If you can login to the system, start with the obvious, e.g. looking for normal files in /dev, etc.
Simple example:
cd /dev
du -s * |sort -n
look for large umbers, as a typical eeror is someone trying to do something to /dev/null and they get ot wrong (/dev/nul), or /dev/rmt/om instead of /dev/rmt/0m.
If you cannot login, I am afraid you will be forced to crash the system with an RS or a power off, then interrut th ereboot, bring it into single user mode, and start to investigate from there.
HTH
My house is the bank's, my money the wife's, But my opinions belong to me, not HP!