0

Since I managed to remove a driver installed from Internet which turned out to be a virus, there's a new volume inside my Windows 11 file explorer which is called "RAMDrive (Z:)".

However, this volume appears neither within diskmgmt.msc nor in diskpart after I type lis vol.

It is filled with .tmp files which constantly change, so it really seems to be a volume containing my random access memory data. Is that even possible?

Furthermore, since then my PC has started running much slower and the RAM is often full. On the other hand, the volume takes up only 737MB of space and no more than 40MB are usually used, whereas I have 16GB of RAM.

I don't know whether this volume is taking uo space from my RAM or just displaying it and I could find no information on Google.

So, how can I safely remove it?

Thanks in advance, Simone.

RAMDrive

Pellegatta Simone
  • 31

1 Answers1

1

I managed to find a solution!

After finding out that the volume did not appear in safe mode, I enabled the boot log from msconfig and scrolled through it, until I found a process called HPRAMDiskCPL.exe in system32 which was a bit sus. I deleted that file and after rebooting the RAMDrive finally disappeared (I think I did not completely remove the program but it does not really matter).

Then, following this guide under the section Disabling HP RAM Disk Manager, I completely deleted the registry key HKLM\System\CurrentControlSet\Services\Ramdrive and I also deleted the ramdrive.sys driver under C:\Windows\System32\drivers.

Finally, since many programs did not work anymore after removing the RAMDrive, I had to update my environment variables and set both TMP and TEMP back to "%USERPROFILE%\AppData\Local\Temp" (local variables) and "C:\Windows\Temp" (system variables).

Everything seems to work fine now.

Pellegatta Simone
  • 31