delorie.com/archives/browse.cgi   search  
Mail Archives: cygwin/2018/03/08/18:43:23

X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
:list-unsubscribe:list-subscribe:list-archive:list-post
:list-help:sender:from:subject:to:message-id:date:mime-version
:content-type:content-transfer-encoding; q=dns; s=default; b=LRk
vUfjOrKXcW4bQGwWZULICMcwP3CauCkjnuHkeJOpPtKU/ACSWu0KO1WI4o0GhHxw
FQvIjmyVI3tPcgGpUkBZa9IhOpCwB07iAyc7dreHzqLGQCIryTnnh2MnJGAMY4th
xhVqCxZi2vniXVTyt0dM5XQB7UP5x+J8dp/oIDR4=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
:list-unsubscribe:list-subscribe:list-archive:list-post
:list-help:sender:from:subject:to:message-id:date:mime-version
:content-type:content-transfer-encoding; s=default; bh=BEJGXJBbv
94w+RFDgkGnt4oZZrE=; b=YKeU07LkyBoagxvmEt7ZJNeEslFsqC/RlqDnL7LEv
WvIkKAXljtj0/7Yol/ogpyyVEsSJnFQU++sJle7CiIkBZOzKqIW4TTugnXwVZnPN
eFYdbnyGz4dxrpwAYXcFtjHJZCQ1rLYMAsShEN2fvlzgR9zXhkf4JFVBSNG5dPJ0
50=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-3.6 required=5.0 tests=AWL,BAYES_40,GIT_PATCH_2,KAM_LAZY_DOMAIN_SECURITY,T_RP_MATCHES_RCVD autolearn=ham version=3.3.2 spammy=AppData, H*r:FreeBSD, H*r:sk:mail.ka, Hx-spam-relays-external:sk:mail.ka
X-HELO: mail.karlov.mff.cuni.cz
From: Pavel Kudrna <Pavel DOT Kudrna AT mff DOT cuni DOT cz>
Subject: Files with attribute temporary invisible in cygwin
To: cygwin AT cygwin DOT com
Message-ID: <4e49da21-7af2-cc3f-97cf-f3fef083a9dd@mff.cuni.cz>
Date: Fri, 9 Mar 2018 00:43:15 +0100
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.3.0
MIME-Version: 1.0

There exist files in windows 7 which can't be deleted using cygwin "rm" 
command. Files are visible from windows command line or Windows Explorer 
but are invisible by "ls -lA" command:

$   ls -lA `cygpath 'C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings'`
total 16
-rwxrwx---+ 1 Administrators SYSTEM 1016 Aug 23  2017 
telemetry.ASM-WindowsDefault.json.bk
-rwxrwx---+ 1 Administrators SYSTEM  795 Aug 23  2017 utc.app.json.bk

Dir command from cmd.exe shows that there are 2 more files (with 
extension .json) previously invisible:

c:\>  dir C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings /b
telemetry.ASM-WindowsDefault.json
telemetry.ASM-WindowsDefault.json.bk
utc.app.json
utc.app.json.bk

It seems to be connected with the temporary attribute which both 2 
mentioned files have set:

c:\>  for %i in 
(C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\*) do @echo %~ai %i
--a----t- 
c:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.ASM-WindowsDefault.json
--a------ 
c:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.ASM-WindowsDefault.json.bk
--a----t- c:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.app.json
--a------ 
c:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.app.json.bk

Together with above mentioned 2 files

C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.app.json
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.ASM-WindowsDefault.json

I have found three more files in Windows 7

C:\ProgramData\Microsoft\Network\Downloader\qmgr0.dat
C:\ProgramData\Microsoft\Network\Downloader\qmgr1.dat
C:\Users\%USERNAME%\AppData\Local\Microsoft\Office\15.0\OfficeFileCache\LocalCacheFileEditManager\FSD-CNRY.FSD

with the same behavior (invisible by ls, undeletable by rm but visible 
from windows) and all have the temporary attribute set.

Files are invisible/undeletable with ls/rm even from WindowsPE which 
does not run from C: disk and can not keep those files open.

Pavel Kudrna

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -


  webmaster     delorie software   privacy  
  Copyright © 2019   by DJ Delorie     Updated Jul 2019