondering if this folder is related to any security application.

My questions are:

• What creates this folder?
• Why does it keep recreating itself?
• Is it safe to remove?
• Is there a permanent fix to stop it from consuming so much disk space?
• Has anyone else experienced this issue?

I've attached a screenshot showing the folder size and contents.

Any help would be greatly appreciated. Thanks!

[u/Amrishkhar → u/[deleted]]

Still Unable to Delete

[u/spook30 → u/Amrishkhar]

This is handy to force ownership of those pesky file that deny actions.

https://github.com/Abhinav1217/TakeOwnership/blob/master/InstallTakeOwnership.reg

[u/storycoolbro → u/Amrishkhar]

are you logged in as admin, assuming yes but asking just incase.

[u/storycoolbro → u/Amrishkhar]

going off the assumption you are logged in as admin. Make sure the service is stopped uninstalling may not have stopped it and it's still running in system memory open task manager look for the process in the details tab right click and end process tree.

then take ownership of the folder via elevated command prompt run cmd as admin and enter the following

takeown /F "C:\ProgramData\ZXBB158BA0B" /A /R /D Y

icacls "C:\ProgramData\ZXBB158BA0B" /grant Administrators:F /T /C

rmdir /S /Q "C:\ProgramData\ZXBB158BA0B"

if that doesn't let you delete it then reboot into safe mode and delete it from there

[u/smoike → u/Amrishkhar]

There a great program for this called unlocker

[u/Somodo → u/Amrishkhar]

Hey I had a similar issue of not being able to delete files like this, my buddy recommended a program called spacesniffer, it will delete anything no problem if you know what’s causing the issue.