Post by pyotr filipivichI'm going to interpret that to mean that Microsoft has once again
been its usually hyperactive Boy Scout self, and proudly fixed
something which didn't need doing, all to "improve my computer
experience." They should eat worms.
C:\$Recycle.bin has SID (security identifier) folders underneath
D:\$Recycle.bin has SID (security identifier) folders underneath
/etc/updatedb.conf
sudo xed /etc/updatedb.conf # remove /media from scan
(mount all disk icons needing a scan)
sudo updatedb # takes a while if you have a million files
locate '*' | grep -i '$recycle.bin' # list all files, scrape out case-insensitive
Now, I removed most of the entries in here and left a few for coloring.
The desktop.ini files have the capability of "remembering the Music column"
representation, which is why we're interested in cleaning them out.
They're not necessarily all "guilty". Just one of them might have
erroneous info. The long strings of numbers are SIDs, and user 1000
and user 1001 are non-administrator references. 500 is the administrator.
Ones in the neighborhood of 500 might be "wheel-flavor" accounts,
power accounts for various subsystems.
When you treat a Windows disc as a data disk for another Windows OS,
then the number of accounts can grow. As for the rest, like the
"short-looking SIDs", try here.
https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/security-identifiers-in-windows
******* recently created data partition *******
/media/mint/VAULT/$RECYCLE.BIN
/media/mint/VAULT/$RECYCLE.BIN/S-1-5-21-2334889057-1538521736-696511958-1001
/media/mint/VAULT/$RECYCLE.BIN/S-1-5-21-3768549767-1934788099-1503758287-1000
/media/mint/VAULT/$RECYCLE.BIN/S-1-5-21-2334889057-1538521736-696511958-1001/desktop.ini
/media/mint/VAULT/$RECYCLE.BIN/S-1-5-21-3768549767-1934788099-1503758287-1000/desktop.ini
******* Windows 10 OS partition *******
/media/mint/WIN10/$Recycle.Bin
/media/mint/WIN10/$Recycle.Bin/S-1-5-18 <== LocalSystem acct
/media/mint/WIN10/$Recycle.Bin/S-1-5-21-1135891513-58090663-38047098-1001 \__ two different OSes
/media/mint/WIN10/$Recycle.Bin/S-1-5-21-2195631993-1849129244-3949737396-1000 /
/media/mint/WIN10/$Recycle.Bin/S-1-5-18/desktop.ini
/media/mint/WIN10/$Recycle.Bin/S-1-5-21-1135891513-58090663-38047098-1001/desktop.ini
/media/mint/WIN10/$Recycle.Bin/S-1-5-21-2195631993-1849129244-3949737396-1000/desktop.ini
/media/mint/WIN10/Windows/WinSxS/FileMaps/$recycle.bin.cdf-ms <== Noise
******* Windows 7 OS partition *******
/media/mint/WIN7PRO/$Recycle.Bin
/media/mint/WIN7PRO/$Recycle.Bin/S-1-5-18
/media/mint/WIN7PRO/$Recycle.Bin/S-1-5-21-1047500965-2950535253-1571800197-1000
/media/mint/WIN7PRO/$Recycle.Bin/S-1-5-21-1135891513-58090663-38047098-1001
/media/mint/WIN7PRO/$Recycle.Bin/S-1-5-21-3768549767-1934788099-1503758287-1000
/media/mint/WIN7PRO/$Recycle.Bin/S-1-5-21-3768549767-1934788099-1503758287-501 <=== hmmm
/media/mint/WIN7PRO/$Recycle.Bin/S-1-5-18/desktop.ini
/media/mint/WIN7PRO/$Recycle.Bin/S-1-5-21-1047500965-2950535253-1571800197-1000/desktop.ini
/media/mint/WIN7PRO/$Recycle.Bin/S-1-5-21-1135891513-58090663-38047098-1001/desktop.ini
/media/mint/WIN7PRO/$Recycle.Bin/S-1-5-21-3768549767-1934788099-1503758287-1000/$IVEZO9U.default <=== trash???
/media/mint/WIN7PRO/$Recycle.Bin/S-1-5-21-3768549767-1934788099-1503758287-1000/desktop.ini
/media/mint/WIN7PRO/$Recycle.Bin/S-1-5-21-3768549767-1934788099-1503758287-501/desktop.ini
The 501 is related to Microsoft\Protect and to FontCache.
The $IVEZO9U might be a deleted Thunderbird/Seamonkey/Firefox profile
and the folder is empty, implying the content disappeared but the
folder couldn't be deleted. No impact on "Music columns" though.
From the Linux side, Recycle.Bin is case sensitive, so you have
to be careful how you scrape the info.
Whereas issuing commands from here, Windows is (mostly) case-insensitive.
Windows does now support case sensitivity, in the sense that it allows
two items to have the same name, as long as the case of the letters is
different.
https://www.get-itsolutions.com/commands-clean-recycle-bin/
rd /s /q d:\$RECYCLE.BIN # EXAMPLE cleaning the D:\ trash
In that example, rd = removedir , s = remove directory trees worth , q = quiet
If a user has run Win98, WinXP, Vista, Win10, MacOS, Linux... then
the partition could collect all sorts of wacky variants on recycle bin
and trash for names. Don't be alarmed by the amount of identifying
forensic info in there :-)
The reason for me doing that from Linux, scrape the names, is
so "I don't miss any". Sorta. The problem on the Windows side,
is the potential for permissions to hide stuff. For example, when
you start flinging that "rd" command around as Administrator,
don't necessarily expect it to do a good job.
And nfi.exe is allowed to list most of the important stuff.
The nfi.exe can still have trouble with System Volume Information
for example. So it's almost as good as my Linux file list, just
short a few items that aren't normally important. For a "space hog"
search, then nfi.exe could miss VSS files in SVI. And you must not
delete those from Linux either. Only use GUI-based interfaces
for cleaning out that pig pen.
So yes, you can do some house-cleaning if you want. Just have
tools handy, so you can verify what got removed. And have a backup
handy, as this is an experiment, right ?
Paul