В Windows 10 последней версии, зайдя в утилиту «Управление дисками», а также в DiskPart или сторонних утилитах управления разделами дисков вы можете обнаружить скрытый диск с меткой PortableBaseLayer, объемом 8 Гб с файловой системой NTFS, в статусе которого заявлено «Только чтение».
В этой статье о том, что представляет собой диск PortableBaseLayer в Windows 10, для чего он нужен и как его можно отключить и удалить при необходимости.
Назначение виртуального диска PortableBaseLayer
Диск PortableBaseLayer — это виртуальный диск .vhdx, создающийся автоматически и подключающийся к системе, когда вы активируете функцию «Песочница Windows 10» (Windows Sandbox) и представляющий собой хранилище виртуальной машины, используемой для возможностей песочницы.
Несмотря на то, что в информации о диске указан размер в 8 Гб, в действительности на диске он занимает менее 1 Гб по умолчанию.
Убедиться в этом можно, заглянув в папку
C:\ProgramData\Microsoft\Windows\Containers\BaseImages\Буквенно-цифровой_идентификатор\
и обратив внимание на размер файла BaseLayer.vhdx (учитывайте, что папка ProgramData скрытая, перейти к ней можно, введя C:\ProgramData\ в адресную строку проводника и нажав Enter).
Как отключить и удалить диск PortableBaseLayer в Windows 10
Отключить этот диск и удалить соответствующий ему файл стандартными средствами не получится. Тем не менее, сделать это возможно, пожертвовав функциональностью «Песочницы»:
- Зайдите в Панель управления (открыть её можно используя поиск на панели задач) — «Программы и компоненты».
- Слева выберите «Включение и отключение компонентов Windows».
- В списке компонентов снимите отметку с «Песочница Windows» и нажмите «Ок». Вам будет предложено перезагрузить компьютер, сделайте это.
- После перезагрузки диск PortableBaseLayer будет отключен. Примечание: в одном из моих тестов он по какой-то причине исчез только после второй перезагрузки.
- Cам файл диска останется в прежнем расположении C:\ProgramData\Microsoft\Windows\Containers\BaseImages\. Пройдите по этому пути и удалите файл виртуального жесткого диска BaseLayer.vhdx, после отключения в системе он удалится без проблем.
Примечание: при тестировании способов удаления рассматриваемого диска обратил внимание, что если песочница была установлена с помощью скрипта в Windows 10 Домашняя (стандартно в этой редакции функция отсутствует), то удаление предлагаемым методом не срабатывает. Решения (простого и безопасного) пока не подобрал.
This topic has been deleted. Only users with topic management privileges can see it.
Re: Nothing to see
I get the same from yesterday. Windows 10 Pro 1809 17763.194. I tried with latest versions of Opera, Firefox, Chrome all showing same results.
Latest from logs says.
[2018-12-19 19:13:18.919-0360] No tasks to perform.
[2018-12-19 19:16:18.932-0360] Checking in with server
[2018-12-19 19:16:18.933-0360] Server = > ‘agent.vulndetect.com’
[2018-12-19 19:16:18.949-0360] Connecting to server: agent.vulndetect.com
[2018-12-19 19:16:19.741-0360] Server returned 201 =>
[2018-12-19 19:16:19.744-0360] Check-in complete
[2018-12-19 19:16:19.744-0360] Next scheduled check-in is in 3 minutes
[2018-12-19 19:16:19.744-0360] Current configuration:
version:: 0.10.11.0
server : agent.vulndetect.com
guid1::
guid2::
guid3::
checkInInterval : 180 seconds
checkInRetryDelay : 60 seconds
maxCheckInRetryCount : 2
dataRetryDelay : 600 seconds
inspectionWindow : 21600 seconds
timezoneOffset : -360 minutes
serverTime : 2018-12-19 19:16:20 (UTC)
nextInspectionTime : 2018-12-20 13:10:00 (local time)
checkInNow:: false
noFilesystem : false
noRegistry : false
noWinUpdate : false
noSystem : false
noPackage:: true
[2018-12-19 19:16:19.744-0360] No tasks to perform.
@Tom Thanks. It worked now.
Though it scanned some of the Containers sub directories like below, but it did complete — Enumerated filesystem in 15.439ms
Adobe Flash Player 32.0.0.114 Ok
By: Adobe Systems Incorporated
Based on: C:\ProgramData\Microsoft\Windows\Containers\BaseImages\2bf54f2a-aaae-44b6-af12-df9f443cfa5b\Files\Users\All Users\Microsoft\Windows\Containers\BaseImages\2bf54f2a-aaae-44b6-af12-df9f443cfa5b\Files\Windows\System32\Macromed\Flash\Flash.ocx
Open product homepage
curl 7.55.1 Insecure
Recommended version: 7.63 Ok
By: haxx.se
Based on: C:\ProgramData\Microsoft\Windows\Containers\BaseImages\2bf54f2a-aaae-44b6-af12-df9f443cfa5b\Files\Users\All Users\Microsoft\Windows\Containers\BaseImages\2bf54f2a-aaae-44b6-af12-df9f443cfa5b\Files\Windows\System32\curl.exe
Open product homepage
Some are marked as Unknown / Untracked
Microsoft Office 2016 16.0.11126.20200 Unknown
Microsoft Outlook 2016 16.0.11126.20266 Unknown
Microsoft PowerPoint 2016 16.0.11126.20266 Unknown
Microsoft Word 2016 16.0.11126.20266 Unknown
Opera Internet Browser 58.0.3135.53 Untracked Unknown
Amazon Kindle for PC 1.25.1.52064 Untracked Ok
@KI108 We now have a new version of the agent, can you please test it and report back to us?
https://test.vulndetect.com/dl/secteerSetup.exe
The new version is NOT available from the normal download location yet.
@Tom Sure, I will once you update the agent. Thanks for looking into it.
@KI108 Sorry for the long wait, we are planning to make improvements to the agent during next week. I hope you have time to test later in the week.
@KI108 Yes, this was expected
We did not have time to work on changes to the agent yet, and this is something that we need to investigate and test properly, before we deploy it.
And I’m afraid that we need to clear an issue or two more before we can fix this one, sorry.
I’ll keep you posted when there is news.
@Tom
It worked this time.
Last CheckIn a minute ago
Last Inspection a minute ago
Next CheckIn in an hour
Next Inspection in a day
Though it did the c:\ and came back with the bad allocation after all the 0x00000005 => Access is denied.
Also the version still shows version:: 0.10.11.0 in the log. With the back -end changes you mentioned in other post of Nothing to see was this supposed to change?
@Tom
It was set to 08:20 CST and I had changed to 09:20 CST to force it yesterday but it still didn’t do anything.
Last CheckIn 14 minutes ago
Last Inspection 7 days ago
Next CheckIn in 9 minutes
Next Inspection in 9 minutes
Will see what happens in the next 10 minutes
@Tom
I have emailed the log to you. Thanks for looking into it.
@KI108 No, the agent will run if the PC is turned on. So no need for logging in via browser.
But I suppose this could be because even the automatic inspection is failing for you.
Could you send me your log again via email?
@Tom
Another question. Does one need to be logged in through browser for inspections to work? The reason I ask is, I did not login to vulndetect.com for few days and when i logged in today, I see last inspection 6 days ago.
Last CheckIn a minute ago
Last Inspection 6 days ago
Next CheckIn in 11 minutes
For some reason there is an issue in that folder, that cause the structure to recurse / loop endlessly.
We are looking at approaches to avoid following such loops (in a generic way, rather than excluding that specific folder). Due to the holidays a solution is not right around the corner, but it is on the high priority list and we will address it soon.
For the time being I ran Secteer immediate for path C:\Program files and again with C:\Program Files (x86) to see if any software was not latest and I found two.
After Secunia PSI went away, I have been using PatchMyPC, SUMO, Heimdal Pro to see what needs updating. Unlike Secunia which used to show almost everything, these 3 give bits and pieces and that is why I was looking for a better option.
Thanks for looking into this.
Like Secteer excludes scanning Recycle Bin, similarly this directory structure of Containers needs to be excluded also.
C:\ProgramData\Microsoft\Windows
and
C:\Users\All Users\Microsoft\Windows
That’s my thought.
@Tom Once again appreciate your time and patience in resolving these issues.
C:\ProgramData\Microsoft\Windows\Containers
Directory of C:\ProgramData\Microsoft\Windows\Containers
10/02/2018 11:00 PM <DIR> .
10/02/2018 11:00 PM <DIR> ..
12/21/2018 06:47 PM <DIR> BaseImages
12/22/2018 11:54 AM <DIR> Dumps
12/21/2018 08:20 PM <DIR> Sandboxes
12/21/2018 08:20 PM <DIR> Zygotes
0 File(s) 0 bytes
6 Dir(s) 230,609,969,152 bytes free
Directory of C:\ProgramData\Microsoft\Windows\Containers\BaseImages
12/21/2018 06:47 PM <DIR> .
12/21/2018 06:47 PM <DIR> ..
12/21/2018 06:47 PM <DIR> 81d3cadc-05e5-4680-9e82-e479c73896b6
0 File(s) 0 bytes
Directory of C:\ProgramData\Microsoft\Windows\Containers\BaseImages\81d3cadc-05e5-4680-9e82-e479c73896b6
12/21/2018 06:47 PM <DIR> .
12/21/2018 06:47 PM <DIR> ..
12/21/2018 06:46 PM <DIR> Files
12/21/2018 06:47 PM <DIR> Snapshot
12/21/2018 06:46 PM 4,194,304 SystemTemplate.vhdx
12/21/2018 06:46 PM 75,497,472 SystemTemplateBase.vhdx
2 File(s) 79,691,776 bytes
4 Dir(s) 230,609,874,944 bytes free
File folder
C:\ProgramData\Microsoft\Windows
3.23 GB (3,469,314,133 bytes)
10,497 Files, 1,134 Folders
Read-only (Only applies to files in folder)
These were Containers Properties under C:\ProgramData\Microsoft\Windows
Basically it starts of with 34% memory and slowly increased around 80%, before it quit with bad allocation. The Secteer itself starts of around 2 MB or so and slowly went past 2000 MB or so.
Mostly it was c:\ProgramData\Microsoft\Windows… or \Users\All Users\Microsoft\Windows\Containers\BaseImages\e5ee5788-c3b5-420c-9baa-16c0eee19a9e\ which was doing recursively inside up to 23 times in one path like below
[2018-12-21 18:10:58.180-0360] Error (a) enumerating directory ‘c:\Users\All Users\Microsoft\Windows\Containers\BaseImages\e5ee5788-c3b5-420c-9baa-16c0eee19a9e\Files
\Users\All Users\Microsoft\Windows\Containers\BaseImages\e5ee5788-c3b5-420c-9baa-16c0eee19a9e\Files
\Users\All Users\Microsoft\Windows\Containers\BaseImages\e5ee5788-c3b5-420c-9baa-16c0eee19a9e\Files
\Users\All Users\Microsoft\Windows\Containers\BaseImages\e5ee5788-c3b5-420c-9baa-16c0eee19a9e\Files
\Users\All Users\Microsoft\Windows\Containers\BaseImages\e5ee5788-c3b5-420c-9baa-16c0eee19a9e\Files
\Users\All Users\Microsoft\Windows\Containers\BaseImages\e5ee5788-c3b5-420c-9baa-16c0eee19a9e\Files
\Users\All Users\Microsoft\Windows\Containers\BaseImages\e5ee5788-c3b5-420c-9baa-16c0eee19a9e\Files
\Users\All Users\Microsoft\Windows\Containers\BaseImages\e5ee5788-c3b5-420c-9baa-16c0eee19a9e\Files
\Users\All Users\Microsoft\Windows\Containers\BaseImages\e5ee5788-c3b5-420c-9baa-16c0eee19a9e\Files
\Users\All Users\Microsoft\Windows\Containers\BaseImages\e5ee5788-c3b5-420c-9baa-16c0eee19a9e\Files
\Users\All Users\Microsoft\Windows\Containers\BaseImages\e5ee5788-c3b5-420c-9baa-16c0eee19a9e\Files
\Users\All Users\Microsoft\Windows\Containers\BaseImages\e5ee5788-c3b5-420c-9baa-16c0eee19a9e\Files
\Users\All Users\Microsoft\Windows\Containers\BaseImages\e5ee5788-c3b5-420c-9baa-16c0eee19a9e\Files
\Users\All Users\Microsoft\Windows\Containers\BaseImages\e5ee5788-c3b5-420c-9baa-16c0eee19a9e\Files
\Users\All Users\Microsoft\Windows\Containers\BaseImages\e5ee5788-c3b5-420c-9baa-16c0eee19a9e\Files
\Users\All Users\Microsoft\Windows\Containers\BaseImages\e5ee5788-c3b5-420c-9baa-16c0eee19a9e\Files
\Users\All Users\Microsoft\Windows\Containers\BaseImages\e5ee5788-c3b5-420c-9baa-16c0eee19a9e\Files
\Users\All Users\Microsoft\Windows\Containers\BaseImages\e5ee5788-c3b5-420c-9baa-16c0eee19a9e\Files
\Users\All Users\Microsoft\Windows\Containers\BaseImages\e5ee5788-c3b5-420c-9baa-16c0eee19a9e\Files
\Users\All Users\Microsoft\Windows\Containers\BaseImages\e5ee5788-c3b5-420c-9baa-16c0eee19a9e\Files
\Users\All Users\Microsoft\Windows\Containers\BaseImages\e5ee5788-c3b5-420c-9baa-16c0eee19a9e\Files
\Users\All Users\Microsoft\Windows\Containers\BaseImages\e5ee5788-c3b5-420c-9baa-16c0eee19a9e\Files
\Users\All Users\Microsoft\Windows\Containers\BaseImages\e5ee5788-c3b5-420c-9baa-16c0eee19a9e\Files
\Users\WDAGUtilityAccount\AppData\Local\Application Data’ : 0x00000005 => Access is denied.
@Tom
As mentioned in chat
Running immediate
with «C:» gave
[2018-12-21 18:05:10.392-0360] Enumerating ‘c:’
[2018-12-21 18:05:10.419-0360] Recycle Bin: c:$Recycle.Bin
[2018-12-21 18:05:10.421-0360] Skipping ‘c:$Recycle.Bin’, since it is a Recycle Bin
[2018-12-21 18:05:10.442-0360] Error (a) enumerating directory ‘c:\Documents and Settings’ : 0x00000005 => Access is denied.
[2018-12-21 18:05:21.171-0360] Error (a) enumerating directory ‘c:\ProgramData\Application Data’ : 0x00000005 => Access is denied.
[2018-12-21 18:05:21.173-0360] Error (a) enumerating directory ‘c:\ProgramData\Desktop’ : 0x00000005 => Access is denied.
[2018-12-21 18:05:21.174-0360] Error (a) enumerating directory ‘c:\ProgramData\Documents’ : 0x00000005 => Access is denied.
[2018-12-21 18:05:21.768-0360] Error (a) enumerating directory ‘c:\ProgramData\Microsoft\Diagnosis\FeedbackHub’ : 0x00000005 => Access is denied.
Error (a) enumerating directory ‘c:\ProgramData\Microsoft\Diagnosis\TenantStorage\P-ARIA’ : 0x00000005 => Access is denied.
[2018-12-21 18:05:21.769-0360] Error (a) enumerating directory ‘c:\ProgramData\Microsoft\Diagnosis\TimeTravelDebuggingStorage’ : 0x00000005 => Access is denied.
[2018-12-21 18:05:21.968-0360] Error (a) enumerating directory ‘c:\ProgramData\Microsoft\Windows\Containers\BaseImages\e5ee5788-c3b5-420c-9baa-16c0eee19a9e\Files\Documents and Settings’ : 0x00000005 => Access is denied.
[2018-12-21 18:05:22.381-0360] Error (a) enumerating directory ‘c:\ProgramData\Microsoft\Windows\Containers\BaseImages\e5ee5788-c3b5-420c-9baa-16c0eee19a9e\Files\ProgramData\Application Data’ : 0x00000005 => Access is denied.
[2018-12-21 18:05:22.381-0360]
Just for the record, this answer was sent in the private chat to @KI108 :
The «Error => bad allocation» you see in the log, that is due to the agent not being able to allocate memory.
This puzzles us as it doesn’t use more than 40MB on any of our test boxes, we have really done a lot to limit the memory footprint.
But, this lead us to look at another thing, it is spending around 10 minutes enumerating your filesystem, this usually takes less than a minute, depending on type of drive, system load and number of apps and AV products. Regardless, 10 minutes seems to be a very long time compared to what we normally see.
We suspect there may be a «looping path issue» or multiple symlinks to directories with a lot of files. But this is guess work.
I would appreciate is you could do two things:
-
Monitor the RAM usage in task manager while running the «secteer.exe —immediate»
-
Run
secteer.exe --immediate --path="c:\program files"
or
secteer.exe --immediate --path="c:\program files\mozilla firefox"
or something else specifc
@Tom
Sent. Thanks for looking into my issue. I appreciate your time and patience to try and resolve it.
@KI108 Could you send me your hostname in the chat, then I will go see what we get in the server logs
@Tom
Yes there is authToken in there. I had removed it for posting to the website. But in configuration it just lists
Last Agent IP Address
I removed it here
Last CheckIn
a minute ago
Last Inspection
2 days ago
Next CheckIn
in an hour
Next Inspection
in a day
Host name
I removed it here
Days of week to run inspections
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
Sunday
Hour of day to run inspections
: 15:45 —> I have changed it multiple times and tried
Inspections will run at this time each selected day.
I have changed the Hour of day to run the inspections multiple times to the nearest increment , Installed secteersetup.exe multiple times etc. . but still the same.
I don’t see anything in Configurations to setup.
Per one of the notes i had run — immediate command and it said it sent it to vulndetect yesterday. But still nothing happens.
Thanks for the any help.
Windows 10: Windows folder example with a 9 folder repeating pattern. A bug or by design
Discus and support Windows folder example with a 9 folder repeating pattern. A bug or by design in Windows 10 Gaming to solve the problem; When browsing the following folder location…
Discussion in ‘Windows 10 Gaming’ started by Codegetter, May 18, 2022.
-
Windows folder example with a 9 folder repeating pattern. A bug or by design
When browsing the following folder location C:\ProgramData\Microsoft\Windows\Containers\BaseImages\c88e0cd9-dcce-4d8f-a04b-000442ed9a15\BaseLayer\Files\Users\All Users it was evident that the folders Microsoft through to All Users repeats 16 times before the last folder Users is shown. Thus the depth for this folder is 143 levels which is really odd. This is not an issolated instance as there are numerous other examples where this folder pattern repeats.Is this by design surely not! or a bug when Containers\BaseImages are stored. After cd’ing to C:\Program Data\…\All User used dir \ /AD /S
-
?? How do I PW protect Folders in windows
hmmm?
Sharing files and folders overview You can share the files and folders stored on your computer, on a network, and on the Web. The method you choose depends on whom you want to share files with, and what computer they will use to access the files.When you share files or folders, they are not as protected as they are when you do not share them. People with access to your computer or your network might be able to read, copy, or change files that are in a shared folder. You should always be aware that the files and folders that you share are available to other people and be sure to monitor your shared files and folders on a regular basis.
Important
If your computer is not joined to a domain, you can use the Network Setup Wizard to automatically turn file and printer sharing on or off. To start the Network Setup Wizard, click Start, click Control Panel, click Network and Internet Connections, and then click Network Setup Wizard.
If you both use the same computerYou can put the files you want to share in the Shared Documents folder. Files stored in the Shared Documents folder or its subfolders are always available to other users on your computer.
Step-by-step procedure
NoteIf you are connected to a network domain, the Shared Documents, Shared Pictures, and Shared Music folders are not available.
If both computers are on the same networkYou can share a folder or drive on your computer with others on the network. You can also control whether the files in the shared folder can be modified by other users.
If your computer is connected to a network domain, use this procedure:
Step-by-step procedure
If your computer is connected to a workgroup, use this procedure:Step-by-step procedure
NoteIf you are connected to a network domain, you will need to set the Access control for the folder or drive after sharing it. For more information, go to To set, view, change, or remove file and folder permissions.
If you want to share your files onlineYou can publish pictures and documents on the Web using the Web Publishing Wizard. The files will be stored in a private, online folder that you manage.
Step-by-step procedure
If you don’t want others to access your files
You can prevent other users from accessing your folders and the files they contain. When your computer is connected to a domain, this is called setting permissions for your file or folder. When your computer is connected to a workgroup, this is called making your folders private.
If your computer is connected to a network domain, use this procedure:
Step-by-step procedure
If your computer is connected to a workgroup, use this procedure:Step-by-step procedure
‘HELP’ it can be your friend *Smile
-
Trouble deleting a folder
Thanks for the suggestion but it says «delete folder failed for E:\…..» for each folder I try.
*Confused
Will I be forever stuck with these unnecessary folders? *Oh Well hwell:
-
Windows folder example with a 9 folder repeating pattern. A bug or by design
Hidden folders
I installed `Kane and Lynch` on my PC twice in Program Files(x86) folder but I can`t find them (2 folders with game). But free space on my HDD is lower. So there`re those folders on my hdd. I use option `unhide` hidden folders but still can`t find them. Any suggestions? How can i delete those hidden folders?
When I run istallation for this game I can see those folders in Program Files(x86) folde.
I`m using Win 7 Ultimate 64 bit.
Windows folder example with a 9 folder repeating pattern. A bug or by design
-
Windows folder example with a 9 folder repeating pattern. A bug or by design — Similar Threads — folder example folder
-
Windows 10 screenshot folder bug
in Windows 10 Software and Apps
Windows 10 screenshot folder bug: 1. Hello few months ago i wanted to rename my screenshots because around 100 of them has weird names like: r1, r2 etc.After renaming many of them disappeared but not all, 500 screenshots remained all of them were old, by old i mean few months. I was searching how to recover… -
Windows folder example with a 9 folder repeating pattern. A bug or by design
in Windows 10 Software and Apps
Windows folder example with a 9 folder repeating pattern. A bug or by design: When browsing the following folder location C:\ProgramData\Microsoft\Windows\Containers\BaseImages\c88e0cd9-dcce-4d8f-a04b-000442ed9a15\BaseLayer\Files\Users\All Users it was evident that the folders Microsoft through to All Users repeats 16 times before the last folder Users… -
Windows folder example with a 9 folder repeating pattern. A bug or by design
in Windows 10 Network and Sharing
Windows folder example with a 9 folder repeating pattern. A bug or by design: When browsing the following folder location C:\ProgramData\Microsoft\Windows\Containers\BaseImages\c88e0cd9-dcce-4d8f-a04b-000442ed9a15\BaseLayer\Files\Users\All Users it was evident that the folders Microsoft through to All Users repeats 16 times before the last folder Users… -
bug with thumbnail of folders
in Windows 10 Ask Insider
bug with thumbnail of folders: [ATTACH]for some reason if i put a notepad file into a folder and close the folder the thumbnail of the folder looks slightly corrupted. not sure why but its been like this for a day or 2 and its kind of annoying. already tried clearing out temporary files (thumbnails…
-
Leftover, Bugged Folders
in Windows 10 Network and Sharing
Leftover, Bugged Folders: I renamed my user folder including the required changes in Computer Management and Registry Editor.It glitched my iCloud Drive and iCloud Photos folders in the file explorer main menu and caused other problems, so I reverted back.
Still, there are these two blank folders….
-
Repeatedly regeneration of folders
in Windows 10 Customization
Repeatedly regeneration of folders: I open a downloaded app on my PC and it opens a folder its a rom for a ds emulator and it will create 3 folders «battery» «cheats» and «states» and ill put those 3 folders into a folder bc I have ocd and when I do that and open the rom again it creates those folders again and… -
Windows bug/stupid design or touchpad bug?
in Windows 10 Drivers and Hardware
Windows bug/stupid design or touchpad bug?: There is a delay after typing before touch pad taps will register.Reproduce
Go to Settings > Devices > Touchpad and set «Touchpad sensitivity» to anything other than «most sensitive»
Find some text input field and place the pointer close to the beginning of a line so… -
saving videos to a designated folder
in Windows 10 Network and Sharing
saving videos to a designated folder: How can I save videos to a folder different to Camera Roll that is not the One Drive option?https://answers.microsoft.com/en-us/windows/forum/all/saving-videos-to-a-designated-folder/3b1b1c89-c6a3-45be-b37a-48ad4be3984f»
-
Home folder named Folders is this a bug?
in User Accounts and Family Safety
Home folder named Folders is this a bug?: Hello!I have a notebook running Windows 10 Pro v1803 and I just noticed that the user files icon on the desktop reads «Folders» instead of «Sotiris» which is my user name. This is also what I see as a shortcut in Classic Start Menu instead of «Sotiris» it reads «Folders. If…
-
jo29
- Posts: 35
- Joined: Sat Sep 19, 2020 9:01 pm
ES stopped working
I have a task where es.exe saves a file list periodically. The command is:
A couple of days ago, it stopped working. The process just sits there for hours with no CPU activity until I force quit it. It leaves behind a 0-byte file named export.efu
The variables in the last few days is a system update (Windows 10).
Everything is running as a UI in the background (not as a service). I tried closing and reopening it, system reboot, but the issue persists.
-
horst.epp
- Posts: 1516
- Joined: Fri Apr 04, 2014 3:24 pm
Re: ES stopped working
Post
by horst.epp »
Your example command line works fine here
using the latest versions of es.exe and Everything.
What should a Windows update change here ?
Did you try that a normal es.exe command produces any results ?
______________________________________________________
Windows 11 Home x64 Version 23H2 (OS Build 22631.2792)
Everything 1.5.0.1361a (x64), Everything Toolbar 1.3.2
Es.exe 1.1.0.26
-
jo29
- Posts: 35
- Joined: Sat Sep 19, 2020 9:01 pm
Re: ES stopped working
Post
by jo29 »
I am using the latest version of both (1024 and 1.1.0.26).
hangs in the same way.
works fine and exits.
I tried with a Windows sandbox and things work fine, so it must be something with my current setup.
-
jo29
- Posts: 35
- Joined: Sat Sep 19, 2020 9:01 pm
Re: ES stopped working
Post
by jo29 »
OK. I tried to reproduce the error in the sandbox:
1. First, I renamed the db file to force Everything to recreate it. The issue persists (outside the sandbox).
2. when I copy over my settings file to Everything inside the sandbox, things work fine.
3. When I copy over my (newly-created) db file, the issue appears in the sandbox.
4. I tried to remove my drives (as folders, not NTFS volumes) one by one, and the issue is with my C:\ drive (es.exe works if I remove it). It contains > 1 million entries if this is relevant.
ETA: more details
5. C:\Users = 490,000 files. However, C:\Users\Default, C:\Users\jo29, C:\Users\Public together are < 35,000 files (!) All numbers according to Everything. Windows Explorer reports much lower numbers.
6. C:\ProgramData = 485,000 files according to Everything. Again, Explorer shows much fewer.
7. When I add these two folders together to Everything, es.exe doesn’t work. If only one of them is added, es.exe works.
8. I am starting to think that this has to do with not-really-files reported on scanning or files with too long paths or something screwy with Windows. For example, most of the files in C:\ProgramData have an x on their icon and with Alt+Enter show location beginning with \\?\C:\ and size on disk of 0.
-
void
- Developer
- Posts: 17473
- Joined: Fri Oct 16, 2009 11:31 pm
Re: ES stopped working
Post
by void »
Requesting all files/folders will take a long time to send over IPC.
Please make sure you specify a search when using ES.
Thank you for the crash dump.
I’m not seeing any IPC requests from Everythings end.
The request may have completed and ES is stuck processing the IPC reply.
Could you please try capturing a debug log, this might help find the issue:
- In Everything 1.5, type in the following search and press ENTER:
/debug_log - Run your ES request.
- Wait for ES to hang.
- Let Everything run for a minute.
- Type in the following search and press ENTER:
/restart
Please send your %TEMP%\Everything Debug Log.txt file to support@voidtools.com or send a bug report.
-
jo29
- Posts: 35
- Joined: Sat Sep 19, 2020 9:01 pm
Re: ES stopped working
Post
by jo29 »
Thanks for replying.
I just want to say:
— things were working fine just a couple of days ago with over 2 million files.
— when I tried creating a mini dump of es.exe, it gave the error: «Error configuring dump resources: The system cannot find the file specified.»
— Everything itself is working fine. Only es is showing the problem.
-
void
- Developer
- Posts: 17473
- Joined: Fri Oct 16, 2009 11:31 pm
Re: ES stopped working
Post
by void »
es.exe is limited to 2GB of ram (x86)
The IPC reply uses about 200MB per 1million files.
However, it depends on your filename lengths.
How much memory does ES use before it dies?
I need to compile a x64 version (I have put this on my TODO list)
— when I tried creating a mini dump of es.exe, it gave the error: «Error configuring dump resources: The system cannot find the file specified.»
Sounds like ES is dying and the process no longer exists.
-
jo29
- Posts: 35
- Joined: Sat Sep 19, 2020 9:01 pm
Re: ES stopped working
Post
by jo29 »
void wrote: Mon Dec 11, 2023 9:36 am
How much memory does ES use before it dies?
Around 6MB. It is born dead though, sortof! It doesn’t show activity at all.
However, in a sandbox, I removed some drives to see when es.exe works. I found that when it does, it does reach close to 2GB.
Sounds like ES is dying and the process no longer exists.
But the process is right there for hours if I don’t kill it
-
void
- Developer
- Posts: 17473
- Joined: Fri Oct 16, 2009 11:31 pm
Re: ES stopped working
Post
by void »
Thank you for the logs.
2023-12-11 11:24:14.246: SIZE CHECK 2111479146 2111479146 diff 0 count 2251025
wow, the IPC reply is over 2GB.
This reply is too large for the ES client.
I wonder why the reply is soo large.
It should be under 400MB.
Have you created an es.ini?
-Please try an Everything search for:
exact:es.ini
Maybe you are requesting more than filenames?
-
jo29
- Posts: 35
- Joined: Sat Sep 19, 2020 9:01 pm
Re: ES stopped working
Post
by jo29 »
void wrote: Mon Dec 11, 2023 9:56 am
Have you created an es.ini?
-Please try an Everything search for:
exact:es.ini
Nothing.
Maybe you are requesting more than filenames?
I don’t do it through es, but in Everything I also index some other parameters.
-
void
- Developer
- Posts: 17473
- Joined: Fri Oct 16, 2009 11:31 pm
Re: ES stopped working
Post
by void »
Please try an -IPC1 request:
ES.exe -ipc1 * -export-efu export.efu
Does this also fail?
-
void
- Developer
- Posts: 17473
- Joined: Fri Oct 16, 2009 11:31 pm
Re: ES stopped working
Post
by void »
Some ideas:
If you need to export the data now, please try the GUI: File -> Export…
-How large is this exported file?
Please try the following ES export:
ES.exe path:len:^>=260 -export-efu export.efu
This will save paths longer than 260 characters.
Please check the exported file for any erroneous filenames.
I’m guessing there’s filenames that are thousands of characters..
How many lines in this exported file?
-
jo29
- Posts: 35
- Joined: Sat Sep 19, 2020 9:01 pm
Re: ES stopped working
Post
by jo29 »
void wrote: Mon Dec 11, 2023 10:14 am
If you need to export the data now, please try the GUI: File -> Export…-How large is this exported file?
1GB
A few days ago (before the system update?), the es output file was ~150MB.
Please try the following ES export:
ES.exe path:len:^>=260 -export-efu export.efu
Still hangs.
But I tried «path:len:>=260» in Everything. 860,000 results (!) Most of them in two places:
C:\ProgramData\Microsoft\Windows\Containers\BaseImages\
C:\Users\All Users\Microsoft\Windows\Containers\BaseImages\
I’m guessing there’s filenames that are thousands of characters..
True. I did one file. > 1000 characters.
-
jo29
- Posts: 35
- Joined: Sat Sep 19, 2020 9:01 pm
Re: ES stopped working
Post
by jo29 »
Here is one example:
Code: Select all
\\?\C:\Users\All Users\Microsoft\Windows\Containers\BaseImages\{UUID}\BaseLayer\Files\Users\All Users\Microsoft\Windows\Containers\BaseImages\{UUID}\BaseLayer\Files\Users\All Users\Microsoft\Windows\Containers\BaseImages\{UUID}\BaseLayer\Files\Users\All Users\Microsoft\Windows\Containers\BaseImages\{UUID}\BaseLayer\Files\Users\All Users\Microsoft\Windows\Containers\BaseImages\{UUID}\BaseLayer\Files\Users\All Users\Microsoft\Windows\Containers\BaseImages\{UUID}\BaseLayer\Files\Users\All Users\Microsoft\Windows\Containers\BaseImages\{UUID}\BaseLayer\Files\Users\All Users\Microsoft\Windows\Containers\BaseImages\{UUID}\BaseLayer\Files\Users\All Users\Microsoft\Windows\Containers\BaseImages\{UUID}\BaseLayer\Files\Users\All Users\Microsoft\Windows\Containers\BaseImages\{UUID}\BaseLayer\Files\Users\All Users\Microsoft\Windows\Containers\BaseImages\{UUID}\BaseLayer\Files\Windows\System32\DriverStore\en-US\prnms008.inf_loc
{UUID} is 36 characters.
8. I am starting to think that this has to do with not-really-files reported on scanning or files with too long paths or something screwy with Windows. For example, most of the files in C:\ProgramData have an x on their icon and with Alt+Enter show location beginning with \\?\C:\ and size on disk of 0.
-
void
- Developer
- Posts: 17473
- Joined: Fri Oct 16, 2009 11:31 pm
Re: ES stopped working
Post
by void »
But I tried «path:len:>=260» in Everything. 860,000 results (!) Most of them in two places:
C:\ProgramData\Microsoft\Windows\Containers\BaseImages\
C:\Users\All Users\Microsoft\Windows\Containers\BaseImages\
This would explain the large IPC request.
To exclude these folders:
- In Everything, from the Tools menu, click Options.
- Click the Exclude tab on the left.
- Click Add….
- Select C:\ProgramData\Microsoft\Windows\Containers\BaseImages and click OK.
- Click Add….
- Select C:\Users\All Users\Microsoft\Windows\Containers\BaseImages and click OK.
- Click OK.
-
jo29
- Posts: 35
- Joined: Sat Sep 19, 2020 9:01 pm
Re: ES stopped working
Post
by jo29 »
I did and it works now (es uses ~1.1GB RAM). Thanks.
This is an issue with Windows, isn’t it? There are recursive shortcuts inside these two folders that I am guessing happened either due to the update or due to using Windows Sandbox.
-
void
- Developer
- Posts: 17473
- Joined: Fri Oct 16, 2009 11:31 pm
Re: ES stopped working
Post
by void »
No idea.
These files are created by Windows and are real.
I have no idea if they can be deleted.
I am guessing they are from an update.
-
jo29
- Posts: 35
- Joined: Sat Sep 19, 2020 9:01 pm
Re: ES stopped working
Post
by jo29 »
I noticed that in the ini, there is
Code: Select all
C:\\ProgramData\\Microsoft\\Windows\\Containers\\BaseImages\\{UUID}\\BaseLayer
under ntfs_volume_paths, although, the include in db box is unchecked
860,000
Down to a meager 417,000 now . The ones in C:\Users\All Users\Microsoft\Windows\Containers\BaseImages\ won’t go away for some reason. I tried to exclude
C:\Users\All Users\Microsoft\Windows\Containers\BaseImages\
and
C:\Users\All Users\Microsoft\Windows\Containers\BaseImages\*
but nothing.
Last edited by jo29 on Mon Dec 11, 2023 11:06 am, edited 1 time in total.
-
void
- Developer
- Posts: 17473
- Joined: Fri Oct 16, 2009 11:31 pm
Re: ES stopped working
Post
by void »
Please try manually adding C:\Users\All Users\Microsoft\Windows\Containers\BaseImages as the UI likely doesn’t have permission:
- In Everything, from the Tools menu, click Options.
- Click the Exclude tab on the left.
- Click Add Filter….
- Set the filter to:
C:\Users\All Users\Microsoft\Windows\Containers\BaseImages - Click OK.
- Click OK.
-
void
- Developer
- Posts: 17473
- Joined: Fri Oct 16, 2009 11:31 pm
Re: ES stopped working
Post
by void »
C:\\ProgramData\\Microsoft\\Windows\\Containers\\BaseImages\\{UUID}\\BaseLayer
Please try removing this NTFS volume:
- In Everything, from the Tools menu, click Options.
- Click the NTFS tab on the left.
- Select any offline NTFS volume. (are any listed as offline?)
- Click Remove.
- Click OK.
-
jo29
- Posts: 35
- Joined: Sat Sep 19, 2020 9:01 pm
Re: ES stopped working
Post
by jo29 »
Please try removing this NTFS volume:
Greyed out.
I tried exiting Everything, removing it from the ini but it reappeared.
Filter
That’s what I tried. It worked for the ProgramData folder but not the All Users folder.
-
void
- Developer
- Posts: 17473
- Joined: Fri Oct 16, 2009 11:31 pm
Re: ES stopped working
Post
by void »
C:\\ProgramData\\Microsoft\\Windows\\Containers\\BaseImages\\{UUID}\\BaseLayer
Please try excluding this NTFS volume:
- In Everything, from the Tools menu, click Options.
- Click the NTFS tab on the left.
- Select the C:\\ProgramData\\Microsoft\\Windows\\Containers\\BaseImages\\{UUID}\\BaseLayer NTFS volume. (What is this shown as?)
- Uncheck Include in database.
- Click OK.
-
jo29
- Posts: 35
- Joined: Sat Sep 19, 2020 9:01 pm
Re: ES stopped working
Post
by jo29 »
void wrote: Tue Dec 12, 2023 2:38 am
C:\\ProgramData\\Microsoft\\Windows\\Containers\\BaseImages\\{UUID}\\BaseLayer
Please try excluding this NTFS volume:
- In Everything, from the Tools menu, click Options.
- Click the NTFS tab on the left.
- Select the C:\\ProgramData\\Microsoft\\Windows\\Containers\\BaseImages\\{UUID}\\BaseLayer NTFS volume. (What is this shown as?)
- Uncheck Include in database.
- Click OK.
It is (and was) off.
-
void
- Developer
- Posts: 17473
- Joined: Fri Oct 16, 2009 11:31 pm
Re: ES stopped working
Post
by void »
Everything 1.5.0.1362a will now automatically remove offline NTFS volumes by default.
This is now required as it looks like Microsoft is mounting several different base images.
To automatically remove offline volumes:
- In Everything, from the Tools menu, click Options.
- Click the NTFS tab on the left.
- Check Automatically remove offline volumes.
- Click OK.
Открыв оснастку управления дисками в последней версии Windows 10, вы неожиданно для себя можете обнаружить базовый диск с файловой системой NTFS и меткой PortableBaseLayer, доступный только для чтения. Этот же диск может быть обнаружен при работе с консольной утилитой Diskpart и прочими сторонними менеджерами дисков. Откуда он и как он мог там появиться, если вы не устанавливали на компьютер дополнительных накопителей и не подключали флешек?
Ответ очень прост.
PortableBaseLayer представляет собой виртуальный диск, автоматически создаваемый и подключаемый в Windows 10 1903 при включении компонента Песочница. Физически этот диск представлен файлом BaseLayer.vhdx — контейнером для хранения файлов виртуальной машины. Его размер в оснастке управления дисками указан 8 Гб, но в реальности он меньше 1 Гб.
Убедиться в его наличии вы можете сами, проследовав в Проводнике по адресу:
C:\ProgramData\Microsoft\Windows\Containers\BaseImages\ID
Где ID — идентификатор компонента.
Если вы не пользуетесь Песочницей, то наверняка захотите отключить PortableBaseLayer.
Встроенной оснасткой управления дисками Windows 10 поддерживается создание, подключение и отключение виртуальных дисков, но PortableBaseLayer диск особый и отключить его с помощью штатной оснастки не получится.
Чтобы от него избавиться, вам нужно деактивировать сам компонент «Песочница Windows».
Откройте командой optionalfeatures оснастку «Включение и отключение компонентов Windows», найдите в списке компонент «Песочница Windows», снимите с него галочку и нажмите «OK».
В результате компьютер будет перезагружен, функция виртуализации отключена, а вместе с ней отключен и виртуальный диск. Сам файл BaseLayer.vhdx, однако, останется в прежнем расположении, поэтому после всего вам нужно будет зайти в указанную выше папку и удалить его вручную. Исключение составляет Windows 10 Домашняя с принудительно установленной в неё Песочницей, в ней описанный способ отключения диска PortableBaseLayer не сработает.