Everything Not Seeing Newly Created File - Size

Post by **therube** » Wed Mar 22, 2017 12:28 pm

Everything Not Seeing Newly Created File - Size - suddenly-ish.

Suddenly, or so it seems.
I'd been using 817 for a long time now.
I had a LOT (oh lets say, perhaps, 18 or so) Everything windows open.
Doing whatever I do, & all is normal.

Suddenly, or so it seems, I transcode a (video) file, & as the transcode progresses, I might see that Everything sees the file as expected. Likewise it usually picks up some nominal file size for that file - until the transcode operation has completed, at which time it should show its completed size.

Then, suddenly, its not doing that anymore, instead its showing NO size (not 0, but no size).

And I'm thinking, well I've just got too many things going on, too many things open, I haven't rebooted the computer in ages (perhaps 67 days), & the computer has gotten "gummed up".

So I close down this, I close down that... I don't really want to close down everything, I don't really want to reboot... I do an index Force Rebuild... I test, but still see the same issue.

Close down more & more & more... same.

I download 856.

Same.

I reboot.

Same.

I'm at a loss?

Code: Select all

Everything
Version 1.4.1.856b (x86)
Windows NT 6.1
Processors 4
IsAdmin 0
AppData 0
Service 1
cmdline "C:\DEV\Locate\Everything.exe"
WM_ACTIVATE 00000000 00000000, lastfocus 00010312, current focus 00010312
WM_ACTIVATE 00000001 00000000, lastfocus 00010312, current focus 00000000
search 't' filter '' sort 0

...

update m 2 7026192
update index H:
USN RENAME_OLD_NAME test.mp4
USN RENAME_NEW_NAME testing123.mp4
USN RENAME_NEW_NAME CLOSE testing123.mp4
updated H: in 0.003111 seconds
resume ntfs monitor 2
processed usn records in 0.000301 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000122 seconds
new results
WM_ACTIVATE 00000001 00000000, lastfocus 00010312, current focus 00000000
ParseDisplayName H:\III\testing123.mp4
parse display name H:\III\testing123.mp4
parse display name OK
bind to parent
get menu 1 1
got menu 96671400
got menu 1
menu type 3
QueryContextMenu...
QueryContextMenu 00000065
track menu 009a0329
WM_INITMENUPOP 009a0329 00000000
menu count 28
wid 7: 96 (0000005f)
00000000
VERB open
wid 7: 97 (00000060)
00000000
VERB MediaInfo
wid 8: 98 (00000061)
00000000
VERB HashMyFiles
wid 9: 100 (00000063)
00000000
VERB sandbox
wid 10: 101 (00000064)
00000000
VERB Universal Viewer
wid 12: 95 (0000005e)
00000000
VERB PickLinkSource
menu item info fail 87
wid 15: 28 (0000001b)
00000000
VERB PreviousVersions
wid 16: 32765 (00007ffc)
80070057
menu item info fail 87
wid 18: 32764 (00007ffb)
80070057
wid 19: 25 (00000018)
00000000
VERB cut
wid 20: 26 (00000019)
00000000
VERB copy
menu item info fail 87
wid 22: 17 (00000010)
00000000
VERB link
wid 23: 18 (00000011)
00000000
VERB delete
wid 24: 19 (00000012)
00000000
VERB rename
wid 25: 32766 (00007ffd)
80070057
wid 26: 20 (00000013)
00000000
VERB properties
rem dbl sep
WM_SELECT 80808004 009a0329 009a0329
WM_SELECT 80808003 009a0329 009a0329
WM_SELECT 80808002 009a0329 009a0329
WM_SELECT 80808001 009a0329 009a0329
WM_SELECT 88030000 009a0329 009a0329
WM_SELECT 80808000 009a0329 009a0329
WM_SELECT 88030000 009a0329 009a0329
WM_SELECT 80800061 009a0329 009a0329
wmenuhelp 00000000
...
WM_SELECT ffff0000 00000000 009a0329
idCommand 49
using shell implementation
invoke hres 00000000
WM_ACTIVATE 00000000 00000000, lastfocus 00010314, current focus 00010314
update m 0 7025824
update index C:
USN DATA_TRUNCATION CONVERT_AUDIO.TXT
USN DATA_EXTEND DATA_TRUNCATION CONVERT_AUDIO.TXT
USN DATA_EXTEND DATA_TRUNCATION CLOSE CONVERT_AUDIO.TXT
updated C: in 0.002790 seconds
resume ntfs monitor 0
processed usn records in 0.000895 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000178 seconds
update m 0 7025824
update index C:
USN DATA_EXTEND CONVERT_AUDIO.TXT
USN DATA_EXTEND CLOSE CONVERT_AUDIO.TXT
USN DATA_EXTEND CONVERT_AUDIO.TXT
USN DATA_EXTEND CLOSE CONVERT_AUDIO.TXT
USN DATA_EXTEND CONVERT_AUDIO.TXT
USN DATA_EXTEND CLOSE CONVERT_AUDIO.TXT
USN DATA_EXTEND CONVERT_AUDIO.TXT
USN DATA_EXTEND CLOSE CONVERT_AUDIO.TXT
USN DATA_EXTEND CONVERT_AUDIO.TXT
USN DATA_EXTEND CLOSE CONVERT_AUDIO.TXT
USN DATA_EXTEND CONVERT_AUDIO.TXT
USN DATA_EXTEND CLOSE CONVERT_AUDIO.TXT
USN DATA_EXTEND CONVERT_AUDIO.TXT
USN DATA_EXTEND CLOSE CONVERT_AUDIO.TXT
USN DATA_EXTEND CONVERT_AUDIO.TXT
USN DATA_EXTEND CLOSE CONVERT_AUDIO.TXT
update m 1 7026008
USN DATA_OVERWRITE ShowTx.ini
USN DATA_OVERWRITE CLOSE ShowTx.ini
updated C: in 0.015738 seconds
resume ntfs monitor 0
processed usn records in 0.000214 seconds
update index E:
DB_WAIT: _db_ready_proc waiting...
USN DATA_TRUNCATION SF.EXE-9A233697.pf
USN DATA_EXTEND DATA_TRUNCATION SF.EXE-9A233697.pf
USN DATA_EXTEND DATA_TRUNCATION CLOSE SF.EXE-9A233697.pf
DB_WAIT: _db_ready_proc waited 0.000351 seconds
updated E: in 0.002381 seconds
resume ntfs monitor 1
processed usn records in 0.000043 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000162 seconds
update m 0 7025824
update m 1 7026008
update index C:
USN DATA_EXTEND CONVERT_AUDIO.TXT
USN CREATE testing123_Ato48.mp4.mp4
USN CREATE DATA_EXTEND testing123_Ato48.mp4.mp4
updated C: in 0.000990 seconds
resume ntfs monitor 0
processed usn records in 0.000139 seconds
update index E:
DB_WAIT: _db_ready_proc waiting...
USN DATA_TRUNCATION CMD.EXE-F0053CFF.pf
USN DATA_EXTEND DATA_TRUNCATION CMD.EXE-F0053CFF.pf
USN DATA_EXTEND DATA_TRUNCATION CLOSE CMD.EXE-F0053CFF.pf
DB_WAIT: _db_ready_proc waited 0.000138 seconds
updated E: in 0.001082 seconds
resume ntfs monitor 1
processed usn records in 0.000089 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000070 seconds
new results
update m 1 7026008
update index E:
USN DATA_TRUNCATION FFMPEG.EXE-ABB38696.pf
USN DATA_EXTEND DATA_TRUNCATION FFMPEG.EXE-ABB38696.pf
USN DATA_EXTEND DATA_TRUNCATION CLOSE FFMPEG.EXE-ABB38696.pf
updated E: in 0.001650 seconds
resume ntfs monitor 1
processed usn records in 0.000117 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000071 seconds
update m 1 7026008
update index E:
USN DATA_TRUNCATION TEE.EXE-327104E0.pf
USN DATA_EXTEND DATA_TRUNCATION TEE.EXE-327104E0.pf
USN DATA_EXTEND DATA_TRUNCATION CLOSE TEE.EXE-327104E0.pf
updated E: in 0.001402 seconds
resume ntfs monitor 1
processed usn records in 0.000101 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000141 seconds
update m 0 7025824
update index C:
USN CREATE DATA_EXTEND DATA_OVERWRITE testing123_Ato48.mp4.mp4
updated C: in 0.025108 seconds
resume ntfs monitor 0
processed usn records in 0.000100 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000075 seconds
new results
update m 1 7026008
update index E:
USN DATA_TRUNCATION TOUCH.EXE-CADDC5D1.pf
USN DATA_EXTEND DATA_TRUNCATION TOUCH.EXE-CADDC5D1.pf
USN DATA_EXTEND DATA_TRUNCATION CLOSE TOUCH.EXE-CADDC5D1.pf
updated E: in 0.001165 seconds
resume ntfs monitor 1
processed usn records in 0.000113 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000075 seconds
update m 0 7025824
update index C:
USN CREATE DATA_EXTEND DATA_OVERWRITE CLOSE testing123_Ato48.mp4.mp4
USN DATA_EXTEND CLOSE CONVERT_AUDIO.TXT
USN BASIC_INFO_CHANGE testing123_Ato48.mp4.mp4
USN BASIC_INFO_CHANGE CLOSE testing123_Ato48.mp4.mp4
updated C: in 0.003709 seconds
resume ntfs monitor 0
processed usn records in 0.000166 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000172 seconds
new results
WM_ACTIVATE 00000001 00000000, lastfocus 00010314, current focus 00000000
WM_ACTIVATE 00000000 00000000, lastfocus 00010314, current focus 00010314

...

rename:
C:\out\testing123_Ato48.mp4.mp4
to:
C:\out\testing123_Ato48.mp4
update m 0 7025824
update index C:
USN RENAME_OLD_NAME testing123_Ato48.mp4.mp4
USN RENAME_NEW_NAME testing123_Ato48.mp4
USN RENAME_NEW_NAME CLOSE testing123_Ato48.mp4
updated C: in 0.027011 seconds
resume ntfs monitor 0
processed usn records in 0.001118 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000284 seconds
new results
WM_ACTIVATE 00000000 00000000, lastfocus 00010314, current focus 00010314
WM_ACTIVATE 00000001 00000000, lastfocus 00010314, current focus 00000000
search 'testing123 .mp' filter '' sort 0
term 089a31c8, flags: 1140, next: 08b030b0, notnext: 00000000
folderop: 2, fileop: 2, term: testing123
term 08b030b0, flags: 1140, next: 00000000, notnext: 00000000
folderop: 2, fileop: 2, term: .mp
SET SORT 0
found 0 folders, size 0, db search time taken: 0.009619 seconds
found 2 files, size 65540, db search time taken: 0.042861 seconds
total size 1000927396, calculated in 0.000000 seconds
set sort 0 1
already sorted
finished sort, time taken 0.000580 seconds
update selection 0.000001 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000127 seconds
new results
search 'testing123 .mp4' filter '' sort 0
term 089a31f8, flags: 1140, next: 089a3258, notnext: 00000000
folderop: 2, fileop: 2, term: testing123
term 089a3258, flags: 1140, next: 00000000, notnext: 00000000
folderop: 2, fileop: 2, term: .mp4
SET SORT 0
no search history hwn
found 0 folders, size 0, db search time taken: 0.010910 seconds
found 2 files, size 65540, db search time taken: 0.035629 seconds
total size 1000927396, calculated in 0.000001 seconds
set sort 0 1
already sorted
finished sort, time taken 0.000419 seconds
update selection 0.000000 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000114 seconds
new results
WM_ACTIVATE 00000000 00000000, lastfocus 00010312, current focus 00010312

Post by **therube** » Wed Mar 22, 2017 12:31 pm

After I renamed the file, the size showed up, though there were also times where a rename was not enough to cause the size to display:

Not really thing of much of anything that has changed on my end?

Transcode.bat:

Code: Select all

@ECHO OFF

ECHO  TRANSCODE   AUDIO [from either a Video or Audio file]

SET   ffmpeg="C:\DEV\CODECS\ffmpeg.exe"

PAUSE


ECHO.
SET   OUT=C:\OUT
ECHO  OUT=: %OUT%
SET   OFILE=%OUT%\%~n1_Ato48%~x1
SET   OFILE=%OFILE%.mp4
ECHO  Output filename:
ECHO  "%OFILE%"
SET   LOG=%OUT%\CONVERT_AUDIO.TXT
ECHO.

PAUSE


SET VIDEO=%1

ECHO  %VIDEO%  > %LOG%
ECHO.         >> %LOG%

ECHO  ffmpeg     >> %LOG%
ECHO  -i %VIDEO% >> %LOG%
ECHO  -vcodec copy  -c:a aac  -b:a 48k	"%OFILE%"	>> %LOG%
ECHO  "%OFILE%"  >> %LOG%
ECHO.            >> %LOG%
ECHO  ========================================================================================= >> %LOG%
ECHO.            >> %LOG%
SF    %LOG%

PAUSE



%ffmpeg% -i %VIDEO%  -vcodec copy  -c:a aac  -b:a 64k   -af dynaudnorm   "%OFILE%"  2>&1  |  tee -a %LOG%

touch "%OFILE%" --reference=%1
PAUSE

EXIT

Post by **therube** » Wed Mar 22, 2017 4:57 pm

Maybe I'll fire up a new, clean instance & see what that shows... (as in perhaps some odd .ini setting that has crept in)?

Post by **therube** » Thu Mar 23, 2017 1:34 am

702. Why, because it was there. 1.4.0.702b.

Do as I've done, everything (not Everything) finishes, Everything (yes Everything, this time) shows the newly created file, correctly, as expected.

Everything -uninstall-service.
Gone.
No "everything" in Process Hacker.

Post by **therube** » Thu Mar 23, 2017 1:38 am

857.

everything -install-service
everything.exe

Do the same operation as just above, using the same files...
It completes successfully - and shows the file size as expected (go figure!).

I'll plug along some more...

2 for 2.

(Might I have had a rouge "everything" hung in memory??? I sure hope not! Or maybe I hope that I did, as that would explain much... And pretty sure it wouldn't have been the first time for something like that to have happened. Did I actually check to see ... ?)

3rd times the charmer.
Size: <a big 'ol blank>
(& that's even after renaming the file in my file manager, removing the "double-extension", .mp4.mp4 -> .mp4).

Let me Quit 857 [gone] & fire up 702 (which might not be particularly meaningful at this point, but I'll plug away with 702 running)...

Post by **therube** » Thu Mar 23, 2017 2:53 am

A bunch of runs with 702, all successful.

Went back to 857, too many times size did not show up.

I'm glad its not me (this time)

.

Post by **void** » Thu Mar 23, 2017 7:53 am

Thanks for the debug log.

There doesn't appear to be any errors reported, which is odd.

I've enabled debug logging for gathering file info for NTFS files in Everything 858b.

Is the issue reproducible with this version?

I suspect the file entry was deleted or there was an issue with reading the attribute list, the new version will report the issue to the debug console.
Looks like Everything will have to revert back to the 702 file info gatherer.

Post by **therube** » Thu Mar 23, 2017 1:10 pm

858b.

Ran through a set of 15 files, all completed correctly.
Everything showed all file information (including sizes) as expected.

(I'll test further...)

Post by **therube** » Thu Mar 23, 2017 11:02 pm

858b.

(I'll test further...)

At least two times now, the same has occurred, no size displays

.

Post by **void** » Fri Mar 24, 2017 1:21 am

Could you please send me a copy of your debug console after you have noticed a file with no size.

There should be additional debug information displayed after DATA_EXTEND <filename>

Such as:
bad attribute len x
attribute list x
len x
mapping pair cluster offset: x, cluster count: y
bad al len x
_NTFS_ATTRIBUTE_TYPE_DATA in x
read size size x
read size x
bad file pos x
get fd: not inuse
get fd: not a file record
retry with base x for y
couldnt get fd from x y
FSCTL_GET_NTFS_FILE_RECORD failed x
got ntfs file record x y z
bad BytesPerFileRecordSegment x
FSCTL_GET_NTFS_VOLUME_DATA failed x

Post by **therube** » Fri Mar 24, 2017 11:37 am

This does not show it.

What happened here is...
Transcode
Everything shows correctly
(at that point, turned off Console)

Then, I renamed the file,
WO74_Ato48.mp4.mp4 --> newlongername_Ato48.mp4

And it was with that that the size disappeared.
I have not see that before at all.

Then I renamed the file back to WO74.mp4.
But at that point, Console does not show anything meaningful - except that it shows the size to be 686644392 for only 1 file, it does not include the size (614,550,157 as it happens to be) of the other.

Code: Select all

Everything
Version 1.4.1.858b (x86)
Windows NT 6.1
Processors 4
IsAdmin 0
AppData 0
Service 1
cmdline everything
WM_ACTIVATE 00000000 00000000, lastfocus 003105d4, current focus 003105d4
WM_ACTIVATE 00000001 00000000, lastfocus 003105d4, current focus 00000000
search 'WO74 .mp4' filter 'ext:3g2;3gp;3gp2;3gpp;amr;amv;asf;avi;bdmv;bik;d2v;di
vx;drc;dsa;dsm;dss;dsv;evo;f4v;flc;fli;flic;flv;hdmov;ifo;ivf;m1v;m2p;m2t;m2ts;m
2v;m4b;m4p;m4v;mkv;mp2v;mp4;mp4v;mpe;mpeg;mpg;mpls;mpv2;mpv4;mov;mts;ogm;ogv;pss
;pva;qt;ram;ratdvd;rm;rmm;rmvb;roq;rpm;smil;smk;swf;tp;tpr;ts;vob;vp6;webm;wm;wm
p;wmv;h264;ra;srt;dtapart;part' sort 0
term 0895b6b8, flags: 1140, next: 0895b658, notnext: 00000000
folderop: 2, fileop: 2, term: WO74
term 0895b658, flags: 1140, next: 06b43eb0, notnext: 00000000
folderop: 2, fileop: 2, term: .mp4
term 06b43eb0, flags: 3140, next: 00000000, notnext: 00000000
folderop: 1, fileop: 162, term: ext:3g2;3gp;3gp2;3gpp;amr;amv;asf;avi;bdmv;bik;d
2v;divx;drc;dsa;dsm;dss;dsv;evo;f4v;flc;fli;flic;flv;hdmov;ifo;ivf;m1v;m2p;m2t;m
2ts;m2v;m4b;m4p;m4v;mkv;mp2v;mp4;mp4v;mpe;mpeg;mpg;mpls;mpv2;mpv4;mov;mts;ogm;og
v;pss;pva;qt;ram;ratdvd;rm;rmm;rmvb;roq;rpm;smil;smk;swf;tp;tpr;ts;vob;vp6;webm;
wm;wmp;wmv;h264;ra;srt;dtapart;part
SET SORT 0
found 0 folders, size 0, db search time taken: 0.012220 seconds
found 2 files, size 65540, db search time taken: 0.043055 seconds
total size 686644392, calculated in 0.000000 seconds
set sort 0 1
already sorted
finished sort, time taken 0.000229 seconds
update selection 0.000000 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000100 seconds
new results
WM_ACTIVATE 00000000 00000000, lastfocus 003105d4, current focus 003105d4

And I've duplicated that again, but with different steps - again involving a rename, again Console, not showing anything of note, except for size discrepancy.

Transcode was fine, both files show with sizes.

After that I renamed the file, first only appending to the name, so my search term in Everything persisted & just showed the newly appended filename.
Then I renamed the file again, prefixing the name with an, é,.
That too was fine.

Then... <what did I do?> I renamed the file something totally different.
(Existing) Everything search term no longer matched, so I pasted in the new name, & it was this new name that then showed NO SIZE. (I think that's how it went.)

Post by **therube** » Fri Mar 24, 2017 12:12 pm

As good as it gets...

TBG99.mp4
Transcode
-> TBG99_Ato48.mp4.mp4
Prefix é
-> éTBG99_Ato48.mp4.mp4
Added some sets of parens to the name, (J) (999)
-> é (J) TBG99 (999)_Ato48.mp4.mp4
{somewhere along the line, I removed the double extension, .mp4.mp4 -> .mp4, log should show, or well I guess I didn't do that, I simply separated the "double extension" in the newly named filename}
[all is good up to that point]
Added, Everything Not Seeing Newly Created File - Size
-> é (J) TBG99 (999)_Ato48.mp4 Everything Not Seeing Newly Created File - Size.mp4

Now... NO SIZE shows.

Code: Select all

Everything
Version 1.4.1.858b (x86)
Windows NT 6.1
Processors 4
IsAdmin 0
AppData 0
Service 1
cmdline everything
WM_ACTIVATE 00000000 00000000, lastfocus 003105d4, current focus 003105d4
WM_ACTIVATE 00000001 00000000, lastfocus 003105d4, current focus 00000000
ParseDisplayName H:\III\ZZZ\TBG99.mp4
parse display name H:\III\ZZZ\TBG99.mp4
parse display name OK
bind to parent
get menu 1 1
got menu 129091408
got menu 1
menu type 3
QueryContextMenu...
QueryContextMenu 00000065
track menu 01d80acb
WM_INITMENUPOP 01d80acb 00000000
menu count 28
wid 7: 96 (0000005f)
00000000
VERB open
wid 7: 97 (00000060)
00000000
VERB MediaInfo
wid 8: 98 (00000061)
00000000
VERB HashMyFiles
wid 9: 100 (00000063)
00000000
VERB sandbox
wid 10: 101 (00000064)
00000000
VERB Universal Viewer
wid 12: 95 (0000005e)
00000000
VERB PickLinkSource
menu item info fail 87
wid 15: 28 (0000001b)
00000000
VERB PreviousVersions
wid 16: 32765 (00007ffc)
80070057
menu item info fail 87
wid 18: 32764 (00007ffb)
80070057
wid 19: 25 (00000018)
00000000
VERB cut
wid 20: 26 (00000019)
00000000
VERB copy
menu item info fail 87
wid 22: 17 (00000010)
00000000
VERB link
wid 23: 18 (00000011)
00000000
VERB delete
wid 24: 19 (00000012)
00000000
VERB rename
wid 25: 32766 (00007ffd)
80070057
wid 26: 20 (00000013)
00000000
VERB properties
rem dbl sep
WM_SELECT 80808004 01d80acb 01d80acb
WM_SELECT 80808003 01d80acb 01d80acb
WM_SELECT 80808002 01d80acb 01d80acb
WM_SELECT 80808001 01d80acb 01d80acb
WM_SELECT 80808000 01d80acb 01d80acb
WM_SELECT 88030000 01d80acb 01d80acb
WM_SELECT 80800061 01d80acb 01d80acb
wmenuhelp 00000000
set help MediaInfo
WM_SELECT 80800062 01d80acb 01d80acb
wmenuhelp 00000000
set help HashMyFiles
WM_SELECT 80800064 01d80acb 01d80acb
wmenuhelp 00000000
set help Run Sandboxed
WM_SELECT 80800065 01d80acb 01d80acb
wmenuhelp 00000000
set help Universal Viewer
WM_SELECT 88030000 01d80acb 01d80acb
WM_SELECT 8080005f 01d80acb 01d80acb
wmenuhelp 00000000
set help Picks a file or directory.
WM_SELECT 88030000 01d80acb 01d80acb
WM_SELECT 8090000e 01d80acb 01d80acb
wmenuhelp 00000000
set help Opens the document with a particular program.
WM_SELECT 8080001c 01d80acb 01d80acb
wmenuhelp 00000000
set help View or restore previous versions of this item
WM_SELECT 88037ffd 01d80acb 01d80acb
wmenuhelp 80070057
amenuhelp 80070057
WM_SELECT 80900011 01d80acb 01d80acb
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT 88037ffc 01d80acb 01d80acb
wmenuhelp 80070057
amenuhelp 80070057
WM_SELECT 80800019 01d80acb 01d80acb
wmenuhelp 00000000
set help Removes the selected items and copies them onto the Clipboard.
WM_SELECT 88037ffc 01d80acb 01d80acb
wmenuhelp 80070057
amenuhelp 80070057
WM_SELECT 80900011 01d80acb 01d80acb
wmenuhelp 80004001
amenuhelp 80004001
WM_INITMENUPOP 004d0b6d 00000011
WM_SELECT 88037ffc 01d80acb 01d80acb
wmenuhelp 80070057
amenuhelp 80070057
WM_SELECT 80800019 01d80acb 01d80acb
wmenuhelp 00000000
set help Removes the selected items and copies them onto the Clipboard.
WM_SELECT 8080001a 01d80acb 01d80acb
wmenuhelp 00000000
set help Copies the selected items to the Clipboard. To put them in the new loca
tion, use the Paste command.
WM_SELECT 80900011 01d80acb 01d80acb
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT 8080001f 004d0b6d 01d80acb
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT 80800020 004d0b6d 01d80acb
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT 80800021 004d0b6d 01d80acb
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT 80800022 004d0b6d 01d80acb
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT 80800023 004d0b6d 01d80acb
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT 80800024 004d0b6d 01d80acb
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT 80800025 004d0b6d 01d80acb
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT 80800026 004d0b6d 01d80acb
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT 80800027 004d0b6d 01d80acb
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT 80800028 004d0b6d 01d80acb
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT 80800029 004d0b6d 01d80acb
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT 8080002a 004d0b6d 01d80acb
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT 8080002b 004d0b6d 01d80acb
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT 8080002c 004d0b6d 01d80acb
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT 8080002d 004d0b6d 01d80acb
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT 8080002e 004d0b6d 01d80acb
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT 8080002f 004d0b6d 01d80acb
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT 80800030 004d0b6d 01d80acb
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT 80800031 004d0b6d 01d80acb
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT ffff0000 00000000 01d80acb
idCommand 49
using shell implementation
invoke hres 00000000
WM_ACTIVATE 00000000 00000000, lastfocus 000d06c8, current focus 000d06c8
update m 1 140454520
update index E:
USN DATA_TRUNCATION CONHOST.EXE-E6AFC9F5.pf
USN DATA_EXTEND DATA_TRUNCATION CONHOST.EXE-E6AFC9F5.pf
USN DATA_EXTEND DATA_TRUNCATION CLOSE CONHOST.EXE-E6AFC9F5.pf
updated E: in 0.002509 seconds
resume ntfs monitor 1
processed usn records in 0.000055 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000158 seconds
update m 0 140454336
update index C:
USN DATA_TRUNCATION CONVERT_AUDIO.TXT
USN DATA_EXTEND DATA_TRUNCATION CONVERT_AUDIO.TXT
USN DATA_EXTEND DATA_TRUNCATION CLOSE CONVERT_AUDIO.TXT
updated C: in 0.003161 seconds
resume ntfs monitor 0
processed usn records in 0.000431 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000230 seconds
update m 1 140454520
update index E:
USN DATA_TRUNCATION SF.EXE-9A233697.pf
USN DATA_EXTEND DATA_TRUNCATION SF.EXE-9A233697.pf
USN DATA_EXTEND DATA_TRUNCATION CLOSE SF.EXE-9A233697.pf
updated E: in 0.001894 seconds
resume ntfs monitor 1
processed usn records in 0.000040 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000208 seconds
update m 0 140454336
update index C:
USN DATA_EXTEND CONVERT_AUDIO.TXT
USN DATA_EXTEND CLOSE CONVERT_AUDIO.TXT
USN DATA_EXTEND CONVERT_AUDIO.TXT
USN DATA_EXTEND CLOSE CONVERT_AUDIO.TXT
USN DATA_EXTEND CONVERT_AUDIO.TXT
USN DATA_EXTEND CLOSE CONVERT_AUDIO.TXT
USN DATA_EXTEND CONVERT_AUDIO.TXT
USN DATA_EXTEND CLOSE CONVERT_AUDIO.TXT
USN DATA_EXTEND CONVERT_AUDIO.TXT
USN DATA_EXTEND CLOSE CONVERT_AUDIO.TXT
USN DATA_EXTEND CONVERT_AUDIO.TXT
USN DATA_EXTEND CLOSE CONVERT_AUDIO.TXT
USN DATA_EXTEND CONVERT_AUDIO.TXT
USN DATA_EXTEND CLOSE CONVERT_AUDIO.TXT
USN DATA_EXTEND CONVERT_AUDIO.TXT
USN DATA_EXTEND CLOSE CONVERT_AUDIO.TXT
USN DATA_OVERWRITE ShowTx.ini
USN DATA_OVERWRITE CLOSE ShowTx.ini
updated C: in 0.011224 seconds
resume ntfs monitor 0
processed usn records in 0.000204 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000184 seconds
update m 0 140454336
update index C:
USN DATA_EXTEND CONVERT_AUDIO.TXT
USN CREATE TBG99_Ato48.mp4.mp4
USN CREATE DATA_EXTEND TBG99_Ato48.mp4.mp4
updated C: in 0.001050 seconds
resume ntfs monitor 0
processed usn records in 0.000136 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000077 seconds
new results
update m 1 140454520
update index E:
USN DATA_TRUNCATION CMD.EXE-F0053CFF.pf
USN DATA_EXTEND DATA_TRUNCATION CMD.EXE-F0053CFF.pf
USN DATA_EXTEND DATA_TRUNCATION CLOSE CMD.EXE-F0053CFF.pf
updated E: in 0.001834 seconds
resume ntfs monitor 1
processed usn records in 0.000089 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000246 seconds
update m 1 140454520
update index E:
USN DATA_TRUNCATION CONHOST.EXE-E6AFC9F5.pf
USN DATA_EXTEND DATA_TRUNCATION CONHOST.EXE-E6AFC9F5.pf
USN DATA_EXTEND DATA_TRUNCATION CLOSE CONHOST.EXE-E6AFC9F5.pf
updated E: in 0.001194 seconds
resume ntfs monitor 1
processed usn records in 0.000119 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000087 seconds
update m 1 140454520
update index E:
USN DATA_TRUNCATION FFMPEG.EXE-ABB38696.pf
USN DATA_EXTEND DATA_TRUNCATION FFMPEG.EXE-ABB38696.pf
USN DATA_EXTEND DATA_TRUNCATION CLOSE FFMPEG.EXE-ABB38696.pf
updated E: in 0.001139 seconds
resume ntfs monitor 1
processed usn records in 0.000093 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000082 seconds
update m 1 140454520
update index E:
USN DATA_TRUNCATION TEE.EXE-327104E0.pf
USN DATA_EXTEND DATA_TRUNCATION TEE.EXE-327104E0.pf
USN DATA_EXTEND DATA_TRUNCATION CLOSE TEE.EXE-327104E0.pf
updated E: in 0.001157 seconds
resume ntfs monitor 1
processed usn records in 0.000032 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000073 seconds
update m 0 140454336
update index C:
USN CREATE sessionstore-1.json
USN CREATE CLOSE sessionstore-1.json
USN DATA_TRUNCATION sessionstore-1.json
USN DATA_EXTEND DATA_TRUNCATION sessionstore-1.json
updated C: in 0.001136 seconds
resume ntfs monitor 0
processed usn records in 0.000599 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000121 seconds
update m 0 140454336
update index C:
USN DATA_EXTEND DATA_TRUNCATION CLOSE sessionstore-1.json
USN DELETE CLOSE sessionstore.json
USN RENAME_OLD_NAME sessionstore-1.json
USN RENAME_NEW_NAME sessionstore.json
USN RENAME_NEW_NAME CLOSE sessionstore.json
updated C: in 0.001468 seconds
resume ntfs monitor 0
processed usn records in 0.000267 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000057 seconds
update m 1 140454520
update index E:
USN CREATE J5S9BX2PA1TW0LYCVKN6.temp
USN CREATE DATA_EXTEND J5S9BX2PA1TW0LYCVKN6.temp
USN CREATE DATA_EXTEND CLOSE J5S9BX2PA1TW0LYCVKN6.temp
USN BASIC_INFO_CHANGE J5S9BX2PA1TW0LYCVKN6.temp
USN BASIC_INFO_CHANGE SECURITY_CHANGE J5S9BX2PA1TW0LYCVKN6.temp
USN CREATE c00ab7717503333e.customDestinations-ms~RF779d465.TMP
USN CREATE CLOSE c00ab7717503333e.customDestinations-ms~RF779d465.TMP
USN DELETE CLOSE c00ab7717503333e.customDestinations-ms~RF779d465.TMP
USN RENAME_OLD_NAME c00ab7717503333e.customDestinations-ms
USN RENAME_NEW_NAME c00ab7717503333e.customDestinations-ms~RF779d465.TMP
USN RENAME_OLD_NAME BASIC_INFO_CHANGE SECURITY_CHANGE J5S9BX2PA1TW0LYCVKN6.temp
USN RENAME_NEW_NAME BASIC_INFO_CHANGE SECURITY_CHANGE c00ab7717503333e.customDes
tinations-ms
USN RENAME_NEW_NAME CLOSE c00ab7717503333e.customDestinations-ms~RF779d465.TMP
USN RENAME_NEW_NAME BASIC_INFO_CHANGE SECURITY_CHANGE CLOSE c00ab7717503333e.cus
tomDestinations-ms
USN DELETE CLOSE c00ab7717503333e.customDestinations-ms~RF779d465.TMP
updated E: in 0.005022 seconds
resume ntfs monitor 1
processed usn records in 0.000634 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000054 seconds
update m 1 140454520
update index E:
USN CREATE 2BDKFD4QQT5FERINY0H2.temp
USN CREATE DATA_EXTEND 2BDKFD4QQT5FERINY0H2.temp
USN CREATE DATA_EXTEND CLOSE 2BDKFD4QQT5FERINY0H2.temp
USN BASIC_INFO_CHANGE 2BDKFD4QQT5FERINY0H2.temp
USN BASIC_INFO_CHANGE SECURITY_CHANGE 2BDKFD4QQT5FERINY0H2.temp
USN CREATE c00ab7717503333e.customDestinations-ms~RF779e382.TMP
USN CREATE CLOSE c00ab7717503333e.customDestinations-ms~RF779e382.TMP
USN DELETE CLOSE c00ab7717503333e.customDestinations-ms~RF779e382.TMP
USN RENAME_OLD_NAME c00ab7717503333e.customDestinations-ms
USN RENAME_NEW_NAME c00ab7717503333e.customDestinations-ms~RF779e382.TMP
USN RENAME_OLD_NAME BASIC_INFO_CHANGE SECURITY_CHANGE 2BDKFD4QQT5FERINY0H2.temp
USN RENAME_NEW_NAME BASIC_INFO_CHANGE SECURITY_CHANGE c00ab7717503333e.customDes
tinations-ms
USN RENAME_NEW_NAME CLOSE c00ab7717503333e.customDestinations-ms~RF779e382.TMP
USN RENAME_NEW_NAME BASIC_INFO_CHANGE SECURITY_CHANGE CLOSE c00ab7717503333e.cus
tomDestinations-ms
USN DELETE CLOSE c00ab7717503333e.customDestinations-ms~RF779e382.TMP
updated E: in 0.004887 seconds
resume ntfs monitor 1
processed usn records in 0.000495 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000057 seconds
update m 0 140454336
update index C:
USN CREATE sessionstore-1.json
USN CREATE CLOSE sessionstore-1.json
USN DATA_TRUNCATION sessionstore-1.json
USN DATA_EXTEND DATA_TRUNCATION sessionstore-1.json
updated C: in 0.001599 seconds
resume ntfs monitor 0
processed usn records in 0.000134 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000053 seconds
update m 0 140454336
update index C:
USN DATA_EXTEND DATA_TRUNCATION CLOSE sessionstore-1.json
USN DELETE CLOSE sessionstore.json
USN RENAME_OLD_NAME sessionstore-1.json
USN RENAME_NEW_NAME sessionstore.json
USN RENAME_NEW_NAME CLOSE sessionstore.json
updated C: in 0.001761 seconds
resume ntfs monitor 0
processed usn records in 0.000254 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000063 seconds
update m 0 140454336
update index C:
USN CREATE DATA_EXTEND DATA_OVERWRITE TBG99_Ato48.mp4.mp4
updated C: in 0.000793 seconds
resume ntfs monitor 0
processed usn records in 0.000100 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000053 seconds
new results
update m 1 140454520
update index E:
USN DATA_TRUNCATION TOUCH.EXE-CADDC5D1.pf
USN DATA_EXTEND DATA_TRUNCATION TOUCH.EXE-CADDC5D1.pf
USN DATA_EXTEND DATA_TRUNCATION CLOSE TOUCH.EXE-CADDC5D1.pf
updated E: in 0.001024 seconds
resume ntfs monitor 1
processed usn records in 0.000098 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000054 seconds
update m 0 140454336
update index C:
USN CREATE DATA_EXTEND DATA_OVERWRITE CLOSE TBG99_Ato48.mp4.mp4
USN DATA_EXTEND CLOSE CONVERT_AUDIO.TXT
USN BASIC_INFO_CHANGE TBG99_Ato48.mp4.mp4
USN BASIC_INFO_CHANGE CLOSE TBG99_Ato48.mp4.mp4
updated C: in 0.003435 seconds
resume ntfs monitor 0
processed usn records in 0.000241 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000112 seconds
new results
update m 0 140454336
update index C:
USN CREATE sessionstore-1.json
USN CREATE CLOSE sessionstore-1.json
USN DATA_TRUNCATION sessionstore-1.json
USN DATA_EXTEND DATA_TRUNCATION sessionstore-1.json
updated C: in 0.001353 seconds
resume ntfs monitor 0
processed usn records in 0.000116 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000052 seconds
update m 1 140454520
update index E:
USN DATA_OVERWRITE RacWmiEventData.dat
USN DATA_EXTEND DATA_OVERWRITE RacWmiEventData.dat
updated E: in 0.000914 seconds
resume ntfs monitor 1
processed usn records in 0.000032 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000054 seconds
update m 0 140454336
update index C:
USN DATA_EXTEND DATA_TRUNCATION CLOSE sessionstore-1.json
USN DELETE CLOSE sessionstore.json
USN RENAME_OLD_NAME sessionstore-1.json
USN RENAME_NEW_NAME sessionstore.json
USN RENAME_NEW_NAME CLOSE sessionstore.json
updated C: in 0.003593 seconds
resume ntfs monitor 0
processed usn records in 0.000386 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000112 seconds
update m 1 140454520
update index E:
USN DATA_OVERWRITE RacWmiDataBookmarks.dat
USN DATA_OVERWRITE CLOSE RacWmiDataBookmarks.dat
USN DATA_OVERWRITE RacWmiDataBookmarks.dat
USN DATA_OVERWRITE CLOSE RacWmiDataBookmarks.dat
USN DATA_EXTEND DATA_OVERWRITE CLOSE RacWmiEventData.dat
USN DATA_OVERWRITE RacWmiDatabase.sdf
USN DATA_OVERWRITE CLOSE RacWmiDatabase.sdf
USN DATA_EXTEND DATA_OVERWRITE SECURITY_CHANGE CLOSE sql53A3.tmp
USN DELETE CLOSE sql53A3.tmp
USN DATA_OVERWRITE RacDatabase.sdf
USN DATA_OVERWRITE CLOSE RacDatabase.sdf
USN DATA_EXTEND DATA_OVERWRITE SECURITY_CHANGE CLOSE sql5373.tmp
USN DELETE CLOSE sql5373.tmp
USN DATA_OVERWRITE CLOSE RacMetaData.dat
updated E: in 0.009577 seconds
resume ntfs monitor 1
processed usn records in 0.000603 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000110 seconds
update m 0 140454336
update index C:
USN RENAME_OLD_NAME safebrowsing
USN RENAME_NEW_NAME safebrowsing-backup
USN RENAME_NEW_NAME CLOSE safebrowsing-backup
USN CREATE safebrowsing
USN CREATE CLOSE safebrowsing
updated C: in 0.003191 seconds
resume ntfs monitor 0
rename safebrowsing to safebrowsing-backup
parent backup count 0
renamed 0 subfolders and 45 files from safebrowsing in 0.018624 seconds
processed usn records in 0.020158 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000158 seconds
update m 0 140454336
update index C:
USN CREATE goog-badbinurl-shavar.cache
USN CREATE DATA_EXTEND goog-badbinurl-shavar.cache
USN CREATE DATA_EXTEND DATA_OVERWRITE goog-badbinurl-shavar.cache
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE goog-badbinurl-shavar.ca
che
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE goog-badbinurl-sha
var.cache
USN CREATE goog-badbinurl-shavar.pset
USN CREATE DATA_EXTEND goog-badbinurl-shavar.pset
USN CREATE DATA_EXTEND DATA_OVERWRITE goog-badbinurl-shavar.pset
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE goog-badbinurl-shavar.ps
et
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE goog-badbinurl-sha
var.pset
USN CREATE goog-badbinurl-shavar.sbstore
USN CREATE DATA_EXTEND goog-badbinurl-shavar.sbstore
USN CREATE DATA_EXTEND DATA_OVERWRITE goog-badbinurl-shavar.sbstore
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE goog-badbinurl-shavar.sb
store
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE goog-badbinurl-sha
var.sbstore
USN CREATE goog-downloadwhite-digest256.cache
USN CREATE DATA_EXTEND goog-downloadwhite-digest256.cache
USN CREATE DATA_EXTEND DATA_OVERWRITE goog-downloadwhite-digest256.cache
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE goog-downloadwhite-diges
t256.cache
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE goog-downloadwhite
-digest256.cache
USN CREATE goog-downloadwhite-digest256.pset
USN CREATE DATA_EXTEND goog-downloadwhite-digest256.pset
USN CREATE DATA_EXTEND DATA_OVERWRITE goog-downloadwhite-digest256.pset
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE goog-downloadwhite-diges
t256.pset
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE goog-downloadwhite
-digest256.pset
USN CREATE goog-downloadwhite-digest256.sbstore
USN CREATE DATA_EXTEND goog-downloadwhite-digest256.sbstore
USN CREATE DATA_EXTEND DATA_OVERWRITE goog-downloadwhite-digest256.sbstore
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE goog-downloadwhite-diges
t256.sbstore
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE goog-downloadwhite
-digest256.sbstore
USN CREATE goog-malware-shavar.cache
USN CREATE DATA_EXTEND goog-malware-shavar.cache
USN CREATE DATA_EXTEND DATA_OVERWRITE goog-malware-shavar.cache
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE goog-malware-shavar.cach
e
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE goog-malware-shava
r.cache
USN CREATE goog-malware-shavar.pset
USN CREATE DATA_EXTEND goog-malware-shavar.pset
USN CREATE DATA_EXTEND DATA_OVERWRITE goog-malware-shavar.pset
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE goog-malware-shavar.pset

USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE goog-malware-shava
r.pset
USN CREATE goog-malware-shavar.sbstore
USN CREATE DATA_EXTEND goog-malware-shavar.sbstore
USN CREATE DATA_EXTEND DATA_OVERWRITE goog-malware-shavar.sbstore
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE goog-malware-shavar.sbst
ore
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE goog-malware-shava
r.sbstore
USN CREATE goog-phish-shavar.cache
USN CREATE DATA_EXTEND goog-phish-shavar.cache
USN CREATE DATA_EXTEND DATA_OVERWRITE goog-phish-shavar.cache
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE goog-phish-shavar.cache
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE goog-phish-shavar.
cache
USN CREATE goog-phish-shavar.pset
USN CREATE DATA_EXTEND goog-phish-shavar.pset
USN CREATE DATA_EXTEND DATA_OVERWRITE goog-phish-shavar.pset
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE goog-phish-shavar.pset
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE goog-phish-shavar.
pset
USN CREATE goog-phish-shavar.sbstore
USN CREATE DATA_EXTEND goog-phish-shavar.sbstore
USN CREATE DATA_EXTEND DATA_OVERWRITE goog-phish-shavar.sbstore
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE goog-phish-shavar.sbstor
e
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE goog-phish-shavar.
sbstore
USN CREATE goog-unwanted-shavar.cache
USN CREATE DATA_EXTEND goog-unwanted-shavar.cache
USN CREATE DATA_EXTEND DATA_OVERWRITE goog-unwanted-shavar.cache
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE goog-unwanted-shavar.cac
he
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE goog-unwanted-shav
ar.cache
USN CREATE goog-unwanted-shavar.pset
USN CREATE DATA_EXTEND goog-unwanted-shavar.pset
USN CREATE DATA_EXTEND DATA_OVERWRITE goog-unwanted-shavar.pset
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE goog-unwanted-shavar.pse
t
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE goog-unwanted-shav
ar.pset
USN CREATE goog-unwanted-shavar.sbstore
USN CREATE DATA_EXTEND goog-unwanted-shavar.sbstore
USN CREATE DATA_EXTEND DATA_OVERWRITE goog-unwanted-shavar.sbstore
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE goog-unwanted-shavar.sbs
tore
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE goog-unwanted-shav
ar.sbstore
USN CREATE mozplugin-block-digest256.cache
USN CREATE DATA_EXTEND mozplugin-block-digest256.cache
USN CREATE DATA_EXTEND DATA_OVERWRITE mozplugin-block-digest256.cache
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE mozplugin-block-digest25
6.cache
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE mozplugin-block-di
gest256.cache
USN CREATE mozplugin-block-digest256.pset
USN CREATE DATA_EXTEND mozplugin-block-digest256.pset
USN CREATE DATA_EXTEND DATA_OVERWRITE mozplugin-block-digest256.pset
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE mozplugin-block-digest25
6.pset
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE mozplugin-block-di
gest256.pset
USN CREATE mozplugin-block-digest256.sbstore
USN CREATE DATA_EXTEND mozplugin-block-digest256.sbstore
USN CREATE DATA_EXTEND DATA_OVERWRITE mozplugin-block-digest256.sbstore
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE mozplugin-block-digest25
6.sbstore
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE mozplugin-block-di
gest256.sbstore
USN CREATE mozstd-track-digest256.cache
USN CREATE DATA_EXTEND mozstd-track-digest256.cache
USN CREATE DATA_EXTEND DATA_OVERWRITE mozstd-track-digest256.cache
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE mozstd-track-digest256.c
ache
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE mozstd-track-diges
t256.cache
USN CREATE mozstd-track-digest256.pset
USN CREATE DATA_EXTEND mozstd-track-digest256.pset
USN CREATE DATA_EXTEND DATA_OVERWRITE mozstd-track-digest256.pset
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE mozstd-track-digest256.p
set
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE mozstd-track-diges
t256.pset
USN CREATE mozstd-track-digest256.sbstore
USN CREATE DATA_EXTEND mozstd-track-digest256.sbstore
USN CREATE DATA_EXTEND DATA_OVERWRITE mozstd-track-digest256.sbstore
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE mozstd-track-digest256.s
bstore
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE mozstd-track-diges
t256.sbstore
USN CREATE mozstd-trackwhite-digest256.cache
USN CREATE DATA_EXTEND mozstd-trackwhite-digest256.cache
USN CREATE DATA_EXTEND DATA_OVERWRITE mozstd-trackwhite-digest256.cache
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE mozstd-trackwhite-digest
256.cache
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE mozstd-trackwhite-
digest256.cache
USN CREATE mozstd-trackwhite-digest256.pset
USN CREATE DATA_EXTEND mozstd-trackwhite-digest256.pset
USN CREATE DATA_EXTEND DATA_OVERWRITE mozstd-trackwhite-digest256.pset
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE mozstd-trackwhite-digest
256.pset
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE mozstd-trackwhite-
digest256.pset
USN CREATE mozstd-trackwhite-digest256.sbstore
USN CREATE DATA_EXTEND mozstd-trackwhite-digest256.sbstore
USN CREATE DATA_EXTEND DATA_OVERWRITE mozstd-trackwhite-digest256.sbstore
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE mozstd-trackwhite-digest
256.sbstore
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE mozstd-trackwhite-
digest256.sbstore
USN CREATE test-block-simple.cache
USN CREATE DATA_EXTEND test-block-simple.cache
USN CREATE DATA_EXTEND DATA_OVERWRITE test-block-simple.cache
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE test-block-simple.cache
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE test-block-simple.
cache
USN CREATE test-block-simple.pset
USN CREATE DATA_EXTEND test-block-simple.pset
USN CREATE DATA_EXTEND DATA_OVERWRITE test-block-simple.pset
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE test-block-simple.pset
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE test-block-simple.
pset
USN CREATE test-block-simple.sbstore
USN CREATE DATA_EXTEND test-block-simple.sbstore
USN CREATE DATA_EXTEND DATA_OVERWRITE test-block-simple.sbstore
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE test-block-simple.sbstor
e
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE test-block-simple.
sbstore
USN CREATE test-forbid-simple.cache
USN CREATE DATA_EXTEND test-forbid-simple.cache
USN CREATE DATA_EXTEND DATA_OVERWRITE test-forbid-simple.cache
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE test-forbid-simple.cache

USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE test-forbid-simple
.cache
USN CREATE test-forbid-simple.pset
USN CREATE DATA_EXTEND test-forbid-simple.pset
USN CREATE DATA_EXTEND DATA_OVERWRITE test-forbid-simple.pset
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE test-forbid-simple.pset
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE test-forbid-simple
.pset
USN CREATE test-forbid-simple.sbstore
USN CREATE DATA_EXTEND test-forbid-simple.sbstore
USN CREATE DATA_EXTEND DATA_OVERWRITE test-forbid-simple.sbstore
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE test-forbid-simple.sbsto
re
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE test-forbid-simple
.sbstore
USN CREATE test-malware-simple.cache
USN CREATE DATA_EXTEND test-malware-simple.cache
USN CREATE DATA_EXTEND DATA_OVERWRITE test-malware-simple.cache
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE test-malware-simple.cach
e
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE test-malware-simpl
e.cache
USN CREATE test-malware-simple.pset
USN CREATE DATA_EXTEND test-malware-simple.pset
USN CREATE DATA_EXTEND DATA_OVERWRITE test-malware-simple.pset
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE test-malware-simple.pset

USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE test-malware-simpl
e.pset
USN CREATE test-malware-simple.sbstore
USN CREATE DATA_EXTEND test-malware-simple.sbstore
USN CREATE DATA_EXTEND DATA_OVERWRITE test-malware-simple.sbstore
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE test-malware-simple.sbst
ore
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE test-malware-simpl
e.sbstore
USN CREATE test-phish-simple.cache
USN CREATE DATA_EXTEND test-phish-simple.cache
USN CREATE DATA_EXTEND DATA_OVERWRITE test-phish-simple.cache
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE test-phish-simple.cache
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE test-phish-simple.
cache
USN CREATE test-phish-simple.pset
USN CREATE DATA_EXTEND test-phish-simple.pset
USN CREATE DATA_EXTEND DATA_OVERWRITE test-phish-simple.pset
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE test-phish-simple.pset
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE test-phish-simple.
pset
USN CREATE test-phish-simple.sbstore
USN CREATE DATA_EXTEND test-phish-simple.sbstore
USN CREATE DATA_EXTEND DATA_OVERWRITE test-phish-simple.sbstore
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE test-phish-simple.sbstor
e
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE test-phish-simple.
sbstore
USN CREATE test-track-simple.cache
USN CREATE DATA_EXTEND test-track-simple.cache
USN CREATE DATA_EXTEND DATA_OVERWRITE test-track-simple.cache
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE test-track-simple.cache
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE test-track-simple.
cache
USN CREATE test-track-simple.pset
USN CREATE DATA_EXTEND test-track-simple.pset
USN CREATE DATA_EXTEND DATA_OVERWRITE test-track-simple.pset
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE test-track-simple.pset
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE test-track-simple.
pset
USN CREATE test-track-simple.sbstore
USN CREATE DATA_EXTEND test-track-simple.sbstore
USN CREATE DATA_EXTEND DATA_OVERWRITE test-track-simple.sbstore
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE test-track-simple.sbstor
e
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE test-track-simple.
sbstore
USN CREATE test-trackwhite-simple.cache
USN CREATE DATA_EXTEND test-trackwhite-simple.cache
USN CREATE DATA_EXTEND DATA_OVERWRITE test-trackwhite-simple.cache
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE test-trackwhite-simple.c
ache
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE test-trackwhite-si
mple.cache
USN CREATE test-trackwhite-simple.pset
USN CREATE DATA_EXTEND test-trackwhite-simple.pset
USN CREATE DATA_EXTEND DATA_OVERWRITE test-trackwhite-simple.pset
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE test-trackwhite-simple.p
set
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE test-trackwhite-si
mple.pset
USN CREATE test-trackwhite-simple.sbstore
USN CREATE DATA_EXTEND test-trackwhite-simple.sbstore
USN CREATE DATA_EXTEND DATA_OVERWRITE test-trackwhite-simple.sbstore
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE test-trackwhite-simple.s
bstore
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE test-trackwhite-si
mple.sbstore
USN CREATE test-unwanted-simple.cache
USN CREATE DATA_EXTEND test-unwanted-simple.cache
USN CREATE DATA_EXTEND DATA_OVERWRITE test-unwanted-simple.cache
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE test-unwanted-simple.cac
he
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE test-unwanted-simp
le.cache
USN CREATE test-unwanted-simple.pset
USN CREATE DATA_EXTEND test-unwanted-simple.pset
USN CREATE DATA_EXTEND DATA_OVERWRITE test-unwanted-simple.pset
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE test-unwanted-simple.pse
t
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE test-unwanted-simp
le.pset
USN CREATE test-unwanted-simple.sbstore
USN CREATE DATA_EXTEND test-unwanted-simple.sbstore
USN CREATE DATA_EXTEND DATA_OVERWRITE test-unwanted-simple.sbstore
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE test-unwanted-simple.sbs
tore
USN CREATE BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CLOSE test-unwanted-simp
le.sbstore
USN CREATE goog-badbinurl-shavar-1.sbstore
USN CREATE CLOSE goog-badbinurl-shavar-1.sbstore
USN DATA_TRUNCATION goog-badbinurl-shavar-1.sbstore
USN DATA_EXTEND DATA_TRUNCATION goog-badbinurl-shavar-1.sbstore
USN DATA_EXTEND DATA_TRUNCATION CLOSE goog-badbinurl-shavar-1.sbstore
USN DELETE CLOSE goog-badbinurl-shavar.sbstore
USN RENAME_OLD_NAME goog-badbinurl-shavar-1.sbstore
USN RENAME_NEW_NAME goog-badbinurl-shavar.sbstore
USN RENAME_NEW_NAME CLOSE goog-badbinurl-shavar.sbstore
USN CREATE goog-badbinurl-shavar-1.cache
USN CREATE CLOSE goog-badbinurl-shavar-1.cache
USN DATA_TRUNCATION goog-badbinurl-shavar-1.cache
USN DATA_EXTEND DATA_TRUNCATION goog-badbinurl-shavar-1.cache
USN DATA_EXTEND DATA_TRUNCATION CLOSE goog-badbinurl-shavar-1.cache
USN DELETE CLOSE goog-badbinurl-shavar.cache
USN RENAME_OLD_NAME goog-badbinurl-shavar-1.cache
USN RENAME_NEW_NAME goog-badbinurl-shavar.cache
USN RENAME_NEW_NAME CLOSE goog-badbinurl-shavar.cache
USN DATA_TRUNCATION goog-badbinurl-shavar.pset
USN DATA_EXTEND DATA_TRUNCATION goog-badbinurl-shavar.pset
USN DATA_EXTEND DATA_OVERWRITE DATA_TRUNCATION goog-badbinurl-shavar.pset
USN DATA_EXTEND DATA_OVERWRITE DATA_TRUNCATION CLOSE goog-badbinurl-shavar.pset
USN CREATE goog-malware-shavar-1.sbstore
USN CREATE CLOSE goog-malware-shavar-1.sbstore
USN DATA_TRUNCATION goog-malware-shavar-1.sbstore
USN DATA_EXTEND DATA_TRUNCATION goog-malware-shavar-1.sbstore
USN DATA_EXTEND DATA_TRUNCATION CLOSE goog-malware-shavar-1.sbstore
USN DELETE CLOSE goog-malware-shavar.sbstore
USN RENAME_OLD_NAME goog-malware-shavar-1.sbstore
USN RENAME_NEW_NAME goog-malware-shavar.sbstore
USN RENAME_NEW_NAME CLOSE goog-malware-shavar.sbstore
USN CREATE goog-malware-shavar-1.cache
USN CREATE CLOSE goog-malware-shavar-1.cache
USN DATA_TRUNCATION goog-malware-shavar-1.cache
USN DATA_EXTEND DATA_TRUNCATION goog-malware-shavar-1.cache
USN DATA_EXTEND DATA_TRUNCATION CLOSE goog-malware-shavar-1.cache
USN DELETE CLOSE goog-malware-shavar.cache
USN RENAME_OLD_NAME goog-malware-shavar-1.cache
USN RENAME_NEW_NAME goog-malware-shavar.cache
USN RENAME_NEW_NAME CLOSE goog-malware-shavar.cache
USN DATA_TRUNCATION goog-malware-shavar.pset
USN DATA_EXTEND DATA_TRUNCATION goog-malware-shavar.pset
USN DATA_EXTEND DATA_OVERWRITE DATA_TRUNCATION goog-malware-shavar.pset
USN DATA_EXTEND DATA_OVERWRITE DATA_TRUNCATION CLOSE goog-malware-shavar.pset
USN CREATE goog-phish-shavar-1.sbstore
USN CREATE CLOSE goog-phish-shavar-1.sbstore
USN DATA_TRUNCATION goog-phish-shavar-1.sbstore
USN DATA_EXTEND DATA_TRUNCATION goog-phish-shavar-1.sbstore
updated C: in 0.087111 seconds
resume ntfs monitor 0
processed usn records in 0.003968 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000060 seconds
update m 0 140454336
update index C:
USN DATA_EXTEND DATA_TRUNCATION CLOSE goog-phish-shavar-1.sbstore
USN DELETE CLOSE goog-phish-shavar.sbstore
USN RENAME_OLD_NAME goog-phish-shavar-1.sbstore
USN RENAME_NEW_NAME goog-phish-shavar.sbstore
USN RENAME_NEW_NAME CLOSE goog-phish-shavar.sbstore
USN CREATE goog-phish-shavar-1.cache
USN CREATE CLOSE goog-phish-shavar-1.cache
USN DATA_TRUNCATION goog-phish-shavar-1.cache
USN DATA_EXTEND DATA_TRUNCATION goog-phish-shavar-1.cache
USN DATA_EXTEND DATA_TRUNCATION CLOSE goog-phish-shavar-1.cache
USN DELETE CLOSE goog-phish-shavar.cache
USN RENAME_OLD_NAME goog-phish-shavar-1.cache
USN RENAME_NEW_NAME goog-phish-shavar.cache
USN RENAME_NEW_NAME CLOSE goog-phish-shavar.cache
USN DATA_TRUNCATION goog-phish-shavar.pset
USN DATA_EXTEND DATA_TRUNCATION goog-phish-shavar.pset
USN DATA_EXTEND DATA_OVERWRITE DATA_TRUNCATION goog-phish-shavar.pset
USN DATA_EXTEND DATA_OVERWRITE DATA_TRUNCATION CLOSE goog-phish-shavar.pset
USN CREATE goog-unwanted-shavar-1.sbstore
USN CREATE CLOSE goog-unwanted-shavar-1.sbstore
USN DATA_TRUNCATION goog-unwanted-shavar-1.sbstore
USN DATA_EXTEND DATA_TRUNCATION goog-unwanted-shavar-1.sbstore
USN DATA_EXTEND DATA_TRUNCATION CLOSE goog-unwanted-shavar-1.sbstore
USN DELETE CLOSE goog-unwanted-shavar.sbstore
USN RENAME_OLD_NAME goog-unwanted-shavar-1.sbstore
USN RENAME_NEW_NAME goog-unwanted-shavar.sbstore
USN RENAME_NEW_NAME CLOSE goog-unwanted-shavar.sbstore
USN CREATE goog-unwanted-shavar-1.cache
USN CREATE CLOSE goog-unwanted-shavar-1.cache
USN DATA_TRUNCATION goog-unwanted-shavar-1.cache
USN DATA_EXTEND DATA_TRUNCATION goog-unwanted-shavar-1.cache
USN DATA_EXTEND DATA_TRUNCATION CLOSE goog-unwanted-shavar-1.cache
USN DELETE CLOSE goog-unwanted-shavar.cache
USN RENAME_OLD_NAME goog-unwanted-shavar-1.cache
USN RENAME_NEW_NAME goog-unwanted-shavar.cache
USN RENAME_NEW_NAME CLOSE goog-unwanted-shavar.cache
USN DATA_TRUNCATION goog-unwanted-shavar.pset
USN DATA_EXTEND DATA_TRUNCATION goog-unwanted-shavar.pset
USN DATA_EXTEND DATA_OVERWRITE DATA_TRUNCATION goog-unwanted-shavar.pset
USN DATA_EXTEND DATA_OVERWRITE DATA_TRUNCATION CLOSE goog-unwanted-shavar.pset
USN RENAME_OLD_NAME safebrowsing-backup
USN RENAME_NEW_NAME safebrowsing-to_delete
USN RENAME_NEW_NAME CLOSE safebrowsing-to_delete
USN DELETE CLOSE goog-badbinurl-shavar.cache
USN DELETE CLOSE goog-badbinurl-shavar.pset
USN DELETE CLOSE goog-badbinurl-shavar.sbstore
USN DELETE CLOSE goog-downloadwhite-digest256.cache
USN DELETE CLOSE goog-downloadwhite-digest256.pset
USN DELETE CLOSE goog-downloadwhite-digest256.sbstore
USN DELETE CLOSE goog-malware-shavar.cache
USN DELETE CLOSE goog-malware-shavar.pset
USN DELETE CLOSE goog-malware-shavar.sbstore
USN DELETE CLOSE goog-phish-shavar.cache
USN DELETE CLOSE goog-phish-shavar.pset
USN DELETE CLOSE goog-phish-shavar.sbstore
USN DELETE CLOSE goog-unwanted-shavar.cache
USN DELETE CLOSE goog-unwanted-shavar.pset
USN DELETE CLOSE goog-unwanted-shavar.sbstore
USN DELETE CLOSE mozplugin-block-digest256.cache
USN DELETE CLOSE mozplugin-block-digest256.pset
USN DELETE CLOSE mozplugin-block-digest256.sbstore
USN DELETE CLOSE mozstd-track-digest256.cache
USN DELETE CLOSE mozstd-track-digest256.pset
USN DELETE CLOSE mozstd-track-digest256.sbstore
USN DELETE CLOSE mozstd-trackwhite-digest256.cache
USN DELETE CLOSE mozstd-trackwhite-digest256.pset
USN DELETE CLOSE mozstd-trackwhite-digest256.sbstore
USN DELETE CLOSE test-block-simple.cache
USN DELETE CLOSE test-block-simple.pset
USN DELETE CLOSE test-block-simple.sbstore
USN DELETE CLOSE test-forbid-simple.cache
USN DELETE CLOSE test-forbid-simple.pset
USN DELETE CLOSE test-forbid-simple.sbstore
USN DELETE CLOSE test-malware-simple.cache
USN DELETE CLOSE test-malware-simple.pset
USN DELETE CLOSE test-malware-simple.sbstore
USN DELETE CLOSE test-phish-simple.cache
USN DELETE CLOSE test-phish-simple.pset
USN DELETE CLOSE test-phish-simple.sbstore
USN DELETE CLOSE test-track-simple.cache
USN DELETE CLOSE test-track-simple.pset
USN DELETE CLOSE test-track-simple.sbstore
USN DELETE CLOSE test-trackwhite-simple.cache
USN DELETE CLOSE test-trackwhite-simple.pset
USN DELETE CLOSE test-trackwhite-simple.sbstore
USN DELETE CLOSE test-unwanted-simple.cache
USN DELETE CLOSE test-unwanted-simple.pset
USN DELETE CLOSE test-unwanted-simple.sbstore
USN DELETE CLOSE safebrowsing-to_delete
updated C: in 0.050062 seconds
resume ntfs monitor 0
rename safebrowsing-backup to safebrowsing-to_delete
parent backup count 0
renamed 0 subfolders and 45 files from safebrowsing-backup in 0.015367 seconds
remove subfolders and files from safebrowsing-to_delete
parent backup count 0
removed 0 subfolders and 0 files from safebrowsing-to_delete in 0.009193 seconds

processed usn records in 0.031398 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000282 seconds
WM_ACTIVATE 00000001 00000000, lastfocus 000d06c8, current focus 00000000
SYSCOMMAND 0000f095 0056038a
WM_SELECT ffff0000 00000000 00000000
WM_ACTIVATE 00000000 00000000, lastfocus 000d06c8, current focus 000d06c8
update m 0 140454336
update index C:
USN RENAME_OLD_NAME TBG99_Ato48.mp4.mp4
USN RENAME_NEW_NAME éTBG99_Ato48.mp4.mp4
USN RENAME_NEW_NAME CLOSE éTBG99_Ato48.mp4.mp4
updated C: in 0.003572 seconds
resume ntfs monitor 0
processed usn records in 0.000403 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000212 seconds
new results
WM_ACTIVATE 00000001 00000000, lastfocus 000d06c8, current focus 00000000
WM_ACTIVATE 00000000 00000000, lastfocus 000d06c8, current focus 000d06c8
update m 0 140454336
update index C:
USN RENAME_OLD_NAME éTBG99_Ato48.mp4.mp4
USN RENAME_NEW_NAME é(J) TBG99_Ato48.mp4.mp4
USN RENAME_NEW_NAME CLOSE é(J) TBG99_Ato48.mp4.mp4
updated C: in 0.004082 seconds
resume ntfs monitor 0
processed usn records in 0.000765 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000123 seconds
new results
WM_ACTIVATE 00000001 00000000, lastfocus 000d06c8, current focus 00000000
WM_ACTIVATE 00000000 00000000, lastfocus 000d06c8, current focus 000d06c8
WM_ACTIVATE 00000001 00000000, lastfocus 000d06c8, current focus 00000000
update m 1 140454520
update index E:
USN CREATE QTEJRYCN9B529FEXW3F7.temp
USN CREATE DATA_EXTEND QTEJRYCN9B529FEXW3F7.temp
USN CREATE DATA_EXTEND CLOSE QTEJRYCN9B529FEXW3F7.temp
USN BASIC_INFO_CHANGE QTEJRYCN9B529FEXW3F7.temp
USN BASIC_INFO_CHANGE SECURITY_CHANGE QTEJRYCN9B529FEXW3F7.temp
USN CREATE c00ab7717503333e.customDestinations-ms~RF77ba931.TMP
USN CREATE CLOSE c00ab7717503333e.customDestinations-ms~RF77ba931.TMP
USN DELETE CLOSE c00ab7717503333e.customDestinations-ms~RF77ba931.TMP
USN RENAME_OLD_NAME c00ab7717503333e.customDestinations-ms
USN RENAME_NEW_NAME c00ab7717503333e.customDestinations-ms~RF77ba931.TMP
USN RENAME_OLD_NAME BASIC_INFO_CHANGE SECURITY_CHANGE QTEJRYCN9B529FEXW3F7.temp
USN RENAME_NEW_NAME BASIC_INFO_CHANGE SECURITY_CHANGE c00ab7717503333e.customDes
tinations-ms
USN RENAME_NEW_NAME CLOSE c00ab7717503333e.customDestinations-ms~RF77ba931.TMP
USN RENAME_NEW_NAME BASIC_INFO_CHANGE SECURITY_CHANGE CLOSE c00ab7717503333e.cus
tomDestinations-ms
USN DELETE CLOSE c00ab7717503333e.customDestinations-ms~RF77ba931.TMP
updated E: in 0.010345 seconds
resume ntfs monitor 1
processed usn records in 0.001662 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000113 seconds
WM_ACTIVATE 00000000 00000000, lastfocus 000d06c8, current focus 000d06c8
update m 1 140454520
update index E:
USN CREATE W7ENNTU6CQ62TFHHDB78.temp
USN CREATE DATA_EXTEND W7ENNTU6CQ62TFHHDB78.temp
USN CREATE DATA_EXTEND CLOSE W7ENNTU6CQ62TFHHDB78.temp
USN BASIC_INFO_CHANGE W7ENNTU6CQ62TFHHDB78.temp
USN BASIC_INFO_CHANGE SECURITY_CHANGE W7ENNTU6CQ62TFHHDB78.temp
USN CREATE c00ab7717503333e.customDestinations-ms~RF77bb85d.TMP
USN CREATE CLOSE c00ab7717503333e.customDestinations-ms~RF77bb85d.TMP
USN DELETE CLOSE c00ab7717503333e.customDestinations-ms~RF77bb85d.TMP
USN RENAME_OLD_NAME c00ab7717503333e.customDestinations-ms
USN RENAME_NEW_NAME c00ab7717503333e.customDestinations-ms~RF77bb85d.TMP
USN RENAME_OLD_NAME BASIC_INFO_CHANGE SECURITY_CHANGE W7ENNTU6CQ62TFHHDB78.temp
USN RENAME_NEW_NAME BASIC_INFO_CHANGE SECURITY_CHANGE c00ab7717503333e.customDes
tinations-ms
USN RENAME_NEW_NAME CLOSE c00ab7717503333e.customDestinations-ms~RF77bb85d.TMP
USN RENAME_NEW_NAME BASIC_INFO_CHANGE SECURITY_CHANGE CLOSE c00ab7717503333e.cus
tomDestinations-ms
USN DELETE CLOSE c00ab7717503333e.customDestinations-ms~RF77bb85d.TMP
updated E: in 0.011952 seconds
resume ntfs monitor 1
processed usn records in 0.001261 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000129 seconds
update m 0 140454336
update index C:
USN RENAME_OLD_NAME é(J) TBG99_Ato48.mp4.mp4
USN RENAME_NEW_NAME é (J) TBG99 (999)_Ato48.mp4.mp4
USN RENAME_NEW_NAME CLOSE é (J) TBG99 (999)_Ato48.mp4.mp4
updated C: in 0.003599 seconds
resume ntfs monitor 0
processed usn records in 0.000288 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000189 seconds
new results
WM_ACTIVATE 00000001 00000000, lastfocus 000d06c8, current focus 00000000
WM_ACTIVATE 00000000 00000000, lastfocus 000d06c8, current focus 000d06c8
update m 0 140454336
update index C:
USN RENAME_OLD_NAME é (J) TBG99 (999)_Ato48.mp4.mp4
USN RENAME_NEW_NAME é (J) TBG99 (999)_Ato48.mp4   Everything Not Seeing Newly Cr
eated File - Size.mp4
USN RENAME_NEW_NAME CLOSE é (J) TBG99 (999)_Ato48.mp4   Everything Not Seeing Ne
wly Created File - Size.mp4
updated C: in 0.015282 seconds
resume ntfs monitor 0
processed usn records in 0.000278 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000116 seconds
new results
WM_ACTIVATE 00000001 00000000, lastfocus 000d06c8, current focus 00000000
WM_ACTIVATE 00000000 00000000, lastfocus 000d06c8, current focus 000d06c8

Post by **therube** » Fri Mar 24, 2017 12:22 pm

Ah, these renames, I did through *SALAMANDER*, not through Everything (if that matters?).
I was only "monitoring" through Everything, trying to force a NO SIZE.

(And there were earlier threads, with Salamander... SFN vs LFN... ?)

http://www.voidtools.com/forum/viewtopi ... lfn#p10959
http://www.voidtools.com/forum/viewtopi ... lfn#p15183

Renames, or even the starting of a Transcode, I typically do from wherever happens to be convenient at the time.
So sometimes I might do renames through Everything, & at times through Salamander, & at times I might make a certain rename change with one & another rename change with the other.
Likewise, I might start a Transcode from within Salamander (right-click SendTo -> Transcode.bat) or the same initiated from within Everything.

"Transcode" happens to be part of the process I'm doing that has brought this to my attention, but I'm pretty sure that "Transcode" is not material in the actual bug.

Post by **void** » Fri Mar 24, 2017 10:06 pm

Do you have Index file size checked from Tools -> Options -> Indexes

I'm going to assume no, because there doesn't appear to be any requests for this NTFS information.
Looks like a file size caching issue.. I'll look into this more...

Post by **therube** » Fri Mar 24, 2017 10:27 pm

Yes, I do.

Post by **void** » Sat Mar 25, 2017 11:57 pm

Thanks for the debug info and screenshot.

The information I am after is only logged to the Everything service debug log when the service is enabled.

Could you please try running Everything as admin, with the debug console shown.

If you find a file with missing size, could you please send a copy of your debug console.

Post by **therube** » Sun Mar 26, 2017 12:25 pm

The information I am after is only logged to the Everything service debug log when the service is enabled.

I'm not following, the service (always) is enabled?

Could you please try running Everything as admin, with the debug console shown.

So you're saying with the service enabled & running as Admin?

Post by **therube** » Sun Mar 26, 2017 1:33 pm

860b x86
Service running
(and) Everything, Run As Administrator (High Integrity)

All is well up to the second rename.

With the second rename, two files should be listed ('found 2 files' is correct), but their file sizes should be 918,682,932 + 872,390,581, but all that shows with the second 'total size' is 918,682,932.

Also note, & I'm not sure what is expected to show in the Console, but the only file size that ever shows up is the 918,682,932. The 872,390,581 never shows at all. (Nor any combined file sizes. But that size did display in the Everything GUI up until I renamed the file the second time.)

872,390,581 would be the size of the newly created file CLBL_Ato48.mp4.mp4 (which was then subsequently renamed).

Code: Select all

Everything
Version 1.4.1.860b (x86)
Windows NT 6.1
Processors 4
IsAdmin 1
AppData 0
Service 1
cmdline "C:\DEV\Locate\Everything.exe"
WM_ACTIVATE 00000000 00000000, lastfocus 002f00aa, current focus 002f00aa
WM_ACTIVATE 00000001 00000000, lastfocus 002f00aa, current focus 00000000
search 'CLBL' filter 'ext:3g2;3gp;3gp2;3gpp;amr;amv;asf;avi;bdmv;bik;d2v;divx;dr
c;dsa;dsm;dss;dsv;evo;f4v;flc;fli;flic;flv;hdmov;ifo;ivf;m1v;m2p;m2t;m2ts;m2v;m4
b;m4p;m4v;mkv;mp2v;mp4;mp4v;mpe;mpeg;mpg;mpls;mpv2;mpv4;mov;mts;ogm;ogv;pss;pva;
qt;ram;ratdvd;rm;rmm;rmvb;roq;rpm;smil;smk;swf;tp;tpr;ts;vob;vp6;webm;wm;wmp;wmv
;h264;ra;srt;dtapart;part' sort 5
term 00718320, flags: 1144, next: 03710780, notnext: 00000000
folderop: 10, fileop: 10, term: CLBL
term 03710780, flags: 3140, next: 00000000, notnext: 00000000
folderop: 1, fileop: 162, term: ext:3g2;3gp;3gp2;3gpp;amr;amv;asf;avi;bdmv;bik;d
2v;divx;drc;dsa;dsm;dss;dsv;evo;f4v;flc;fli;flic;flv;hdmov;ifo;ivf;m1v;m2p;m2t;m
2ts;m2v;m4b;m4p;m4v;mkv;mp2v;mp4;mp4v;mpe;mpeg;mpg;mpls;mpv2;mpv4;mov;mts;ogm;og
v;pss;pva;qt;ram;ratdvd;rm;rmm;rmvb;roq;rpm;smil;smk;swf;tp;tpr;ts;vob;vp6;webm;
wm;wmp;wmv;h264;ra;srt;dtapart;part
SET SORT 4
found 0 folders, size 0, db search time taken: 0.038505 seconds
found 1 files, size 65540, db search time taken: 0.192124 seconds
total size 918682932, calculated in 0.000001 seconds
set sort 5 1
SET SORT 3 5
finished sort, time taken 0.000160 seconds
update selection 0.000000 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000055 seconds
when ready 11 0000002d 00000000
new results
ParseDisplayName H:\III\CLBL.mp4
parse display name H:\III\CLBL.mp4
parse display name OK
bind to parent
get menu 1 1
got menu 144342864
got menu 1
menu type 3
QueryContextMenu...
QueryContextMenu 00000065
track menu 01910847
WM_INITMENUPOP 01910847 00000000
menu count 28
wid 7: 96 (0000005f)
00000000
VERB open
wid 7: 97 (00000060)
00000000
VERB MediaInfo
wid 8: 98 (00000061)
00000000
VERB HashMyFiles
wid 9: 100 (00000063)
00000000
VERB sandbox
wid 10: 101 (00000064)
00000000
VERB Universal Viewer
wid 12: 95 (0000005e)
00000000
VERB PickLinkSource
menu item info fail 87
wid 15: 28 (0000001b)
00000000
VERB PreviousVersions
wid 16: 32765 (00007ffc)
80070057
menu item info fail 87
wid 18: 32764 (00007ffb)
80070057
wid 19: 25 (00000018)
00000000
VERB cut
wid 20: 26 (00000019)
00000000
VERB copy
menu item info fail 87
wid 22: 17 (00000010)
00000000
VERB link
wid 23: 18 (00000011)
00000000
VERB delete
wid 24: 19 (00000012)
00000000
VERB rename
wid 25: 32766 (00007ffd)
80070057
wid 26: 20 (00000013)
00000000
VERB properties
rem dbl sep
WM_SELECT 80808004 01910847 01910847
WM_SELECT 80808003 01910847 01910847
WM_SELECT 80808002 01910847 01910847
WM_SELECT 80808001 01910847 01910847
WM_SELECT 88030000 01910847 01910847
update index E:
USN DATA_TRUNCATION CONHOST.EXE-E6AFC9F5.pf
USN DATA_EXTEND DATA_TRUNCATION CONHOST.EXE-E6AFC9F5.pf
USN DATA_EXTEND DATA_TRUNCATION CLOSE CONHOST.EXE-E6AFC9F5.pf
got ntfs file record f6000000011ef2 11676 3
got ntfs file record 100000000e703 18446744073709551615 1
updated E: in 0.002669 seconds
processed usn records in 0.000144 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000124 seconds
WM_SELECT 80808000 01910847 01910847
WM_SELECT 88030000 01910847 01910847
WM_SELECT 80800061 01910847 01910847
wmenuhelp 00000000
set help MediaInfo
WM_SELECT 80800062 01910847 01910847
wmenuhelp 00000000
set help HashMyFiles
WM_SELECT 80800064 01910847 01910847
wmenuhelp 00000000
set help Run Sandboxed
WM_SELECT 80800065 01910847 01910847
wmenuhelp 00000000
set help Universal Viewer
WM_SELECT 88030000 01910847 01910847
WM_SELECT 8080005f 01910847 01910847
wmenuhelp 00000000
set help Picks a file or directory.
WM_SELECT 88030000 01910847 01910847
WM_SELECT 8090000e 01910847 01910847
wmenuhelp 00000000
set help Opens the document with a particular program.
WM_SELECT 8080001c 01910847 01910847
wmenuhelp 00000000
set help View or restore previous versions of this item
WM_SELECT 88037ffd 01910847 01910847
wmenuhelp 80070057
amenuhelp 80070057
WM_SELECT 80900011 01910847 01910847
wmenuhelp 80004001
amenuhelp 80004001
WM_INITMENUPOP 05640417 00000011
WM_SELECT 88037ffc 01910847 01910847
wmenuhelp 80070057
amenuhelp 80070057
WM_SELECT 80800019 01910847 01910847
wmenuhelp 00000000
set help Removes the selected items and copies them onto the Clipboard.
WM_SELECT 80900011 01910847 01910847
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT 80800020 05640417 01910847
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT 80800021 05640417 01910847
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT 80800022 05640417 01910847
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT 80800023 05640417 01910847
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT 80800024 05640417 01910847
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT 80800025 05640417 01910847
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT 80800026 05640417 01910847
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT 80800027 05640417 01910847
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT 80800028 05640417 01910847
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT 80800029 05640417 01910847
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT 8080002a 05640417 01910847
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT 8080002b 05640417 01910847
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT 8080002c 05640417 01910847
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT 8080002d 05640417 01910847
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT 8080002e 05640417 01910847
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT 8080002f 05640417 01910847
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT 80800030 05640417 01910847
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT 80800031 05640417 01910847
wmenuhelp 80004001
amenuhelp 80004001
WM_SELECT ffff0000 00000000 01910847
idCommand 49
using shell implementation
invoke hres 00000000
WM_ACTIVATE 00000000 00000000, lastfocus 0067094a, current focus 0067094a
update index C:
USN DATA_TRUNCATION CONVERT_AUDIO.TXT
USN DATA_EXTEND DATA_TRUNCATION CONVERT_AUDIO.TXT
USN DATA_EXTEND DATA_TRUNCATION CLOSE CONVERT_AUDIO.TXT
got ntfs file record 69000000033e37 20 3
got ntfs file record 5000000014440 18446744073709551615 1
updated C: in 0.002538 seconds
processed usn records in 0.000158 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000117 seconds
update index E:
USN DATA_TRUNCATION SF.EXE-9A233697.pf
USN DATA_EXTEND DATA_TRUNCATION SF.EXE-9A233697.pf
USN DATA_EXTEND DATA_TRUNCATION CLOSE SF.EXE-9A233697.pf
got ntfs file record a10000000132f5 19074 3
got ntfs file record 100000000e703 18446744073709551615 1
updated E: in 0.002320 seconds
processed usn records in 0.000047 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000116 seconds
update index C:
USN DATA_EXTEND CONVERT_AUDIO.TXT
USN DATA_EXTEND CLOSE CONVERT_AUDIO.TXT
USN DATA_EXTEND CONVERT_AUDIO.TXT
USN DATA_EXTEND CLOSE CONVERT_AUDIO.TXT
USN DATA_EXTEND CONVERT_AUDIO.TXT
USN DATA_EXTEND CLOSE CONVERT_AUDIO.TXT
USN DATA_EXTEND CONVERT_AUDIO.TXT
USN DATA_EXTEND CLOSE CONVERT_AUDIO.TXT
USN DATA_EXTEND CONVERT_AUDIO.TXT
USN DATA_EXTEND CLOSE CONVERT_AUDIO.TXT
USN DATA_EXTEND CONVERT_AUDIO.TXT
USN DATA_EXTEND CLOSE CONVERT_AUDIO.TXT
USN DATA_EXTEND CONVERT_AUDIO.TXT
USN DATA_EXTEND CLOSE CONVERT_AUDIO.TXT
USN DATA_EXTEND CONVERT_AUDIO.TXT
USN DATA_EXTEND CLOSE CONVERT_AUDIO.TXT
USN DATA_OVERWRITE ShowTx.ini
USN DATA_OVERWRITE CLOSE ShowTx.ini
USN CREATE CLBL_Ato48.mp4.mp4
USN CREATE DATA_EXTEND CLBL_Ato48.mp4.mp4
USN DATA_EXTEND CONVERT_AUDIO.TXT
got ntfs file record 69000000033e37 284 3
got ntfs file record 5000000014440 18446744073709551615 1
got ntfs file record 100000000aa57 370 3
got ntfs file record 400000000a908 18446744073709551615 1
got ntfs file record 37000000013284 8836605 3
updated C: in 0.005439 seconds
processed usn records in 0.000207 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000056 seconds
new results
update index E:
USN DATA_TRUNCATION FFMPEG.EXE-ABB38696.pf
USN DATA_EXTEND DATA_TRUNCATION FFMPEG.EXE-ABB38696.pf
got ntfs file record 32f0000000111a6 0 3
got ntfs file record 100000000e703 18446744073709551615 1
updated E: in 0.001099 seconds
processed usn records in 0.000088 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000157 seconds
update index E:
USN DATA_EXTEND DATA_TRUNCATION CLOSE FFMPEG.EXE-ABB38696.pf
got ntfs file record 32f0000000111a6 428990 3
got ntfs file record 100000000e703 18446744073709551615 1
updated E: in 0.000703 seconds
processed usn records in 0.000097 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000058 seconds
update index E:
USN DATA_TRUNCATION CMD.EXE-F0053CFF.pf
USN DATA_EXTEND DATA_TRUNCATION CMD.EXE-F0053CFF.pf
USN DATA_EXTEND DATA_TRUNCATION CLOSE CMD.EXE-F0053CFF.pf
got ntfs file record 22000000012ed8 33930 3
got ntfs file record 100000000e703 18446744073709551615 1
updated E: in 0.001421 seconds
processed usn records in 0.000092 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000052 seconds
update index E:
USN DATA_TRUNCATION TEE.EXE-327104E0.pf
USN DATA_EXTEND DATA_TRUNCATION TEE.EXE-327104E0.pf
USN DATA_EXTEND DATA_TRUNCATION CLOSE TEE.EXE-327104E0.pf
got ntfs file record 8f0000000169a3 14448 3
got ntfs file record 100000000e703 18446744073709551615 1
updated E: in 0.001704 seconds
processed usn records in 0.000102 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000052 seconds
update index C:
USN DATA_TRUNCATION 9A39Fd01
USN DATA_TRUNCATION CLOSE 9A39Fd01
USN CREATE sessionstore-1.json
USN CREATE CLOSE sessionstore-1.json
USN DATA_TRUNCATION sessionstore-1.json
USN DATA_EXTEND DATA_TRUNCATION sessionstore-1.json
got ntfs file record 53000000026c26 0 3
got ntfs file record 2000000000a998 18446744073709551615 1
got ntfs file record 77000000036034 1572864 3
got ntfs file record 5300000000a939 18446744073709551615 1
updated C: in 0.002527 seconds
processed usn records in 0.000218 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000070 seconds
update index C:
USN DATA_EXTEND 9A39Fd01
USN DATA_EXTEND DATA_OVERWRITE 9A39Fd01
USN DATA_EXTEND DATA_TRUNCATION CLOSE sessionstore-1.json
USN DELETE CLOSE sessionstore.json
USN RENAME_OLD_NAME sessionstore-1.json
USN RENAME_NEW_NAME sessionstore.json
USN RENAME_NEW_NAME CLOSE sessionstore.json
USN DATA_EXTEND DATA_OVERWRITE CLOSE 9A39Fd01
got ntfs file record 53000000026c26 40209 3
got ntfs file record 2000000000a998 18446744073709551615 1
got ntfs file record 77000000036034 2053565 3
got ntfs file record 5300000000a939 18446744073709551615 1
updated C: in 0.002637 seconds
processed usn records in 0.000366 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000053 seconds
update index C:
USN CREATE 5E67Ad01
USN CREATE DATA_EXTEND 5E67Ad01
USN CREATE DATA_EXTEND DATA_OVERWRITE 5E67Ad01
USN CREATE DATA_EXTEND DATA_OVERWRITE CLOSE 5E67Ad01
got ntfs file record 4f0000000361eb 18061 3
got ntfs file record f800000002b8e9 18446744073709551615 1
updated C: in 0.002028 seconds
processed usn records in 0.000144 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000054 seconds
update index C:
USN CREATE 5E67Am01
USN CREATE DATA_EXTEND 5E67Am01
USN CREATE DATA_EXTEND CLOSE 5E67Am01
USN DELETE CLOSE 5E67Am01
USN CREATE 5E67Am01
USN CREATE DATA_EXTEND 5E67Am01
USN CREATE DATA_EXTEND CLOSE 5E67Am01
USN CREATE DB50Dd01
USN CREATE DATA_EXTEND DB50Dd01
USN CREATE DATA_EXTEND DATA_OVERWRITE DB50Dd01
USN CREATE DATA_EXTEND DATA_OVERWRITE CLOSE DB50Dd01
got ntfs file record 320000000361ec 3666 3
got ntfs file record f800000002b8e9 18446744073709551615 1
got ntfs file record 330000000361ec 3666 3
got ntfs file record 440000000361ed 13813 3
got ntfs file record c7000000029253 18446744073709551615 1
updated C: in 0.003811 seconds
processed usn records in 0.000373 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000052 seconds
update index C:
USN CREATE sessionstore-1.json
USN CREATE CLOSE sessionstore-1.json
USN DATA_TRUNCATION sessionstore-1.json
USN DATA_EXTEND DATA_TRUNCATION sessionstore-1.json
got ntfs file record 3e0000000361f6 1572864 3
got ntfs file record 5300000000a939 18446744073709551615 1
updated C: in 0.001480 seconds
processed usn records in 0.000120 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000054 seconds
update index C:
USN DATA_EXTEND DATA_TRUNCATION CLOSE sessionstore-1.json
USN DELETE CLOSE sessionstore.json
USN RENAME_OLD_NAME sessionstore-1.json
USN RENAME_NEW_NAME sessionstore.json
USN RENAME_NEW_NAME CLOSE sessionstore.json
got ntfs file record 3e0000000361f6 2054244 3
got ntfs file record 5300000000a939 18446744073709551615 1
updated C: in 0.001653 seconds
processed usn records in 0.000279 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000053 seconds
update index C:
USN CREATE DATA_EXTEND DATA_OVERWRITE CLBL_Ato48.mp4.mp4
attribute list 00
got ntfs file record 510000000350d4 870448430 3
got ntfs file record 5000000014440 18446744073709551615 1
updated C: in 0.001000 seconds
processed usn records in 0.000105 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000059 seconds
new results
update index E:
USN DATA_TRUNCATION TOUCH.EXE-CADDC5D1.pf
USN DATA_EXTEND DATA_TRUNCATION TOUCH.EXE-CADDC5D1.pf
USN DATA_EXTEND DATA_TRUNCATION CLOSE TOUCH.EXE-CADDC5D1.pf
got ntfs file record 3300000001a0a3 14492 3
got ntfs file record 100000000e703 18446744073709551615 1
updated E: in 0.000969 seconds
processed usn records in 0.000028 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000051 seconds
update index C:
USN CREATE 0BF12d01
USN CREATE DATA_EXTEND 0BF12d01
USN CREATE DATA_EXTEND DATA_OVERWRITE 0BF12d01
USN CREATE DATA_EXTEND DATA_OVERWRITE CLOSE 0BF12d01
USN CREATE 0BF12m01
USN CREATE DATA_EXTEND 0BF12m01
USN CREATE DATA_EXTEND CLOSE 0BF12m01
USN CREATE DATA_EXTEND DATA_OVERWRITE CLOSE CLBL_Ato48.mp4.mp4
USN DATA_EXTEND CLOSE CONVERT_AUDIO.TXT
USN BASIC_INFO_CHANGE CLBL_Ato48.mp4.mp4
USN BASIC_INFO_CHANGE CLOSE CLBL_Ato48.mp4.mp4
USN DELETE CLOSE 0BF12m01
USN CREATE 0BF12m01
USN CREATE DATA_EXTEND 0BF12m01
USN CREATE DATA_EXTEND CLOSE 0BF12m01
USN CREATE EDC2Fd01
USN CREATE DATA_EXTEND EDC2Fd01
USN CREATE DATA_EXTEND DATA_OVERWRITE EDC2Fd01
USN CREATE DATA_EXTEND DATA_OVERWRITE CLOSE EDC2Fd01
got ntfs file record 390000000361fd 16659 3
got ntfs file record 850000000481ad 18446744073709551615 1
got ntfs file record 7d0000000361fe 3699 3
attribute list 00
got ntfs file record 510000000350d4 872390581 3
got ntfs file record 5000000014440 18446744073709551615 1
got ntfs file record 69000000033e37 9503 3
got ntfs file record 7e0000000361fe 3699 3
got ntfs file record 3c0000000361ff 10452 3
got ntfs file record e6000000029249 18446744073709551615 1
updated C: in 0.006255 seconds
processed usn records in 0.000543 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000052 seconds
new results
update index C:
USN DELETE CLOSE 0BF12m01
USN CREATE 0BF12m01
USN CREATE DATA_EXTEND 0BF12m01
USN CREATE DATA_EXTEND CLOSE 0BF12m01
USN CREATE D3EE2d01
USN CREATE DATA_EXTEND D3EE2d01
USN CREATE DATA_EXTEND DATA_OVERWRITE D3EE2d01
USN CREATE DATA_EXTEND DATA_OVERWRITE CLOSE D3EE2d01
USN CREATE DC752d01
USN CREATE DATA_EXTEND DC752d01
USN CREATE DATA_EXTEND DATA_OVERWRITE DC752d01
USN DELETE CLOSE 0BF12m01
USN CREATE 0BF12m01
USN CREATE DATA_EXTEND 0BF12m01
USN CREATE DATA_EXTEND CLOSE 0BF12m01
USN CREATE DATA_EXTEND DATA_OVERWRITE CLOSE DC752d01
got ntfs file record 850000000481ad 18446744073709551615 1
got ntfs file record 7f0000000361fe 3699 3
got ntfs file record 3c000000036200 21606 3
got ntfs file record 610000000481f4 18446744073709551615 1
got ntfs file record 3e000000036201 17110 3
got ntfs file record a40000000481c6 18446744073709551615 1
got ntfs file record 800000000361fe 3699 3
updated C: in 0.011648 seconds
processed usn records in 0.001057 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000113 seconds
update index C:
USN CREATE FF6E3d01
USN CREATE DATA_EXTEND FF6E3d01
USN CREATE DATA_EXTEND DATA_OVERWRITE FF6E3d01
USN CREATE DATA_EXTEND DATA_OVERWRITE CLOSE FF6E3d01
USN CREATE FF6E3m01
USN CREATE DATA_EXTEND FF6E3m01
USN CREATE DATA_EXTEND CLOSE FF6E3m01
got ntfs file record 35000000036202 15805 3
got ntfs file record 4a00000004a87e 18446744073709551615 1
got ntfs file record 3c000000036203 3707 3
updated C: in 0.002507 seconds
processed usn records in 0.000226 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000158 seconds
update index C:
USN DELETE CLOSE FF6E3m01
USN CREATE FF6E3m01
USN CREATE DATA_EXTEND FF6E3m01
USN CREATE DATA_EXTEND CLOSE FF6E3m01
USN CREATE 61E9Ad01
USN CREATE DATA_EXTEND 61E9Ad01
USN CREATE DATA_EXTEND DATA_OVERWRITE 61E9Ad01
USN CREATE DATA_EXTEND DATA_OVERWRITE CLOSE 61E9Ad01
got ntfs file record 4a00000004a87e 18446744073709551615 1
got ntfs file record 3d000000036203 3707 3
got ntfs file record 3f000000036204 16758 3
got ntfs file record ba000000029254 18446744073709551615 1
updated C: in 0.006305 seconds
processed usn records in 0.000563 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000187 seconds
update index C:
USN CREATE B507Ed01
USN CREATE DATA_EXTEND B507Ed01
USN CREATE DATA_EXTEND DATA_OVERWRITE B507Ed01
USN CREATE DATA_EXTEND DATA_OVERWRITE CLOSE B507Ed01
USN CREATE B507Em01
USN CREATE DATA_EXTEND B507Em01
USN CREATE DATA_EXTEND CLOSE B507Em01
got ntfs file record 7f000000036205 17891 3
got ntfs file record 2000000004b05e 18446744073709551615 1
got ntfs file record 45000000036206 3685 3
updated C: in 0.002804 seconds
processed usn records in 0.000241 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000052 seconds
update index C:
USN DELETE CLOSE B507Em01
USN CREATE B507Em01
USN CREATE DATA_EXTEND B507Em01
USN CREATE DATA_EXTEND CLOSE B507Em01
USN CREATE 1E4D9d01
USN CREATE DATA_EXTEND 1E4D9d01
USN CREATE DATA_EXTEND DATA_OVERWRITE 1E4D9d01
USN CREATE DATA_EXTEND DATA_OVERWRITE CLOSE 1E4D9d01
got ntfs file record 2000000004b05e 18446744073709551615 1
got ntfs file record 46000000036206 3685 3
got ntfs file record 3a000000036207 23419 3
got ntfs file record 70000000530bc 18446744073709551615 1
updated C: in 0.005821 seconds
processed usn records in 0.000580 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000117 seconds
update index C:
USN CREATE sessionstore-1.json
USN CREATE CLOSE sessionstore-1.json
USN DATA_TRUNCATION sessionstore-1.json
USN DATA_EXTEND DATA_TRUNCATION sessionstore-1.json
got ntfs file record 3d000000036208 1572864 3
got ntfs file record 5300000000a939 18446744073709551615 1
updated C: in 0.001338 seconds
processed usn records in 0.000118 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000051 seconds
update index C:
USN DATA_EXTEND DATA_TRUNCATION CLOSE sessionstore-1.json
USN DELETE CLOSE sessionstore.json
USN RENAME_OLD_NAME sessionstore-1.json
USN RENAME_NEW_NAME sessionstore.json
USN RENAME_NEW_NAME CLOSE sessionstore.json
got ntfs file record 3d000000036208 2056193 3
got ntfs file record 5300000000a939 18446744073709551615 1
updated C: in 0.004098 seconds
processed usn records in 0.000521 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000187 seconds
update index C:
USN CREATE 2CFC5d01
USN CREATE DATA_EXTEND 2CFC5d01
USN CREATE DATA_EXTEND DATA_OVERWRITE 2CFC5d01
USN CREATE DATA_EXTEND DATA_OVERWRITE CLOSE 2CFC5d01
USN CREATE 2CFC5m01
USN CREATE DATA_EXTEND 2CFC5m01
USN CREATE DATA_EXTEND CLOSE 2CFC5m01
USN DELETE CLOSE 2CFC5m01
USN CREATE 2CFC5m01
USN CREATE DATA_EXTEND 2CFC5m01
USN CREATE DATA_EXTEND CLOSE 2CFC5m01
USN CREATE 37
USN CREATE CLOSE 37
USN CREATE 005D9d01
USN CREATE DATA_EXTEND 005D9d01
USN CREATE DATA_EXTEND DATA_OVERWRITE 005D9d01
USN CREATE DATA_EXTEND DATA_OVERWRITE CLOSE 005D9d01
USN DELETE CLOSE 2CFC5m01
USN CREATE 2CFC5m01
USN CREATE DATA_EXTEND 2CFC5m01
USN CREATE DATA_EXTEND CLOSE 2CFC5m01
USN CREATE E91FBd01
USN CREATE DATA_EXTEND E91FBd01
USN CREATE DATA_EXTEND DATA_OVERWRITE E91FBd01
USN CREATE DATA_EXTEND DATA_OVERWRITE CLOSE E91FBd01
USN DELETE CLOSE 2CFC5m01
USN CREATE 2CFC5m01
USN CREATE DATA_EXTEND 2CFC5m01
USN CREATE DATA_EXTEND CLOSE 2CFC5m01
USN CREATE A1E63d01
USN CREATE DATA_EXTEND A1E63d01
USN CREATE DATA_EXTEND DATA_OVERWRITE A1E63d01
USN CREATE DATA_EXTEND DATA_OVERWRITE CLOSE A1E63d01
got ntfs file record 3f0000000361f6 19062 3
got ntfs file record d000000050f6b 18446744073709551615 1
got ntfs file record 2f000000036209 3689 3
got ntfs file record 30000000036209 3689 3
got ntfs file record 4300000003620a 18446744073709551615 1
got ntfs file record b000000052db1 18446744073709551615 1
got ntfs file record 4600000003620b 13728 3
got ntfs file record 31000000036209 3689 3
got ntfs file record 3e00000003620c 10525 3
got ntfs file record c000000050bf4 18446744073709551615 1
got ntfs file record 32000000036209 3689 3
got ntfs file record 6500000003620e 11509 3
got ntfs file record 1800000004b6e5 18446744073709551615 1
updated C: in 0.022654 seconds
processed usn records in 0.001972 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000122 seconds
update index C:
USN CREATE sessionstore-1.json
USN CREATE CLOSE sessionstore-1.json
USN DATA_TRUNCATION sessionstore-1.json
USN DATA_EXTEND DATA_TRUNCATION sessionstore-1.json
got ntfs file record 3900000003620f 1572864 3
got ntfs file record 5300000000a939 18446744073709551615 1
updated C: in 0.001389 seconds
processed usn records in 0.000478 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000053 seconds
update index C:
USN DATA_EXTEND DATA_TRUNCATION CLOSE sessionstore-1.json
USN DELETE CLOSE sessionstore.json
USN RENAME_OLD_NAME sessionstore-1.json
USN RENAME_NEW_NAME sessionstore.json
USN RENAME_NEW_NAME CLOSE sessionstore.json
got ntfs file record 3900000003620f 2056823 3
got ntfs file record 5300000000a939 18446744073709551615 1
updated C: in 0.004074 seconds
processed usn records in 0.000531 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000121 seconds
WM_ACTIVATE 00000001 00000000, lastfocus 0067094a, current focus 00000000
update index E:
USN DATA_TRUNCATION DLLHOST.EXE-80F7691C.pf
USN DATA_EXTEND DATA_TRUNCATION DLLHOST.EXE-80F7691C.pf
USN DATA_EXTEND DATA_TRUNCATION CLOSE DLLHOST.EXE-80F7691C.pf
got ntfs file record ea00000000f9ce 27128 3
got ntfs file record 100000000e703 18446744073709551615 1
updated E: in 0.002566 seconds
processed usn records in 0.000052 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000114 seconds
WM_ACTIVATE 00000000 00000000, lastfocus 0067094a, current focus 0067094a
update index C:
USN DATA_OVERWRITE regscanner.cfg
USN DATA_OVERWRITE CLOSE regscanner.cfg
USN DATA_OVERWRITE regscanner.cfg
USN DATA_OVERWRITE CLOSE regscanner.cfg
USN DATA_OVERWRITE regscanner.cfg
USN DATA_OVERWRITE CLOSE regscanner.cfg
USN DATA_OVERWRITE regscanner.cfg
USN DATA_OVERWRITE CLOSE regscanner.cfg
USN DATA_OVERWRITE regscanner.cfg
USN DATA_OVERWRITE CLOSE regscanner.cfg
USN DATA_OVERWRITE regscanner.cfg
USN DATA_OVERWRITE CLOSE regscanner.cfg
USN DATA_OVERWRITE regscanner.cfg
USN DATA_OVERWRITE CLOSE regscanner.cfg
USN DATA_OVERWRITE regscanner.cfg
USN DATA_OVERWRITE CLOSE regscanner.cfg
USN DATA_OVERWRITE regscanner.cfg
USN DATA_OVERWRITE CLOSE regscanner.cfg
USN DATA_OVERWRITE regscanner.cfg
USN DATA_OVERWRITE CLOSE regscanner.cfg
USN DATA_OVERWRITE regscanner.cfg
USN DATA_OVERWRITE CLOSE regscanner.cfg
USN DATA_OVERWRITE regscanner.cfg
USN DATA_OVERWRITE CLOSE regscanner.cfg
USN DATA_OVERWRITE regscanner.cfg
USN DATA_OVERWRITE CLOSE regscanner.cfg
USN DATA_OVERWRITE regscanner.cfg
USN DATA_OVERWRITE CLOSE regscanner.cfg
USN DATA_OVERWRITE regscanner.cfg
USN DATA_OVERWRITE CLOSE regscanner.cfg
USN DATA_OVERWRITE regscanner.cfg
USN DATA_OVERWRITE CLOSE regscanner.cfg
USN DATA_OVERWRITE regscanner.cfg
USN DATA_OVERWRITE CLOSE regscanner.cfg
USN DATA_OVERWRITE regscanner.cfg
USN DATA_OVERWRITE CLOSE regscanner.cfg
USN DATA_OVERWRITE regscanner.cfg
USN DATA_OVERWRITE CLOSE regscanner.cfg
USN DATA_OVERWRITE regscanner.cfg
USN DATA_OVERWRITE CLOSE regscanner.cfg
USN DATA_OVERWRITE regscanner.cfg
USN DATA_OVERWRITE CLOSE regscanner.cfg
USN DATA_OVERWRITE regscanner.cfg
USN DATA_OVERWRITE DATA_TRUNCATION regscanner.cfg
USN DATA_OVERWRITE DATA_TRUNCATION CLOSE regscanner.cfg
USN DATA_OVERWRITE regscanner.cfg
USN DATA_OVERWRITE CLOSE regscanner.cfg
USN DATA_OVERWRITE regscanner.cfg
USN DATA_OVERWRITE CLOSE regscanner.cfg
USN DATA_OVERWRITE regscanner.cfg
USN DATA_OVERWRITE CLOSE regscanner.cfg
USN DATA_OVERWRITE regscanner.cfg
USN DATA_OVERWRITE CLOSE regscanner.cfg
USN DATA_OVERWRITE regscanner.cfg
USN DATA_OVERWRITE CLOSE regscanner.cfg
USN DATA_OVERWRITE regscanner.cfg
USN DATA_OVERWRITE CLOSE regscanner.cfg
USN DATA_OVERWRITE regscanner.cfg
USN DATA_OVERWRITE CLOSE regscanner.cfg
USN DATA_OVERWRITE regscanner.cfg
USN DATA_OVERWRITE CLOSE regscanner.cfg
USN DATA_OVERWRITE regscanner.cfg
USN DATA_OVERWRITE CLOSE regscanner.cfg
USN DATA_OVERWRITE regscanner.cfg
USN DATA_OVERWRITE CLOSE regscanner.cfg
USN DATA_OVERWRITE regscanner.cfg
USN DATA_OVERWRITE CLOSE regscanner.cfg
USN DATA_OVERWRITE regscanner.cfg
USN DATA_OVERWRITE CLOSE regscanner.cfg
USN DATA_OVERWRITE regscanner.cfg
USN DATA_OVERWRITE DATA_TRUNCATION regscanner.cfg
USN DATA_OVERWRITE DATA_TRUNCATION CLOSE regscanner.cfg
USN DATA_EXTEND DATA_OVERWRITE regscanner.cfg
USN DATA_EXTEND DATA_OVERWRITE CLOSE regscanner.cfg
USN DATA_OVERWRITE regscanner.cfg
USN DATA_OVERWRITE DATA_TRUNCATION regscanner.cfg
USN DATA_OVERWRITE DATA_TRUNCATION CLOSE regscanner.cfg
USN DATA_EXTEND DATA_OVERWRITE regscanner.cfg
USN DATA_EXTEND DATA_OVERWRITE CLOSE regscanner.cfg
USN DATA_OVERWRITE regscanner.cfg
USN DATA_OVERWRITE DATA_TRUNCATION regscanner.cfg
USN DATA_OVERWRITE DATA_TRUNCATION CLOSE regscanner.cfg
USN DATA_EXTEND DATA_OVERWRITE regscanner.cfg
USN DATA_EXTEND DATA_OVERWRITE CLOSE regscanner.cfg
USN DATA_OVERWRITE regscanner.cfg
USN DATA_OVERWRITE DATA_TRUNCATION regscanner.cfg
USN DATA_OVERWRITE DATA_TRUNCATION CLOSE regscanner.cfg
USN DATA_EXTEND DATA_OVERWRITE regscanner.cfg
USN DATA_EXTEND DATA_OVERWRITE CLOSE regscanner.cfg
got ntfs file record 20000000119b0 1252 3
got ntfs file record 800000000b7cd 18446744073709551615 1
updated C: in 0.037146 seconds
processed usn records in 0.000287 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000062 seconds
update index E:
USN DATA_OVERWRITE V01.chk
USN DATA_OVERWRITE CLOSE V01.chk
got ntfs file record 5000000000562 8192 3
got ntfs file record 500000000055c 18446744073709551615 1
updated E: in 0.001954 seconds
processed usn records in 0.000058 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000121 seconds
WM_ACTIVATE 00000001 00000000, lastfocus 0067094a, current focus 00000000
SYSCOMMAND 0000f095 0058026a
WM_SELECT ffff0000 00000000 00000000
00000000
rename:
C:\out\CLBL_Ato48.mp4.mp4
to:
C:\out\CLBL_Ato48.mp4
update index C:
USN RENAME_OLD_NAME CLBL_Ato48.mp4.mp4
USN RENAME_NEW_NAME CLBL_Ato48.mp4
USN RENAME_NEW_NAME CLOSE CLBL_Ato48.mp4
got ntfs file record 5000000014440 18446744073709551615 1
attribute list 00
got ntfs file record 510000000350d4 872390581 3
updated C: in 0.002354 seconds
processed usn records in 0.000262 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000114 seconds
new results
selection: 1/1: C:\out\CLBL_Ato48.mp4
exec: first expr
exec: command $exec("%1")
exec: fullfilename C:\out\CLBL_Ato48.mp4
exec: depth 0
exec: exec "%1")
exec: depth 1
exec: got "C:\out\CLBL_Ato48.mp4"
exec: shellexecute (idlist) file:C:\out\CLBL_Ato48.mp4 param:
WM_ACTIVATE 00000000 012109fa, lastfocus 0067094a, current focus 0067094a
Enter ShellExecuteExW
C:\out
Leave ShellExecuteExW
WM_ACTIVATE 00000001 012109fa, lastfocus 0067094a, current focus 012109fa
sub buf killed
set 1 run history in 0.000103 seconds
exec: main thread regained focus
new results
update index E:
USN BASIC_INFO_CHANGE 1b4dd67f29cb1962.automaticDestinations-ms
got ntfs file record 300000000557d 3159040 3
got ntfs file record 300000000557b 18446744073709551615 1
updated E: in 0.000565 seconds
processed usn records in 0.000050 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000070 seconds
update index C:
USN OBJECT_ID_CHANGE CLBL_Ato48.mp4
USN OBJECT_ID_CHANGE CLOSE CLBL_Ato48.mp4
attribute list 00
got ntfs file record 510000000350d4 872390581 3
got ntfs file record 5000000014440 18446744073709551615 1
updated C: in 0.001035 seconds
processed usn records in 0.000042 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000053 seconds
new results
WM_ACTIVATE 00000000 00000000, lastfocus 0067094a, current focus 0067094a
update index E:
USN BASIC_INFO_CHANGE DATA_OVERWRITE 1b4dd67f29cb1962.automaticDestinations-ms
USN BASIC_INFO_CHANGE DATA_OVERWRITE CLOSE 1b4dd67f29cb1962.automaticDestination
s-ms
USN CREATE CLBL_Ato48.mp4.lnk
USN CREATE DATA_EXTEND CLBL_Ato48.mp4.lnk
USN CREATE DATA_EXTEND CLOSE CLBL_Ato48.mp4.lnk
USN DELETE CLOSE VRSS.mp4.lnk
USN DELETE CLOSE out.lnk
USN CREATE out.lnk
USN CREATE DATA_EXTEND out.lnk
USN CREATE DATA_EXTEND CLOSE out.lnk
got ntfs file record 300000000557d 3159040 3
got ntfs file record 300000000557b 18446744073709551615 1
got ntfs file record 2d00000000eb5b 528 3
got ntfs file record 20000000001ff 18446744073709551615 1
got ntfs file record 11400000000ab52 397 3
updated E: in 0.007304 seconds
processed usn records in 0.000536 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000070 seconds
WM_ACTIVATE 00000001 00000000, lastfocus 0067094a, current focus 00000000
update index E:
USN DATA_TRUNCATION MPLAYER.EXE-C1D0F5DF.pf
USN DATA_EXTEND DATA_TRUNCATION MPLAYER.EXE-C1D0F5DF.pf
USN DATA_EXTEND DATA_TRUNCATION CLOSE MPLAYER.EXE-C1D0F5DF.pf
got ntfs file record 6500000001229c 212646 3
got ntfs file record 100000000e703 18446744073709551615 1
updated E: in 0.002397 seconds
processed usn records in 0.000180 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000191 seconds
update index E:
USN DATA_TRUNCATION MPUI.ini
USN DATA_EXTEND DATA_TRUNCATION MPUI.ini
USN DATA_EXTEND DATA_TRUNCATION CLOSE MPUI.ini
USN DATA_TRUNCATION MPUI.EXE-240A9C7C.pf
USN DATA_EXTEND DATA_TRUNCATION MPUI.EXE-240A9C7C.pf
USN DATA_EXTEND DATA_TRUNCATION CLOSE MPUI.EXE-240A9C7C.pf
got ntfs file record 2a0000000004dc 3139 3
got ntfs file record 20000000001f4 18446744073709551615 1
got ntfs file record 2700000001229e 280640 3
got ntfs file record 100000000e703 18446744073709551615 1
updated E: in 0.004991 seconds
processed usn records in 0.000292 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000125 seconds
WM_ACTIVATE 00000000 00000000, lastfocus 0067094a, current focus 0067094a
update index E:
USN CREATE XPCK3NNA02R8MSYBQGKV.temp
USN CREATE DATA_EXTEND XPCK3NNA02R8MSYBQGKV.temp
USN CREATE DATA_EXTEND CLOSE XPCK3NNA02R8MSYBQGKV.temp
USN BASIC_INFO_CHANGE XPCK3NNA02R8MSYBQGKV.temp
USN BASIC_INFO_CHANGE SECURITY_CHANGE XPCK3NNA02R8MSYBQGKV.temp
USN CREATE c00ab7717503333e.customDestinations-ms~RF11e820b7.TMP
USN CREATE CLOSE c00ab7717503333e.customDestinations-ms~RF11e820b7.TMP
USN DELETE CLOSE c00ab7717503333e.customDestinations-ms~RF11e820b7.TMP
USN RENAME_OLD_NAME c00ab7717503333e.customDestinations-ms
USN RENAME_NEW_NAME c00ab7717503333e.customDestinations-ms~RF11e820b7.TMP
USN RENAME_OLD_NAME BASIC_INFO_CHANGE SECURITY_CHANGE XPCK3NNA02R8MSYBQGKV.temp
USN RENAME_NEW_NAME BASIC_INFO_CHANGE SECURITY_CHANGE c00ab7717503333e.customDes
tinations-ms
USN RENAME_NEW_NAME CLOSE c00ab7717503333e.customDestinations-ms~RF11e820b7.TMP
USN RENAME_NEW_NAME BASIC_INFO_CHANGE SECURITY_CHANGE CLOSE c00ab7717503333e.cus
tomDestinations-ms
USN DELETE CLOSE c00ab7717503333e.customDestinations-ms~RF11e820b7.TMP
got ntfs file record 24000000010768 15112 3
got ntfs file record 6000000005553 18446744073709551615 1
got ntfs file record 52000000010883 18446744073709551615 0
got ntfs file record f0000000010757 18446744073709551615 0
updated E: in 0.009938 seconds
processed usn records in 0.001053 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000113 seconds
WM_ACTIVATE 00000001 00000000, lastfocus 0067094a, current focus 00000000
update index E:
USN DATA_OVERWRITE V01.chk
USN DATA_OVERWRITE CLOSE V01.chk
got ntfs file record 5000000000562 8192 3
got ntfs file record 500000000055c 18446744073709551615 1
updated E: in 0.002033 seconds
processed usn records in 0.000074 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000120 seconds
00000000
rename:
C:\out\CLBL_Ato48.mp4
to:
C:\out\Example10 - Iriss Data1 10 Sass - Statt (r)13 1 User Guide1013_Ato48.mp4
update index C:
USN RENAME_OLD_NAME CLBL_Ato48.mp4
USN RENAME_NEW_NAME Example10 - Iriss Data1 10 Sass - Statt (r)13 1 User Guide10
13_Ato48.mp4
USN RENAME_NEW_NAME CLOSE Example10 - Iriss Data1 10 Sass - Statt (r)13 1 User G
uide1013_Ato48.mp4
got ntfs file record 5000000014440 18446744073709551615 1
attribute list 01
len 72
mapping pair cluster offset: 772284, cluster count: 1
got ntfs file record 37000000013284 18446744073709551615 1
updated C: in 0.026768 seconds
processed usn records in 0.000239 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000173 seconds
new results
search 'Example10 - Iriss Data1 10 Sass - Statt (r)13 1 User Guide1013' filter '
ext:3g2;3gp;3gp2;3gpp;amr;amv;asf;avi;bdmv;bik;d2v;divx;drc;dsa;dsm;dss;dsv;evo;
f4v;flc;fli;flic;flv;hdmov;ifo;ivf;m1v;m2p;m2t;m2ts;m2v;m4b;m4p;m4v;mkv;mp2v;mp4
;mp4v;mpe;mpeg;mpg;mpls;mpv2;mpv4;mov;mts;ogm;ogv;pss;pva;qt;ram;ratdvd;rm;rmm;r
mvb;roq;rpm;smil;smk;swf;tp;tpr;ts;vob;vp6;webm;wm;wmp;wmv;h264;ra;srt;dtapart;p
art' sort 5
term 08997d98, flags: 1144, next: 08a0a0e0, notnext: 00000000
folderop: 10, fileop: 10, term: Example10
term 08a0a0e0, flags: 1144, next: 08997a38, notnext: 00000000
folderop: 10, fileop: 10, term: -
term 08997a38, flags: 1144, next: 08997ac8, notnext: 00000000
folderop: 10, fileop: 10, term: Iriss
term 08997ac8, flags: 1144, next: 08a0a0b8, notnext: 00000000
folderop: 10, fileop: 10, term: Data1
term 08a0a0b8, flags: 1144, next: 08997d08, notnext: 00000000
folderop: 10, fileop: 10, term: 10
term 08997d08, flags: 1144, next: 08a0a068, notnext: 00000000
folderop: 10, fileop: 10, term: Sass
term 08a0a068, flags: 1144, next: 08997b58, notnext: 00000000
folderop: 10, fileop: 10, term: -
term 08997b58, flags: 1144, next: 06b7f6b0, notnext: 00000000
folderop: 10, fileop: 10, term: Statt
term 06b7f6b0, flags: 1144, next: 08a0ac48, notnext: 00000000
folderop: 10, fileop: 10, term: (r)13
term 08a0ac48, flags: 1144, next: 06b7f7d0, notnext: 00000000
folderop: 10, fileop: 10, term: 1
term 06b7f7d0, flags: 1144, next: 06b7f8f0, notnext: 00000000
folderop: 10, fileop: 10, term: User
term 06b7f8f0, flags: 1144, next: 03710780, notnext: 00000000
folderop: 10, fileop: 10, term: Guide1013
term 03710780, flags: 3140, next: 00000000, notnext: 00000000
folderop: 1, fileop: 162, term: ext:3g2;3gp;3gp2;3gpp;amr;amv;asf;avi;bdmv;bik;d
2v;divx;drc;dsa;dsm;dss;dsv;evo;f4v;flc;fli;flic;flv;hdmov;ifo;ivf;m1v;m2p;m2t;m
2ts;m2v;m4b;m4p;m4v;mkv;mp2v;mp4;mp4v;mpe;mpeg;mpg;mpls;mpv2;mpv4;mov;mts;ogm;og
v;pss;pva;qt;ram;ratdvd;rm;rmm;rmvb;roq;rpm;smil;smk;swf;tp;tpr;ts;vob;vp6;webm;
wm;wmp;wmv;h264;ra;srt;dtapart;part
SET SORT 4
found 0 folders, size 0, db search time taken: 0.034385 seconds
found 2 files, size 65540, db search time taken: 0.189257 seconds
total size 918682932, calculated in 0.000001 seconds
set sort 5 1
SET SORT 3 5
finished sort, time taken 0.000183 seconds
update selection 0.000001 seconds
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000076 seconds
new results
WM_ACTIVATE 00000000 00000000, lastfocus 002f00aa, current focus 002f00aa

Also note, that I worked from a backup.
So I have origname
Copy & rename to, newname
Transcode newname to, newname+Ato48
Rename newname+Ato48 to origname+Ato48
(And once I check things out, orginame would be deleted.)

Post by **void** » Wed Mar 29, 2017 9:35 am

I'm not following, the service (always) is enabled?

No, with the portable version the service is not installed or enabled.
If Everything does not have enough privileges to index your NTFS drives it will prompt you asking to install the service or run as admin.
Did you choose to install the service when prompted? (If so, it will install a unique service to that instance, for example, if you use the instance name 'foo' Everything will install the service: Everything (foo) )
The service is not required if you run as admin.

So you're saying with the service enabled & running as Admin?

You can leave the service enabled if you wish, running as admin will override the service.
That is, if you run as admin, Everything will not communicate with the Everything service at all.

attribute list 01
len 72
mapping pair cluster offset: 772284, cluster count: 1
got ntfs file record 37000000013284 18446744073709551615 1

Thanks for the debug output.

This is interesting, the file CLBL_Ato48.mp4 is soo fragmented, that the attribute list describing the fragmentation is too large to fit in the MFT.
I've fixed an issue with reading file information from such a case in Everything 861b.

Please try Everything 861b, if the problem persists, please send the debug output again (I've added more debugging information in case this issue is unrelated).

Post by **therube** » Wed Mar 29, 2017 11:15 am

>> I'm not following, the service (always) is enabled?

No, with the portable version the service is not installed or enabled.

I guess I should have said, that /I/ always have the service enabled (using the portable version).

Unnamed instance:

Code: Select all

everything.exe  -install-service

Before I "install" a new portable,
I, Quit Everything, then everything -uninstall-service,
Copy the new everything.exe over, then everything -install-service,
Followed by opening the Everything GUI.

(I'll test...)

the file CLBL_Ato48.mp4 is soo fragmented

Ah, that kind of makes sense then why this issue crept up kind of out of the blue (as free disk space has been dwindling of late).

Post by **therube** » Wed Mar 29, 2017 12:47 pm

861b.

Only a few files so far, all successfully.

10 files, all ~180 KB each, average fragmentation, 25.1/frag per file.
1 file, ~1 GB, 59/frag per file.
1 file, 900 KB, 1049/frag per file.
(The move of that file, from one drive to another, was rather slow, as expected.
HDD's, no SSD's.)

(I'll keep pluggin...)

1 file, 900 KB, 1093/frag per file.
1 file, 1.3 GB, 1104/frag per file.

1 file, 500 MB, 1128/frag per file.
Ha! That last one is one that I know I saw the issue with some time before (not that the particular file "caused" the issue). Anyhow, at the time, after my transcode, when I played the file to make sure it looked OK, I noticed that jumping through the timeline, it was kind of jerky, where the source file was not. I thought that odd at the time, but thought it was something weird with the transcode, so I deleted the transcode, kept the source. Today, having come across the same file again, I'm thinking to myself, where did my transcode go? So on transcoding it again today, & checking it out, I again notice, it was kind of jerky, & as I'm about to note that in the source file... "transcode causes"... it was like, ah! fragmentation. So I then moved that "jerky" file to a different drive (ending up 1/frag per file), & when I then played it, no more jerkiness.

Post by **therube** » Wed Mar 29, 2017 6:59 pm

Oh, & I've long had a simple, CONTIG.BAT, which I call from the SendTo menu:

Code: Select all

contig.exe  -a  %1  %2  %3
pause

Sysinternals, Contig.

Post by **therube** » Fri Apr 07, 2017 11:57 pm

Since putting in 861b, I have not run across this issue again.

Post by **therube** » Tue May 23, 2017 4:37 am

873b x86

At least twice now I've (most likely) run into this again.
Without messing with "console", just checking with Contig, 1454 frags/file.

Not a big deal... just pointing out.

Post by **void** » Tue May 23, 2017 10:16 am

I've added a fallback when gathering NTFS file information fails to Everything 875b.

This fallback should be more robust for very fragmented files.

Post by **NotNull** » Sat May 27, 2017 10:12 am

Very fragmented, wrong file size? Sounds like a SPARSE file ..

Sparse files are files where the reported file size differs from the size on disk. This mechanism is often used for files that get filled "in a stream" where the total size is allocated by writing it with 0's. These 0's are not written to disk, but represented in metadata (like: block 10 to 100 = 0 ) until the real data "arrives". BitTorrent uses it, virtual machine software uses it for their disks and I guess your transcoding program uses it too. By their very nature these programs create (very) fragmented files.

You can check if it is indeed a sparse file in File properties (Alt-Enter in Explorer), Details Tab. If there is a "P" among the listed attributes, it is indeed a sparse file. Or check it using FSUTIL (requires administrative privileges):

Code: Select all

C:\Temp>fsutil sparse queryflag c:\2INSTALL\LibreOffice_5.3.1_Win_x64.msi
This file is set as sparse

C:\Temp>

It is not easy to get rid of sparse files. The attribute doesn't work like Read-only or Hidden attributes: you can't just flip it as that would mean a wrong size on disk. Best ways I found thus far:
[1] moving the file to a filesystem that doesn't support sparse files (like FAT/FAT32) and then move the file back. or
[2] Use Explorer++. Explorer++ doesn't use the Win32 API's and has not implemented support for sparse files. Just copy the file; the new file is no longer sparse.

I hope your transcoding program supports a way to pre-allocate the needed diskspace; in that case it will create regular files, not sparse files.

Sparse files are managed in $MFT (the master file table), just like the USN Journal that Everything.exe uses (but in adifferent part). I don't know if the USN Journal has complete information about sparse files, or that it references to these files, which might also cause a wrongly reported filesize.

EDIT: If theories above are (more or less) correct, you will see the right filesize when you do a Folder indexing.

Post by **void** » Mon May 29, 2017 1:53 am

Everything appears to be displaying sparse files correctly (the same as Windows Explorer)

Tested with:

Code: Select all

FSUtil File CreateNew temp 0x100000
FSUtil Sparse SetFlag temp
FSUtil Sparse SetRange temp 0 0x100000

But you might be on the right track, perhaps this sparse file has many ranges set as valid, soo many ranges that the attributes to describe them are too big to fit in the MFT (non-resident attributes).

Everything does read non-resident attributes, but, what might be happening is these attributes are changing before Everything reads them all (out of sync read), the fallback in Everything 875b should pick this up and correctly get the file size from the OS.

voidtools forum

Everything Not Seeing Newly Created File - Size

Everything Not Seeing Newly Created File - Size

Re: Everything Not Seeing Newly Created File - Size

Re: Everything Not Seeing Newly Created File - Size

Re: Everything Not Seeing Newly Created File - Size

Re: Everything Not Seeing Newly Created File - Size

Re: Everything Not Seeing Newly Created File - Size

Re: Everything Not Seeing Newly Created File - Size

Re: Everything Not Seeing Newly Created File - Size

Re: Everything Not Seeing Newly Created File - Size

Re: Everything Not Seeing Newly Created File - Size

Re: Everything Not Seeing Newly Created File - Size

Re: Everything Not Seeing Newly Created File - Size

Re: Everything Not Seeing Newly Created File - Size

Re: Everything Not Seeing Newly Created File - Size

Re: Everything Not Seeing Newly Created File - Size

Re: Everything Not Seeing Newly Created File - Size

Re: Everything Not Seeing Newly Created File - Size

Re: Everything Not Seeing Newly Created File - Size

Re: Everything Not Seeing Newly Created File - Size

Re: Everything Not Seeing Newly Created File - Size

Re: Everything Not Seeing Newly Created File - Size

Re: Everything Not Seeing Newly Created File - Size

Re: Everything Not Seeing Newly Created File - Size

Re: Everything Not Seeing Newly Created File - Size

Re: Everything Not Seeing Newly Created File - Size

Re: Everything Not Seeing Newly Created File - Size

Re: Everything Not Seeing Newly Created File - Size