>>>BCWipeTM has filled up my hard drive. Apparently the files are in ~BCwipe.del\C$windows$temp$.... but I can’t find them on the drive.
~BCWipe.del directory is related to Transparent Wiping functionality. Transparent Wiping background process is active if the task "Transparent Wiping" was created by the computer administrator.
If the task exists in BCWipe Task Manager (open it 'as administrator' to see the task), but was created by mistake and you actually do not want to use Transparent Wiping - just delete the task and the folder "C:\~BCWipe.del".
Otherwise, let's try to understand why the function does not work properly.
When Transparent Wiping is active, the special driver intercepts all 'Delete' operations in the system and moves the deleted files to the BCWipe temporary folder (~BCWipe.del).
BCWipe detects the existence of files in this folder and permanently erases them.
The size of temporary folder may start to grow in two cases:
1. If BCWipe wiping process was terminated for some reason (for example, BCWipe Service was stopped), while the driver still moves the deleted files.
To check if the wiping process is running or not, open the log file. If it includes only the strings 'File queued for wiping' from 'Driver', this is the case.
To re-initialize the wiping process, please do as follows:
1) Open Windows Services (win+R, type 'services.msc').
2) Open Windows Task Manager and find two 'BCWipeTM.exe' processes:
3) Stop BCWipe Service. Both processes should disappear. If one of them remains - kill it. Then start BCWipe service again. Both processes should re-appear and BCWipe will start to wipe the files.
Check the log file - strings about file wiping should start to appear.
2. The second case. A process (usually antivirus or other monitoring software) deletes so many files that BCWipe is not able to wipe these files in the real time.
BCWipe automatically detects such cases (huge ~BCWipe.del folder) and reports the following message:
If log file was assigned, click 'Change Settings' button on this message. The program will scan your log file and show the statistics: how many files were deleted by each process. You can sort the list by 'Quantity'.
The following picture indicates that the most active process in deleting files is "avgchsvx.exe". You can move the process to Excluded list right now:
If log file was not assigned, configure Transparent Wiping task to create the log file and work for some time to accumulate the log file contents.
Then open the task's Properties window, switch to 'Manual configuration' and click 'Auto configure' button.
You will see the same window as shown above - configure Transparent Wiping to exclude some active processes.