{"id":47665,"date":"2023-05-21T17:34:05","date_gmt":"2023-05-21T12:04:05","guid":{"rendered":"http:\/\/198.58.113.91\/blog\/?p=47665"},"modified":"2023-05-21T18:06:18","modified_gmt":"2023-05-21T12:36:18","slug":"system32-huge-disk-space-junk-exe-files","status":"publish","type":"post","link":"https:\/\/www.winhelponline.com\/blog\/system32-huge-disk-space-junk-exe-files\/","title":{"rendered":"System32 Folder Occupies 300 GB; Filled with Gibberish EXE Files"},"content":{"rendered":"

Of late, many users are complaining that the System32 folder is consuming colossal disk space (e.g., 150 GB – 300 GB) all of a sudden. On a user’s computer, more than 200,000 .exe files were generated. Those files were almost generated every minute, consuming over 200 GB on the C drive.<\/p>\n

\"system32<\/p>\n

Here’s a screenshot from another computer showing more than 150,000 files in System32, which is very unusual. And the total size of the files was 148 GB.\"system32<\/p>\n

Cause<\/h2>\n

The MSI NBFoundation Service executable causes the above issue. The MSI software executable OmApSvcBroker.exe was compromised recently. The offending file path is below:<\/p>\n

C:\\Program Files (x86)\\MSI\\MSI NBFoundation Service\\OmApSvcBroker.exe<\/pre>\n
It creates those 1074 KB gibberish executable files in the System32 folder or the OS partition’s root directory.<\/p>\n
The incident happened only on May 18th, 2023. However, some users noted that the above executable stopped generating the junk .exe files with random characters in the file name.<\/p>\n
The 1074 KB junk executables can be deleted. They’re created by an MSI executable (OmApSvcBroker.exe) which was compromised recently. For more information, check out the following links:<\/p>\n