Ghosts on Halloween, Never

Found a bug in "Everything"? report it here
Post Reply
therube
Posts: 2761
Joined: Thu Sep 03, 2009 6:48 pm

Ghosts on Halloween, Never

Post by therube » Thu Oct 27, 2016 5:39 am

Ghosts on Halloween, Never.

Image

I think it went something like this...

Source file on H:
Transcoded the Audio, output to C:

Output filename on C: was name.avi.mp4.avi
(yep that's correct, name.avi.mp4.avi)

I renamed it to name.avi
(removing the extraneous .avi.mp4 part)
(not sure if I did that in Salamander or Everything?)
(i believe i did that while it was still on C:)
[& yet oddly, the ghost entry on C: shows as name.avi.mp4, with the Ext: as mp4 ?]
(pretty sure i did not rename it to name.avi.mp4)

Renamed source to "abc"
Moved C:*.avi to H:
Touched the newly transcoded file, setting its date to that of source

Somewhere during that time, the Ghost that shows on C: ended up?
(& guessing it will persist until a Forced Rebuld)


Win7 x64
781b


Transcode AUDIO to 48kbps.BAT:

Code: Select all

@ECHO OFF

ECHO  TRANSCODE   AUDIO [from either a Video or Audio file]
ECHO  TO          AAC audio, 48 kbps, using FFmpeg Native AAC
ECHO.
ECHO  therube 09/13/2016
ECHO.
ECHO  VIDEO:
ECHO  %1
ECHO.

PAUSE


ECHO.
SET   OUT=C:\OUT
ECHO  OUT=: %OUT%
SET   OFILE=%OUT%\%~n1_Ato48%~x1
SET   OFILE=%OFILE%.mp4
ECHO  Output filename:
ECHO  "%OFILE%"
SET   LOG=%OUT%\CONVERT_AUDIO.TXT
ECHO.

PAUSE


SET VIDEO=%1

ECHO  %VIDEO%  > %LOG%
ECHO.         >> %LOG%

ECHO  ffmpeg     >> %LOG%
ECHO  -i %VIDEO% >> %LOG%
ECHO  -vcodec copy  -c:a aac  -b:a 48k	"%OFILE%"	>> %LOG%
ECHO  "%OFILE%"  >> %LOG%
ECHO.            >> %LOG%
ECHO  ========================================================================================= >> %LOG%
ECHO.            >> %LOG%
SF    %LOG%

PAUSE


 ffmpeg -i %VIDEO%  -vcodec copy  -c:a aac  -b:a 48k   "%OFILE%"  2>&1  |  tee -a %LOG%
:: ffmpeg -i %VIDEO%  -vcodec copy  -c:a aac  -b:a 48k  -af "volume=3dB"   "%OFILE%"  2>&1  |  tee -a %LOG%
ECHO.

PAUSE

touch "%OFILE%" --reference=%1
PAUSE

EXIT
(seems i do touch the file date in my transcode routine, but for some reason [i'm pretty sure] that did not happen, so i did it "manually" - after having moved the file to H:)

settime.BAT:

Code: Select all

@ECHO OFF

ECHO  SETTIME  sets a file's date to the "same" file, named "abc"
ECHO  a sort of more current variation of my old ancient DOS settime program
ECHO.
ECHO  therube 02/20/2015
ECHO.
ECHO  File to change the date of:  %1

FOR   %%i in (%1) do  SET   BASENAME=%%~dpiabc
ECHO  reference file (aka "abc"):  "%BASENAME%"
ECHO.
ls -l %1
ls -l "%BASENAME%"
ECHO.

PAUSE

touch %1 --reference="%BASENAME%"
ls -l %1

PAUSE
EXIT

void
Site Admin
Posts: 5808
Joined: Fri Oct 16, 2009 11:31 pm

Re: Ghosts on Halloween, Never

Post by void » Fri Oct 28, 2016 12:06 am

If this instance of Everything is still running:
  • Terminate the Everything.exe process with task manager
  • Run Everything with -debug -verbose > out.txt command line options:
    Everything.exe -debug -verbose > out.txt
  • What is reported to out.txt?
It should contain a list of all the USN journal records.

therube
Posts: 2761
Joined: Thu Sep 03, 2009 6:48 pm

Re: Ghosts on Halloween, Never

Post by therube » Sat Oct 29, 2016 12:43 pm

Truncated:

Code: Select all

Everything
Version 1.4.1.781b (x86)
Windows NT 6.1
Processors 4
IsAdmin 0
AppData 0
Service 1
cmdline everything  -debug -verbose 
ole initialize: 00000000
create mutex
sys img list 0070ca00 007108d0 1 0
default font MS Shell Dlg 2 -11
load everything icon
bookmarks
set hook
create tray
db_load
config volume: \\?\Volume{e8a31bcb-8ba0-11e2-9203-806e6f6e6963} | C: | 
add volume: \\?\Volume{e8a31bcb-8ba0-11e2-9203-806e6f6e6963} | C: | 
config volume: \\?\Volume{e8a31bcc-8ba0-11e2-9203-806e6f6e6963} | E: | 
add volume: \\?\Volume{e8a31bcc-8ba0-11e2-9203-806e6f6e6963} | E: | 
config volume: \\?\Volume{11177be4-dc20-11e2-ae1e-806e6f6e6963} | H: | 
add volume: \\?\Volume{11177be4-dc20-11e2-ae1e-806e6f6e6963} | H: | 
config volume: \\?\Volume{bbc7e66f-74de-4147-a8a9-5139169e8464} | I: | 
add volume: \\?\Volume{bbc7e66f-74de-4147-a8a9-5139169e8464} | I: | 
config volume: \\?\Volume{76e9ac8c-93b1-11e2-a48d-bc5ff444bb7d} | M: | 
add volume: \\?\Volume{76e9ac8c-93b1-11e2-a48d-bc5ff444bb7d} | M: | 
config volume: \\?\Volume{d4a1fedc-dc0d-11e2-b0f0-806e6f6e6963} | X: | 
add volume: \\?\Volume{d4a1fedc-dc0d-11e2-b0f0-806e6f6e6963} | X: | 
VEH 49961056
volume \\?\Volume{bbc7e66f-74de-4147-a8a9-5139169e8464}: drive type 3
GetVolumePathNamesForVolumeName 234
GetVolumePathNamesForVolumeName I:
add found volume: \\?\Volume{bbc7e66f-74de-4147-a8a9-5139169e8464} | I: |  | 00728128
volume \\?\Volume{11177be4-dc20-11e2-ae1e-806e6f6e6963}: drive type 3
GetVolumePathNamesForVolumeName 234
GetVolumePathNamesForVolumeName H:
add found volume: \\?\Volume{11177be4-dc20-11e2-ae1e-806e6f6e6963} | H: |  | 00728ae8
volume \\?\Volume{e8a31bcb-8ba0-11e2-9203-806e6f6e6963}: drive type 3
GetVolumePathNamesForVolumeName 234
GetVolumePathNamesForVolumeName C:
add found volume: \\?\Volume{e8a31bcb-8ba0-11e2-9203-806e6f6e6963} | C: |  | 00727228
volume \\?\Volume{e8a31bcc-8ba0-11e2-9203-806e6f6e6963}: drive type 3
GetVolumePathNamesForVolumeName 234
GetVolumePathNamesForVolumeName E:
add found volume: \\?\Volume{e8a31bcc-8ba0-11e2-9203-806e6f6e6963} | E: |  | 00727468
volume \\?\Volume{76e9ac8c-93b1-11e2-a48d-bc5ff444bb7d}: drive type 3
GetVolumePathNamesForVolumeName 234
GetVolumePathNamesForVolumeName M:
add found volume: \\?\Volume{76e9ac8c-93b1-11e2-a48d-bc5ff444bb7d} | M: |  | 007284b8
volume \\?\Volume{d4a1fedc-dc0d-11e2-b0f0-806e6f6e6963}: drive type 3
GetVolumePathNamesForVolumeName 234
GetVolumePathNamesForVolumeName X:
add found volume: \\?\Volume{d4a1fedc-dc0d-11e2-b0f0-806e6f6e6963} | X: |  | 00727f78
QueryDosDevice C: \Device\HarddiskVolume4
QueryDosDevice E: \Device\HarddiskVolume5
QueryDosDevice H: \Device\HarddiskVolume3
QueryDosDevice I: \Device\HarddiskVolume2
QueryDosDevice M: \Device\HarddiskVolume6
QueryDosDevice X: \Device\HarddiskVolume7
volume: \\?\Volume{e8a31bcb-8ba0-11e2-9203-806e6f6e6963} | C: |  found 1
volume: \\?\Volume{e8a31bcc-8ba0-11e2-9203-806e6f6e6963} | E: |  found 1
volume: \\?\Volume{11177be4-dc20-11e2-ae1e-806e6f6e6963} | H: |  found 1
volume: \\?\Volume{bbc7e66f-74de-4147-a8a9-5139169e8464} | I: |  found 1
volume: \\?\Volume{76e9ac8c-93b1-11e2-a48d-bc5ff444bb7d} | M: |  found 1
volume: \\?\Volume{d4a1fedc-dc0d-11e2-b0f0-806e6f6e6963} | X: |  found 1
ntfs volume create list 0.003491 seconds
create thread
new thread (0)
13 24
Loading structure 00000125: 226838 folders, 1314068 files...
_db_index_add 0: 0, 006ca5d8
_db_index_add 1: 0, 006caa10
_db_index_add 2: 0, 006cadb8
_db_index_add 3: 0, 006ca8a8
_db_index_add 4: 0, 006cad28
_db_index_add 5: 0, 006ca7d0
WM_ACTIVATE 00000001 00000000, lastfocus 00000000, current focus 00000000
cached oneclickactivate 0
enter setfocus
leave setfocus
enter main loop
MSG: 022611f4 c1ac 00000000 00000000
MSG: 02af0ff8 0402 00000000 00000000
MSG: 005d2722 0005 00000000 00000000
MSG: 02af0ff8 c091 00000000 00000000
MSG: 022611f4 0402 00000000 00000000
EVENT: 0043df20 040d0340
EVENT: 0043dee0 040d0340
new results
MSG: 02af0ff8 0402 00000000 00000000
MSG: 04010388 000f 00000000 00000000
MSG: 010e26fe 0113 00000001 00000000
fs out of date 0
fs NTFS C: 1
fs out of date 0
fs NTFS E: 1
fs out of date 0
fs NTFS H: 1
fs out of date 0
fs NTFS I: 1
MSG: 022611f4 0402 00000000 00000000
fs out of date 0
fs NTFS M: 1
fs out of date 0
fs NTFS X: 1
EVENT: 0043df20 040d0340
MSG: 02af0ff8 0402 00000000 00000000
MSG: 04010388 0113 0000002d 00000000
loaded run history in 0.045243 seconds
run history data count: 9270, data: 1223784 bytes
run history ptr count: 4929
total run history memory usage: 1367284 bytes
update index C:
open volume \\?\Volume{e8a31bcb-8ba0-11e2-9203-806e6f6e6963}
CreateFileW(): GetLastError(): 5: Failed to open volume \\?\Volume{e8a31bcb-8ba0-11e2-9203-806e6f6e6963}
opened -1 0.000046
create thread
new thread (1)
_service_client_ioctrl 0, s 0 r 4
MSG: 00950448 0118 0000ffff 0018e610
_service_client_ioctrl reply 0
open service volume \\?\Volume{e8a31bcb-8ba0-11e2-9203-806e6f6e6963}
_service_client_ioctrl 1, s 49 r 0
_service_client_ioctrl reply 0
_service_client_ioctrl 18, s 40 r 65536
_service_client_ioctrl reply 0



updated C: in 4.457803 seconds
update index E:
open volume \\?\Volume{e8a31bcc-8ba0-11e2-9203-806e6f6e6963}
CreateFileW(): GetLastError(): 5: Failed to open volume \\?\Volume{e8a31bcc-8ba0-11e2-9203-806e6f6e6963}
opened -1 0.000042
open service volume \\?\Volume{e8a31bcc-8ba0-11e2-9203-806e6f6e6963}
_service_client_ioctrl 1, s 49 r 0
_service_client_ioctrl reply 0
_service_client_ioctrl 18, s 40 r 65536
_service_client_ioctrl reply 0

updated E: in 2.542193 seconds
update index H:
open volume \\?\Volume{11177be4-dc20-11e2-ae1e-806e6f6e6963}
CreateFileW(): GetLastError(): 5: Failed to open volume \\?\Volume{11177be4-dc20-11e2-ae1e-806e6f6e6963}
opened -1 0.000077
open service volume \\?\Volume{11177be4-dc20-11e2-ae1e-806e6f6e6963}
_service_client_ioctrl 1, s 49 r 0
_service_client_ioctrl reply 0
_service_client_ioctrl 18, s 40 r 65536
_service_client_ioctrl reply 0

updated H: in 0.481739 seconds
update index I:
open volume \\?\Volume{bbc7e66f-74de-4147-a8a9-5139169e8464}
CreateFileW(): GetLastError(): 5: Failed to open volume \\?\Volume{bbc7e66f-74de-4147-a8a9-5139169e8464}
opened -1 0.000073
open service volume \\?\Volume{bbc7e66f-74de-4147-a8a9-5139169e8464}
_service_client_ioctrl 1, s 49 r 0
_service_client_ioctrl reply 0
_service_client_ioctrl 18, s 40 r 65536
_service_client_ioctrl reply 0

updated I: in 0.641228 seconds
update index M:
open volume \\?\Volume{76e9ac8c-93b1-11e2-a48d-bc5ff444bb7d}
CreateFileW(): GetLastError(): 5: Failed to open volume \\?\Volume{76e9ac8c-93b1-11e2-a48d-bc5ff444bb7d}
opened -1 0.000075
open service volume \\?\Volume{76e9ac8c-93b1-11e2-a48d-bc5ff444bb7d}
_service_client_ioctrl 1, s 49 r 0
_service_client_ioctrl reply 0
_service_client_ioctrl 18, s 40 r 65536
_service_client_ioctrl reply 0

updated M: in 0.066011 seconds
update index X:
open volume \\?\Volume{d4a1fedc-dc0d-11e2-b0f0-806e6f6e6963}
CreateFileW(): GetLastError(): 5: Failed to open volume \\?\Volume{d4a1fedc-dc0d-11e2-b0f0-806e6f6e6963}
opened -1 0.000063
open service volume \\?\Volume{d4a1fedc-dc0d-11e2-b0f0-806e6f6e6963}
_service_client_ioctrl 1, s 49 r 0
_service_client_ioctrl reply 0
_service_client_ioctrl 18, s 40 r 65536
_service_client_ioctrl reply 0

updated X: in 0.177070 seconds
updated fd for Locate in 0.000003 seconds
updated fd for Locate in 0.000000 seconds
updated fd for Locate in 0.000001 seconds
updated fd for Locate in 0.000000 seconds
updated fd for Cache in 0.000001 seconds
updated fd for Cache in 0.000001 seconds
updated fd for Cache in 0.000001 seconds
remove subfolders and files from 48
create thread
new thread (2)
create thread
new thread (3)
create thread
new thread (4)
create thread
new thread (5)
parent backup count 0
create thread
create thread
create thread
create thread
removed 0 subfolders and 0 files from 48 in 0.017955 seconds
updated fd for 8 in 0.000002 seconds
remove subfolders and files from 8
create thread
create thread
create thread
create thread
parent backup count 0
create thread
create thread
create thread
create thread
removed 0 subfolders and 0 files from 8 in 0.009859 seconds
updated fd for Cache in 0.000002 seconds
updated fd for NoScript_NUKER in 0.000001 seconds
updated fd for NoScript_NUKER in 0.000001 seconds

processed usn records in 37.159991 seconds
loaded 226766 folders, 1314798 files, in 46.050877 seconds
MSG: 022611f4 0402 00000000 00000000
EVENT: 004121c0 0076a7c8
DB_WAIT: _db_load_complete_proc waiting...
DB_WAIT: _db_load_complete_proc waited 0.000008 seconds
start all monitors (ntfs: 6 refs: 0)
_service_client_ioctrl 32, s 89 r 4
_service_client_ioctrl reply 0
ntfs service monitor 00000000 ffffffff
_service_client_ioctrl 32, s 89 r 4
_service_client_ioctrl reply 0
ntfs service monitor 00000000 ffffffff
_service_client_ioctrl 32, s 89 r 4
_service_client_ioctrl reply 0
ntfs service monitor 00000000 ffffffff
_service_client_ioctrl 32, s 89 r 4
_service_client_ioctrl reply 0
ntfs service monitor 00000000 ffffffff
_service_client_ioctrl 32, s 89 r 4
_service_client_ioctrl reply 0
ntfs service monitor 00000000 ffffffff
_service_client_ioctrl 32, s 89 r 4
_service_client_ioctrl reply 0
ntfs service monitor 00000000 ffffffff
ntfs monitor 00000000 ffffffff
ntfs monitor 00000000 ffffffff
ntfs monitor 00000000 ffffffff
ntfs monitor 00000000 ffffffff
ntfs monitor 00000000 ffffffff
ntfs monitor 00000000 ffffffff
_service_client_ioctrl 80, s 0 r 0
_service_client_ioctrl reply 0
config volume: \\?\Volume{e8a31bcb-8ba0-11e2-9203-806e6f6e6963} | C: | 
add volume: \\?\Volume{e8a31bcb-8ba0-11e2-9203-806e6f6e6963} | C: | 
config volume: \\?\Volume{e8a31bcc-8ba0-11e2-9203-806e6f6e6963} | E: | 
add volume: \\?\Volume{e8a31bcc-8ba0-11e2-9203-806e6f6e6963} | E: | 
config volume: \\?\Volume{11177be4-dc20-11e2-ae1e-806e6f6e6963} | H: | 
add volume: \\?\Volume{11177be4-dc20-11e2-ae1e-806e6f6e6963} | H: | 
config volume: \\?\Volume{bbc7e66f-74de-4147-a8a9-5139169e8464} | I: | 
add volume: \\?\Volume{bbc7e66f-74de-4147-a8a9-5139169e8464} | I: | 
config volume: \\?\Volume{76e9ac8c-93b1-11e2-a48d-bc5ff444bb7d} | M: | 
add volume: \\?\Volume{76e9ac8c-93b1-11e2-a48d-bc5ff444bb7d} | M: | 
config volume: \\?\Volume{d4a1fedc-dc0d-11e2-b0f0-806e6f6e6963} | X: | 
add volume: \\?\Volume{d4a1fedc-dc0d-11e2-b0f0-806e6f6e6963} | X: | 
VEH 242024456
volume \\?\Volume{bbc7e66f-74de-4147-a8a9-5139169e8464}: drive type 3
GetVolumePathNamesForVolumeName 234
GetVolumePathNamesForVolumeName I:
add found volume: \\?\Volume{bbc7e66f-74de-4147-a8a9-5139169e8464} | I: |  | 00728128
volume \\?\Volume{11177be4-dc20-11e2-ae1e-806e6f6e6963}: drive type 3
GetVolumePathNamesForVolumeName 234
GetVolumePathNamesForVolumeName H:
add found volume: \\?\Volume{11177be4-dc20-11e2-ae1e-806e6f6e6963} | H: |  | 007284b8
volume \\?\Volume{e8a31bcb-8ba0-11e2-9203-806e6f6e6963}: drive type 3
GetVolumePathNamesForVolumeName 234
GetVolumePathNamesForVolumeName C:
add found volume: \\?\Volume{e8a31bcb-8ba0-11e2-9203-806e6f6e6963} | C: |  | 00728b18
volume \\?\Volume{e8a31bcc-8ba0-11e2-9203-806e6f6e6963}: drive type 3
GetVolumePathNamesForVolumeName 234
GetVolumePathNamesForVolumeName E:
add found volume: \\?\Volume{e8a31bcc-8ba0-11e2-9203-806e6f6e6963} | E: |  | 00727f78
volume \\?\Volume{76e9ac8c-93b1-11e2-a48d-bc5ff444bb7d}: drive type 3
GetVolumePathNamesForVolumeName 234
GetVolumePathNamesForVolumeName M:
add found volume: \\?\Volume{76e9ac8c-93b1-11e2-a48d-bc5ff444bb7d} | M: |  | 00728ae8
volume \\?\Volume{d4a1fedc-dc0d-11e2-b0f0-806e6f6e6963}: drive type 3
GetVolumePathNamesForVolumeName 234
GetVolumePathNamesForVolumeName X:
add found volume: \\?\Volume{d4a1fedc-dc0d-11e2-b0f0-806e6f6e6963} | X: |  | 00727468
QueryDosDevice C: \Device\HarddiskVolume4
QueryDosDevice E: \Device\HarddiskVolume5
QueryDosDevice H: \Device\HarddiskVolume3
QueryDosDevice I: \Device\HarddiskVolume2
QueryDosDevice M: \Device\HarddiskVolume6
QueryDosDevice X: \Device\HarddiskVolume7
volume: \\?\Volume{e8a31bcb-8ba0-11e2-9203-806e6f6e6963} | C: |  found 1
volume: \\?\Volume{e8a31bcc-8ba0-11e2-9203-806e6f6e6963} | E: |  found 1
volume: \\?\Volume{11177be4-dc20-11e2-ae1e-806e6f6e6963} | H: |  found 1
volume: \\?\Volume{bbc7e66f-74de-4147-a8a9-5139169e8464} | I: |  found 1
volume: \\?\Volume{76e9ac8c-93b1-11e2-a48d-bc5ff444bb7d} | M: |  found 1
volume: \\?\Volume{d4a1fedc-dc0d-11e2-b0f0-806e6f6e6963} | X: |  found 1
ntfs volume create list 0.001039 seconds
check for file list changes
checked for file list changes in 0.000006 seconds
search '' filter 'ext:3g2;3gp;3gp2;3gpp;amr;amv;asf;avi;bdmv;bik;d2v;divx;drc;dsa;dsm;dss;dsv;evo;f4v;flc;fli;flic;flv;hdmov;ifo;ivf;m1v;m2p;m2t;m2ts;m2v;m4b;m4p;m4v;mkv;mp2v;mp4;mp4v;mpe;mpeg;mpg;mpls;mpv2;mpv4;mov;mts;ogm;ogv;pss;pva;qt;ram;ratdvd;rm;rmm;rmvb;roq;rpm;smil;smk;swf;tp;tpr;ts;vob;vp6;webm;wm;wmp;wmv;h264;ra;srt;dtapart;part' sort 5
ext: count 1/75, 3g2
ext: count 2/75, 3gp2
...
ext: count 75/75, divx
term 02fa5078, flags: 3140, next: 0efd6610, notnext: 00000000
folderop: 0, fileop: 0, term: 
term 0efd6610, flags: 3140, next: 00000000, notnext: 00000000
folderop: 1, fileop: 162, term: ext:3g2;3gp;3gp2;3gpp;amr;amv;asf;avi;bdmv;bik;d2v;divx;drc;dsa;dsm;dss;dsv;evo;f4v;flc;fli;flic;flv;hdmov;ifo;ivf;m1v;m2p;m2t;m2ts;m2v;m4b;m4p;m4v;mkv;mp2v;mp4;mp4v;mpe;mpeg;mpg;mpls;mpv2;mpv4;mov;mts;ogm;ogv;pss;pva;qt;ram;ratdvd;rm;rmm;rmvb;roq;rpm;smil;smk;swf;tp;tpr;ts;vob;vp6;webm;wm;wmp;wmv;h264;ra;srt;dtapart;part
create thread
EVENT: 004128a0 0076a7c8
EVENT: 0043df20 040d0340
SET SORT 4
create thread
EVENT: 0043df20 040d0340
create thread
MSG: 02af0ff8 0402 00000000 00000000
create thread
create thread
found 0 folders, size 0, db search time taken: 0.000379 seconds
create thread
create thread
create thread
create thread
found 111120 files, size 459188, db search time taken: 0.037307 seconds
MSG: 022611f4 0402 00000000 00000000
EVENT: 0043dee0 040d0340
total size 6056620372972, calculated in 0.003752 seconds
set sort 5 1
SET SORT 3 5
finished sort, time taken 0.000054 seconds
update selection 0.000000 seconds
MSG: 022611f4 0402 00000000 00000000
EVENT: 0043df20 040d0340
EVENT: 004128a0 0076a7c8
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000009 seconds
EVENT: 0043dee0 040d0340
new results
EVENT: 00446880 040d0340
when ready 8 00000000 00000000
MSG: 022611f4 0402 00000000 00000000
MSG: 02af0ff8 0402 00000000 00000000
MSG: 04010388 000f 00000000 00000000
create thread

update m 1 82070288
MSG: 022611f4 0402 00000000 00000000
EVENT: 00439d60 0076a7c8
_db_monitor_ntfs_update_event_proc 0
start _db_monitor_ntfs_update_thread_proc
create thread
update index E:
_service_client_ioctrl 34, s 48 r 65536
_service_client_ioctrl reply 0
USN_RECORD 951610840, FLAGS 00000020, PARENT FRN 0006000000005553, FRN 00c50000000195ef, reason CREATE (00000100), filename 5YLGP8CHS4JSCV66MBN6.temp
_service_client_ioctrl 34, s 48 r 65536
_service_client_ioctrl reply 0
USN_RECORD 951610952, FLAGS 00000020, PARENT FRN 0006000000005553, FRN 00c50000000195ef, reason DATA_EXTEND CREATE (00000102), filename 5YLGP8CHS4JSCV66MBN6.temp
_service_client_ioctrl 34, s 48 r 65536
_service_client_ioctrl reply 0
_service_client_ioctrl 35, s 16 r 40
_service_client_ioctrl reply 0
_service_client_ioctrl 35, s 16 r 40
_service_client_ioctrl reply 0
updated E: in 0.001136 seconds
resume ntfs monitor 1
_service_client_ioctrl 33, s 48 r 0
MSG: 022611f4 0402 00000000 00000000
EVENT: 004377e0 0076a7c8
create thread
_service_client_ioctrl reply 0
_db_monitor_ntfs_process_usn_records_thread_proc
MSG: 022611f4 0402 00000000 00000000
EVENT: 00433b50 0076a7c8
MSG: 022611f4 0402 00000000 00000000
EVENT: 0040e440 0076a7c8
updated fd for CustomDestinations in 0.000004 seconds
updated fd for CustomDestinations in 0.000001 seconds
updated fd for 5YLGP8CHS4JSCV66MBN6.temp in 0.000005 seconds
updated fd for CustomDestinations in 0.000000 seconds
processed usn records in 0.000569 seconds
processed ntfs usn records in 0.000605 seconds
MSG: 022611f4 0402 00000000 00000000
EVENT: 004128a0 0076a7c8
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000009 seconds
EVENT: 00446880 040d0340
MSG: 022611f4 0402 00000000 00000000
MSG: 022611f4 0113 00000007 00000000
MSG: 04010388 0113 0000002d 00000000
MSG: 04010388 0113 0000002d 00000000
update m 1 82070288
MSG: 022611f4 0402 00000000 00000000
EVENT: 00439d60 0076a7c8
_db_monitor_ntfs_update_event_proc 0
start _db_monitor_ntfs_update_thread_proc
create thread
update index E:
_service_client_ioctrl 34, s 48 r 65536
_service_client_ioctrl reply 0
USN_RECORD 951611064, FLAGS 00000020, PARENT FRN 0006000000005553, FRN 00c50000000195ef, reason CLOSE DATA_EXTEND CREATE (80000102), filename 5YLGP8CHS4JSCV66MBN6.temp
USN_RECORD 951611176, FLAGS 00000020, PARENT FRN 0006000000005553, FRN 00c50000000195ef, reason BASIC_INFO_CHANGE (00008000), filename 5YLGP8CHS4JSCV66MBN6.temp
USN_RECORD 951611392, FLAGS 00000020, PARENT FRN 0006000000005553, FRN 00c50000000195ef, reason BASIC_INFO_CHANGE SECURITY_CHANGE (00008800), filename 5YLGP8CHS4JSCV66MBN6.temp
USN_RECORD 951611504, FLAGS 00000122, PARENT FRN 0006000000005553, FRN 008c00000001a54e, reason CREATE (00000100), filename c00ab7717503333e.customDestinations-ms~RF629b1cbb.TMP
USN_RECORD 951611672, FLAGS 00000122, PARENT FRN 0006000000005553, FRN 008c00000001a54e, reason CLOSE CREATE (80000100), filename c00ab7717503333e.customDestinations-ms~RF629b1cbb.TMP
USN_RECORD 951611840, FLAGS 00000122, PARENT FRN 0006000000005553, FRN 008c00000001a54e, reason CLOSE DELETE (80000200), filename c00ab7717503333e.customDestinations-ms~RF629b1cbb.TMP
USN_RECORD 951612008, FLAGS 00000020, PARENT FRN 0006000000005553, FRN 009400000001a4f3, reason RENAME_OLD_NAME (00001000), filename c00ab7717503333e.customDestinations-ms
USN_RECORD 951612144, FLAGS 00000020, PARENT FRN 0006000000005553, FRN 009400000001a4f3, reason RENAME_NEW_NAME (00002000), filename c00ab7717503333e.customDestinations-ms~RF629b1cbb.TMP
USN_RECORD 951612312, FLAGS 00000020, PARENT FRN 0006000000005553, FRN 00c50000000195ef, reason BASIC_INFO_CHANGE SECURITY_CHANGE RENAME_OLD_NAME (00009800), filename 5YLGP8CHS4JSCV66MBN6.temp
USN_RECORD 951612424, FLAGS 00000020, PARENT FRN 0006000000005553, FRN 00c50000000195ef, reason BASIC_INFO_CHANGE SECURITY_CHANGE RENAME_NEW_NAME (0000a800), filename c00ab7717503333e.customDestinations-ms
USN_RECORD 951612560, FLAGS 00000020, PARENT FRN 0006000000005553, FRN 009400000001a4f3, reason CLOSE RENAME_NEW_NAME (80002000), filename c00ab7717503333e.customDestinations-ms~RF629b1cbb.TMP
USN_RECORD 951612728, FLAGS 00000020, PARENT FRN 0006000000005553, FRN 00c50000000195ef, reason BASIC_INFO_CHANGE CLOSE SECURITY_CHANGE RENAME_NEW_NAME (8000a800), filename c00ab7717503333e.customDestinations-ms
USN_RECORD 951612864, FLAGS 00000020, PARENT FRN 0006000000005553, FRN 009400000001a4f3, reason CLOSE DELETE (80000200), filename c00ab7717503333e.customDestinations-ms~RF629b1cbb.TMP
_service_client_ioctrl 34, s 48 r 65536
_service_client_ioctrl reply 0
_service_client_ioctrl 35, s 16 r 40
_service_client_ioctrl reply 0
_service_client_ioctrl 35, s 16 r 40
_service_client_ioctrl reply 0
_service_client_ioctrl 35, s 16 r 40
_service_client_ioctrl reply 0
_service_client_ioctrl 35, s 16 r 40
_service_client_ioctrl reply 0
updated E: in 0.001366 seconds
resume ntfs monitor 1
_service_client_ioctrl 33, s 48 r 0
MSG: 022611f4 0402 00000000 00000000
EVENT: 004377e0 0076a7c8
create thread
_db_monitor_ntfs_process_usn_records_thread_proc
_service_client_ioctrl reply 0
MSG: 022611f4 0402 00000000 00000000
EVENT: 0040e440 0076a7c8
updated fd for CustomDestinations in 0.000015 seconds
EVENT: 00433b50 0076a7c8
updated fd for 5YLGP8CHS4JSCV66MBN6.temp in 0.000013 seconds

processed usn records in 0.001265 seconds
processed ntfs usn records in 0.001305 seconds
MSG: 022611f4 0402 00000000 00000000
EVENT: 004128a0 0076a7c8
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000019 seconds
EVENT: 00446880 040d0340
MSG: 022611f4 0402 00000000 00000000

update m 1 82070288
MSG: 022611f4 0402 00000000 00000000
EVENT: 00439d60 0076a7c8
_db_monitor_ntfs_update_event_proc 0
start _db_monitor_ntfs_update_thread_proc
create thread
update index E:
_service_client_ioctrl 34, s 48 r 65536
_service_client_ioctrl reply 0
USN_RECORD 951613032, FLAGS 00000020, PARENT FRN 0006000000005553, FRN 009500000001a4f3, reason CREATE (00000100), filename A80F2G8ABI6MXR8BM8HN.temp
_service_client_ioctrl 34, s 48 r 65536
_service_client_ioctrl reply 0
USN_RECORD 951613144, FLAGS 00000020, PARENT FRN 0006000000005553, FRN 009500000001a4f3, reason DATA_EXTEND CREATE (00000102), filename A80F2G8ABI6MXR8BM8HN.temp
_service_client_ioctrl 34, s 48 r 65536
_service_client_ioctrl reply 0
_service_client_ioctrl 35, s 16 r 40
_service_client_ioctrl reply 0
_service_client_ioctrl 35, s 16 r 40
_service_client_ioctrl reply 0
updated E: in 0.000879 seconds
resume ntfs monitor 1
_service_client_ioctrl 33, s 48 r 0
MSG: 022611f4 0402 00000000 00000000
EVENT: 004377e0 0076a7c8
create thread
_db_monitor_ntfs_process_usn_records_thread_proc
_service_client_ioctrl reply 0
MSG: 022611f4 0402 00000000 00000000
EVENT: 00433b50 0076a7c8
MSG: 022611f4 0402 00000000 00000000
EVENT: 0040e440 0076a7c8
updated fd for CustomDestinations in 0.000005 seconds
updated fd for CustomDestinations in 0.000001 seconds
updated fd for A80F2G8ABI6MXR8BM8HN.temp in 0.000016 seconds
updated fd for CustomDestinations in 0.000001 seconds
processed usn records in 0.000460 seconds
processed ntfs usn records in 0.000482 seconds
MSG: 022611f4 0402 00000000 00000000
EVENT: 004128a0 0076a7c8
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000019 seconds
EVENT: 00446880 040d0340
MSG: 022611f4 0402 00000000 00000000
MSG: 022611f4 0113 00000007 00000000
MSG: 04010388 0113 0000002d 00000000
MSG: 04010388 0113 0000002d 00000000
update m 1 82070288
MSG: 022611f4 0402 00000000 00000000
EVENT: 00439d60 0076a7c8
_db_monitor_ntfs_update_event_proc 0
start _db_monitor_ntfs_update_thread_proc
create thread
update index E:
_service_client_ioctrl 34, s 48 r 65536
_service_client_ioctrl reply 0
USN_RECORD 951613256, FLAGS 00000020, PARENT FRN 0006000000005553, FRN 009500000001a4f3, reason CLOSE DATA_EXTEND CREATE (80000102), filename A80F2G8ABI6MXR8BM8HN.temp

updated E: in 0.001595 seconds
resume ntfs monitor 1
_service_client_ioctrl 33, s 48 r 0
MSG: 022611f4 0402 00000000 00000000
EVENT: 004377e0 0076a7c8
create thread
_db_monitor_ntfs_process_usn_records_thread_proc
_service_client_ioctrl reply 0
updated fd for CustomDestinations in 0.000015 seconds
MSG: 022611f4 0402 00000000 00000000
EVENT: 0040e440 0076a7c8
EVENT: 00433b50 0076a7c8
updated fd for A80F2G8ABI6MXR8BM8HN.temp in 0.000164 seconds

processed usn records in 0.001161 seconds
processed ntfs usn records in 0.001189 seconds
MSG: 022611f4 0402 00000000 00000000
EVENT: 004128a0 0076a7c8
DB_WAIT: _db_ready_proc waiting...
DB_WAIT: _db_ready_proc waited 0.000019 seconds
EVENT: 00446880 040d0340
MSG: 022611f4 0402 00000000 00000000
MSG: 022611f4 0113 00000007 00000000
MSG: 04010388 0113 0000002d 00000000
MSG: 04010388 0113 0000002d 00000000
MSG: 022611f4 0113 00000007 00000000
MSG: 04010388 0113 0000002d 00000000
MSG: 04010388 0113 0000002d 00000000
MSG: 022611f4 0113 00000007 00000000
MSG: 04010388 0113 0000002d 00000000
WM_ACTIVATE 00000001 00000000, lastfocus 00950448, current focus 00000000



USN_RECORD 1573985408, FLAGS 00000020, PARENT FRN 0005000000014440, FRN 0018000000039ed5, reason CREATE (00000100), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi.mp4.avi
USN_RECORD 1573985592, FLAGS 00000020, PARENT FRN 0005000000014440, FRN 0018000000039ed5, reason DATA_EXTEND CREATE (00000102), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi.mp4.avi
USN_RECORD 1573993680, FLAGS 00000020, PARENT FRN 0005000000014440, FRN 0018000000039ed5, reason DATA_EXTEND DATA_OVERWRITE CREATE (00000103), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi.mp4.avi
USN_RECORD 1573993864, FLAGS 00000020, PARENT FRN 0005000000014440, FRN 0018000000039ed5, reason CLOSE DATA_EXTEND DATA_OVERWRITE CREATE (80000103), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi.mp4.avi
USN_RECORD 1573994144, FLAGS 00000020, PARENT FRN 0005000000014440, FRN 006c000000049056, reason CREATE (00000100), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi.mp4
USN_RECORD 1573994320, FLAGS 00000020, PARENT FRN 0005000000014440, FRN 006c000000049056, reason BASIC_INFO_CHANGE CREATE (00008100), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi.mp4
USN_RECORD 1573994496, FLAGS 00000020, PARENT FRN 0005000000014440, FRN 006c000000049056, reason BASIC_INFO_CHANGE CLOSE CREATE (80008100), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi.mp4
USN_RECORD 1573994672, FLAGS 00000020, PARENT FRN 0005000000014440, FRN 0018000000039ed5, reason OBJECT_ID_CHANGE (00080000), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi.mp4.avi
USN_RECORD 1573994856, FLAGS 00000020, PARENT FRN 0005000000014440, FRN 0018000000039ed5, reason CLOSE OBJECT_ID_CHANGE (80080000), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi.mp4.avi
USN_RECORD 1574007872, FLAGS 00000020, PARENT FRN 0005000000014440, FRN 0018000000039ed5, reason RENAME_OLD_NAME (00001000), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi.mp4.avi
USN_RECORD 1574008056, FLAGS 00000020, PARENT FRN 0005000000014440, FRN 0018000000039ed5, reason RENAME_NEW_NAME (00002000), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi
USN_RECORD 1574008224, FLAGS 00000020, PARENT FRN 0005000000014440, FRN 0018000000039ed5, reason CLOSE RENAME_NEW_NAME (80002000), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi
USN_RECORD 1574008392, FLAGS 00000020, PARENT FRN 0005000000014440, FRN 0018000000039ed5, reason CLOSE DELETE (80000200), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi



USN_RECORD 947209408, FLAGS 00000020, PARENT FRN 00020000000001ff, FRN 00d900000001a44d, reason CREATE (00000100), filename Ghost Rider 3 Goes Crazy  FULL XTRA FOOTAGE.avi.lnk
USN_RECORD 947209576, FLAGS 00000020, PARENT FRN 00020000000001ff, FRN 00d900000001a44d, reason DATA_EXTEND CREATE (00000102), filename Ghost Rider 3 Goes Crazy  FULL XTRA FOOTAGE.avi.lnk
USN_RECORD 947209744, FLAGS 00000020, PARENT FRN 00020000000001ff, FRN 00d900000001a44d, reason CLOSE DATA_EXTEND CREATE (80000102), filename Ghost Rider 3 Goes Crazy  FULL XTRA FOOTAGE.avi.lnk
USN_RECORD 947225656, FLAGS 00000020, PARENT FRN 00020000000001ff, FRN 00d900000001a44d, reason CLOSE DELETE (80000200), filename Ghost Rider 3 Goes Crazy  FULL XTRA FOOTAGE.avi.lnk
USN_RECORD 947225824, FLAGS 00000020, PARENT FRN 00020000000001ff, FRN 0120000000011e4e, reason CREATE (00000100), filename Ghost Rider 3 Goes Crazy  FULL XTRA FOOTAGE.avi.lnk
USN_RECORD 947225992, FLAGS 00000020, PARENT FRN 00020000000001ff, FRN 0120000000011e4e, reason DATA_EXTEND CREATE (00000102), filename Ghost Rider 3 Goes Crazy  FULL XTRA FOOTAGE.avi.lnk
USN_RECORD 947226160, FLAGS 00000020, PARENT FRN 00020000000001ff, FRN 0120000000011e4e, reason CLOSE DATA_EXTEND CREATE (80000102), filename Ghost Rider 3 Goes Crazy  FULL XTRA FOOTAGE.avi.lnk
USN_RECORD 947255816, FLAGS 00000020, PARENT FRN 00020000000001ff, FRN 0120000000011e4e, reason CLOSE DELETE (80000200), filename Ghost Rider 3 Goes Crazy  FULL XTRA FOOTAGE.avi.lnk
USN_RECORD 947255984, FLAGS 00000020, PARENT FRN 00020000000001ff, FRN 0121000000011e4e, reason CREATE (00000100), filename Ghost Rider 3 Goes Crazy  FULL XTRA FOOTAGE.avi.lnk
USN_RECORD 947256152, FLAGS 00000020, PARENT FRN 00020000000001ff, FRN 0121000000011e4e, reason DATA_EXTEND CREATE (00000102), filename Ghost Rider 3 Goes Crazy  FULL XTRA FOOTAGE.avi.lnk
USN_RECORD 947256320, FLAGS 00000020, PARENT FRN 00020000000001ff, FRN 0121000000011e4e, reason CLOSE DATA_EXTEND CREATE (80000102), filename Ghost Rider 3 Goes Crazy  FULL XTRA FOOTAGE.avi.lnk
USN_RECORD 947279832, FLAGS 00000020, PARENT FRN 00020000000001ff, FRN 00e800000001a44d, reason CREATE (00000100), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE.avi.lnk
USN_RECORD 947280000, FLAGS 00000020, PARENT FRN 00020000000001ff, FRN 00e800000001a44d, reason DATA_EXTEND CREATE (00000102), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE.avi.lnk
USN_RECORD 947280168, FLAGS 00000020, PARENT FRN 00020000000001ff, FRN 00e800000001a44d, reason CLOSE DATA_EXTEND CREATE (80000102), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE.avi.lnk
USN_RECORD 947331360, FLAGS 00000020, PARENT FRN 00020000000001ff, FRN 00e800000001a44d, reason CLOSE DELETE (80000200), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE.avi.lnk
USN_RECORD 947331528, FLAGS 00000020, PARENT FRN 00020000000001ff, FRN 01a3000000011202, reason CREATE (00000100), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE.avi.lnk
USN_RECORD 947331696, FLAGS 00000020, PARENT FRN 00020000000001ff, FRN 01a3000000011202, reason DATA_EXTEND CREATE (00000102), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE.avi.lnk
USN_RECORD 947331864, FLAGS 00000020, PARENT FRN 00020000000001ff, FRN 01a3000000011202, reason CLOSE DATA_EXTEND CREATE (80000102), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE.avi.lnk
USN_RECORD 947332848, FLAGS 00000020, PARENT FRN 00020000000001ff, FRN 00e900000001a44d, reason CREATE (00000100), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi.mp4.avi.lnk
USN_RECORD 947333040, FLAGS 00000020, PARENT FRN 00020000000001ff, FRN 00e900000001a44d, reason DATA_EXTEND CREATE (00000102), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi.mp4.avi.lnk
USN_RECORD 947333232, FLAGS 00000020, PARENT FRN 00020000000001ff, FRN 00e900000001a44d, reason CLOSE DATA_EXTEND CREATE (80000102), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi.mp4.avi.lnk



USN_RECORD 4365464, FLAGS 00000020, PARENT FRN 000100000003702d, FRN 000100000003704a, reason RENAME_OLD_NAME (00001000), filename Ghost Rider 3 Goes Crazy  FULL XTRA FOOTAGE.avi
USN_RECORD 4365624, FLAGS 00000020, PARENT FRN 000100000003702d, FRN 000100000003704a, reason RENAME_NEW_NAME (00002000), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE.avi
USN_RECORD 4365784, FLAGS 00000020, PARENT FRN 000100000003702d, FRN 000100000003704a, reason CLOSE RENAME_NEW_NAME (80002000), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE.avi
USN_RECORD 4365944, FLAGS 00000020, PARENT FRN 000800000001cdbb, FRN 000c00000001cdbc, reason CREATE (00000100), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE.avi
USN_RECORD 4366104, FLAGS 00000420, PARENT FRN 000800000001cdbb, FRN 000c00000001cdbc, reason REPARSE_POINT_CHANGE CREATE (00100100), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE.avi
USN_RECORD 4366336, FLAGS 00000420, PARENT FRN 000800000001cdbb, FRN 000c00000001cdbc, reason CLOSE REPARSE_POINT_CHANGE CREATE (80100100), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE.avi
USN_RECORD 4367712, FLAGS 00000420, PARENT FRN 000800000001cdbb, FRN 000c00000001cdbc, reason CLOSE DELETE (80000200), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE.avi
USN_RECORD 4367992, FLAGS 00000020, PARENT FRN 000100000003702d, FRN 000100000003704a, reason RENAME_OLD_NAME (00001000), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE.avi
USN_RECORD 4368152, FLAGS 00000020, PARENT FRN 000800000001cdbb, FRN 000100000003704a, reason RENAME_NEW_NAME (00002000), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE.avi
USN_RECORD 4368312, FLAGS 00000020, PARENT FRN 000800000001cdbb, FRN 000100000003704a, reason CLOSE RENAME_NEW_NAME (80002000), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE.avi
USN_RECORD 4368472, FLAGS 00000020, PARENT FRN 000800000001cdbb, FRN 000100000003704a, reason RENAME_OLD_NAME (00001000), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE.avi
USN_RECORD 4368776, FLAGS 00000020, PARENT FRN 000800000001cdbb, FRN 000d00000001cdbc, reason CREATE (00000100), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi
USN_RECORD 4368944, FLAGS 00000020, PARENT FRN 000800000001cdbb, FRN 000d00000001cdbc, reason DATA_EXTEND CREATE (00000102), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi
USN_RECORD 4369112, FLAGS 00000020, PARENT FRN 000800000001cdbb, FRN 000d00000001cdbc, reason DATA_EXTEND DATA_OVERWRITE CREATE (00000103), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi
USN_RECORD 4369280, FLAGS 00000020, PARENT FRN 000800000001cdbb, FRN 000d00000001cdbc, reason BASIC_INFO_CHANGE DATA_EXTEND DATA_OVERWRITE CREATE (00008103), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi
USN_RECORD 4369448, FLAGS 00000020, PARENT FRN 000800000001cdbb, FRN 000d00000001cdbc, reason BASIC_INFO_CHANGE CLOSE DATA_EXTEND DATA_OVERWRITE CREATE (80008103), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi
USN_RECORD 4369616, FLAGS 00000020, PARENT FRN 000800000001cdbb, FRN 000d00000001cdbc, reason BASIC_INFO_CHANGE (00008000), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi
USN_RECORD 4369784, FLAGS 00000020, PARENT FRN 000800000001cdbb, FRN 000d00000001cdbc, reason BASIC_INFO_CHANGE CLOSE (80008000), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi
USN_RECORD 4369952, FLAGS 00000020, PARENT FRN 000800000001cdbb, FRN 000d00000001cdbc, reason RENAME_OLD_NAME (00001000), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi
USN_RECORD 4370120, FLAGS 00000020, PARENT FRN 000100000003702d, FRN 000d00000001cdbc, reason RENAME_NEW_NAME (00002000), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi
USN_RECORD 4370432, FLAGS 00000020, PARENT FRN 000100000003702d, FRN 000d00000001cdbc, reason CLOSE RENAME_NEW_NAME (80002000), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi



updated fd for Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi.mp4.avi in 0.000000 seconds
updated fd for Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi.mp4.avi in 0.000000 seconds
updated fd for Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi.mp4.avi in 0.000000 seconds
updated fd for Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi.mp4 in 0.000000 seconds
updated fd for Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi.mp4 in 0.000000 seconds
updated fd for Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi.mp4.avi in 0.000001 seconds
updated fd for Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi.mp4.avi in 0.000000 seconds
updated fd for Ghost Rider 3 Goes Crazy  FULL XTRA FOOTAGE.avi.lnk in 0.000001 seconds
updated fd for Ghost Rider 3 Goes Crazy  FULL XTRA FOOTAGE.avi.lnk in 0.000001 seconds
updated fd for Ghost Rider 3 Goes Crazy  FULL XTRA FOOTAGE.avi.lnk in 0.000000 seconds
updated fd for Ghost Rider 3 Goes Crazy  FULL XTRA FOOTAGE.avi.lnk in 0.000001 seconds
updated fd for Ghost Rider 3 Goes Crazy  FULL XTRA FOOTAGE.avi.lnk in 0.000001 seconds
updated fd for Ghost Rider 3 Goes Crazy  FULL XTRA FOOTAGE.avi.lnk in 0.000001 seconds
updated fd for Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE.avi.lnk in 0.000000 seconds
updated fd for Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE.avi.lnk in 0.000000 seconds
updated fd for Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE.avi.lnk in 0.000001 seconds
updated fd for Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE.avi.lnk in 0.000001 seconds
updated fd for Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi.mp4.avi.lnk in 0.000001 seconds
updated fd for Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi.mp4.avi.lnk in 0.000001 seconds
updated fd for Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE.avi in 0.000001 seconds
updated fd for Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE.avi in 0.000001 seconds
updated fd for Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi in 0.000000 seconds
updated fd for Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi in 0.000001 seconds
updated fd for Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi in 0.000000 seconds
updated fd for Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi in 0.000000 seconds
updated fd for Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi in 0.000001 seconds
updated fd for Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi in 0.000000 seconds

Code: Select all

USN_RECORD 1573994144, FLAGS 00000020, PARENT FRN 0005000000014440, FRN 006c000000049056, reason CREATE (00000100), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi.mp4
USN_RECORD 1573994320, FLAGS 00000020, PARENT FRN 0005000000014440, FRN 006c000000049056, reason BASIC_INFO_CHANGE CREATE (00008100), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi.mp4
USN_RECORD 1573994496, FLAGS 00000020, PARENT FRN 0005000000014440, FRN 006c000000049056, reason BASIC_INFO_CHANGE CLOSE CREATE (80008100), filename Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi.mp4

void
Site Admin
Posts: 5808
Joined: Fri Oct 16, 2009 11:31 pm

Re: Ghosts on Halloween, Never

Post by void » Sun Oct 30, 2016 1:03 am

Thanks for the debug output.

From the log, it looks like the zero sized file Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi.mp4 was created, and Everything successfully got the fd (file information / size / date modified / etc..) for the file at the time it was created. Does this file still exist in Everything and in Windows Explorer?

One thought came to mind, C:*.avi would not match Ghost Rider 3 Goes Crazy + FULL XTRA FOOTAGE_Ato48.avi.mp4
Unless you disable match whole filename when using wildcards from Tools -> Options -> Search.

therube
Posts: 2761
Joined: Thu Sep 03, 2009 6:48 pm

Re: Ghosts on Halloween, Never

Post by therube » Sun Oct 30, 2016 11:40 am

Does this file still exist in Everything and in Windows Explorer?
I cannot believe I didn't check that!
Yes it does!

Sorry for the noise!
PEBKAC or PEBCAK or both, mumble, grumble.

void
Site Admin
Posts: 5808
Joined: Fri Oct 16, 2009 11:31 pm

Re: Ghosts on Halloween, Never

Post by void » Sun Oct 30, 2016 3:05 pm

At least this one was easy, some of the other issues with 1.4.1 have me scratching my head..

I might have to re-think how the Everything beta logs debug information. I might have to enable debug with redirection to a file by default for the next beta update..
There's a small performance cost in writing to this debug file and constantly flushing it, but at least I would have something to figure out some of issues with 1.4.1.

therube
Posts: 2761
Joined: Thu Sep 03, 2009 6:48 pm

Re: Ghosts on Halloween, Never

Post by therube » Mon Oct 26, 2020 6:38 pm

Just bumping this again - at least temporarily - as we are at the witching hour - and, I just had this occur, again.
So... I have to see - if the file actually exists - at 0 bytes.
Interesting to know its' "times". Why it might be? What steps I took that could have let to it happening?

therube
Posts: 2761
Joined: Thu Sep 03, 2009 6:48 pm

Re: Ghosts on Halloween, Never

Post by therube » Tue Oct 27, 2020 2:45 pm

Just bumping this again - at least temporarily - as we are at the witching hour - and, I just had this occur, again.
So... I have to see - if the file actually exists - at 0 bytes.
Interesting to know its' "times". Why it might be? What steps I took that could have let to it happening?
Trick or treat!
Ghosts of, oh, MPV had the file open & I didn't realize it.
Closed it from there, & (magically) the ghost - vanished.
Spooky.

void
Site Admin
Posts: 5808
Joined: Fri Oct 16, 2009 11:31 pm

Re: Ghosts on Halloween, Never

Post by void » Thu Oct 29, 2020 8:37 am

What has most likely occurred is the file was deleted and you could see this in Explorer.
However, the USN Journal entry describing the deletion might not have been posted.
Everything can only detect changes from posted USN Journal entries.
The USN Journal entry for the deletion should be posted when all open handles have been closed.

Post Reply