Windows demands a minimum amount of free space on its partition. It reserves this space, so it cannot be used. So, Windows would say, the partition is completely full, the free space is zero. But it is not actually full. If the partition is mounted on Linux, Linux would say there is still 6 GB free space on it. And I mostly use Linux (dual-boot on one drive), and I often use these last 6 GB space. It works perfectly fine with Linux and does not cause any issues.
But when I boot Windows with less than 6 GB free, Windows self-destructs. It can never boot again. Even if I delete the 6 GB again, it won't boot.
This has happened several times, and the only solution was to reinstall Windows. (The system restore of the recovery mode does not work. But I did use the recovery console to do the reinstall with dism)
But perhaps there is a better way?
Now I got a list of files modified during boots (from the timestamp):
root:
./DumpStack.log./Intel./Intel/GfxCPLBatchFiles./pagefile.sys./swapfile.sysIn C:\Program Files or (x86):
Alienware/Alienware Command Center/OCControlServiceAlienware/Alienware Command Center/OCControlService/OCControl.Service.Thermal.LogsAlienware/Alienware Command Center/OCControlService/OCControl.Service.Thermal.Logs/2024-03-02.logAlienware/Alienware Command Center/OCControlService/Profiles.tmpAlienware/Alienware Command Center/OCControlService/OCControl.Service.LogsAlienware/Alienware Command Center/OCControlService/OCControl.Service.Logs/2024-03-02.logAlienware/Alienware Command Center/OCControlService/OCControl.Service.Overclocking.Data/GpuConfig.jsonAlienware/Alienware Command Center/OCControlService/OCControl.Service.Overclocking.LogsAlienware/Alienware Command Center/OCControlService/OCControl.Service.Overclocking.Logs/2024-03-02.logAlienware/Alienware Command Center/OCControlService/OCControl.Service.Platinum.LogsAlienware/Alienware Command Center/OCControlService/OCControl.Service.Platinum.Logs/8D4040A7-29AD-44A9-ACB6-4C3EB654A213Alienware/Alienware Command Center/OCControlService/OCControl.Service.Platinum.Logs/8D4040A7-29AD-44A9-ACB6-4C3EB654A213/03022024Alienware/Alienware Command Center/OCControlService/OCControl.Service.Platinum.Logs/8D4040A7-29AD-44A9-ACB6-4C3EB654A213/03022024/0737314885a0-5eec-4ce0-98f1-e0c97762ceb0.txtAlienware/Alienware Command Center/OCControlService/OCControl.Service.Platinum.Logs/8D4040A7-29AD-44A9-ACB6-4C3EB654A213/eventhubprofile.xmlAlienware/Alienware Command Center/OCControlService/OCControl.Service.Platinum.Logs/8D4040A7-29AD-44A9-ACB6-4C3EB654A213/profile.xmlCommon Files/microsoft shared/ClickToRunCommon Files/microsoft shared/ClickToRun/backupDell/DellDataVaultDell/DellDataVault/ArchiveMicrosoft Office/Updates/DetectionMicrosoft Office/Updates/Detection/VersionOfficeC2RDD13F293-4D5A-4DE6-8FF9-8674FC4B8A24Dell/UpdateServiceDell/UpdateService/Log/DCMServiceStartup.logMicrosoft/EdgeUpdateMicrosoft/EdgeUpdate/Download/{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}Microsoft/EdgeUpdate/Download/{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}/122.0.2365.59Microsoft/EdgeUpdate/Download/{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}/122.0.2365.59/MicrosoftEdge_X64_122.0.2365.59_122.0.2365.52.exeMicrosoft/EdgeUpdate/Installin C:\ProgramData:
Dell/AWCCService/DellAgent.00.logDell/Bradbury API Sub AgentDell/Bradbury API Sub Agent/BradburyAPISubAgentService.02.logDell/Bradbury API Sub Agent/BradburyAPISubAgentService.Manifest.logDell/Dell TechHubDell/Dell TechHub/DellTechHub.logDell/Dell TechHub/DellTechHub.Manifest.logDell/Dell.DataVault.DataCollector.SubAgentDell/Dell.DataVault.DataCollector.SubAgent/DellAgent.00.logDell/Dell.DataVault.DataCollector.SubAgent/DellAgent.Manifest.logDell/DellDataVault/Log/CN4QZZ2_DCSA_Errlog.txtDell/DellDataVault/Log/CN4QZZ2_DDVW_Errlog.txtDell/DellDataVault/Log/DDVSVCAPI_Errlog.txtDell/DeviceQuery/deviceq/20240302_0836.logDell/DeviceQuery/logs/deviceq_20240302_0836.logDell/DTP/DB/DTPDB.DB-shmDell/DTP/Logs/DTP.Analytics.SubAgentDell/DTP/Logs/DTP.Analytics.SubAgent/DTP.Analytics.SubAgent.01.logDell/DTP/Logs/DTP.Analytics.SubAgent/DTP.Analytics.SubAgent.Manifest.logDell/DTP/Logs/DTP.DataManager.SubAgentDell/DTP/Logs/DTP.DataManager.SubAgent/DTP.DataManager.SubAgent.00.logDell/DTP/Logs/DTP.DataManager.SubAgent/DTP.DataManager.SubAgent.Manifest.logDell/DTP/Logs/DTP.Diagnostics.SubAgentDell/DTP/Logs/DTP.Diagnostics.SubAgent/DTP.Diagnostics.SubAgent.01.logDell/DTP/Logs/DTP.Diagnostics.SubAgent/DTP.Diagnostics.SubAgent.Manifest.logDell/DTP/Logs/DTP.Instrumentation.SubAgentDell/DTP/Logs/DTP.Instrumentation.SubAgent/DTP.Instrumentation.SubAgent.03.logDell/DTP/Logs/DTP.Instrumentation.SubAgent/DTP.Instrumentation.SubAgent.Manifest.logDell/DTP/Logs/DTP.Instrumentation.UserProcess/S-1-5-18Dell/DTP/Logs/DTP.Instrumentation.UserProcess/S-1-5-18/DTP.Instrumentation.UserProcess.01.logDell/DTP/Logs/DTP.Instrumentation.UserProcess/S-1-5-18/DTP.Instrumentation.UserProcess.Manifest.logDell/ePSA/logs/epsa_20240302_0836.logDell/orca/deviceq/20240302_0836.logDell/SARemediationDell/SARemediation/disksignature.datDell/SARemediation/log/DellSupportAssistRemedationService.logDell/SARemediation/log/plugin/plugin.logDell/SupportAssist/Agent/dbDell/SupportAssist/Agent/logs/Application/SupportAssistAgent.logDell/SupportAssistServiceSubAgentDell/SupportAssistServiceSubAgent/SupportAssistService.03.logDell/SupportAssistServiceSubAgent/SupportAssistService.Manifest.logDell/UpdateService/DataStoreDell/UpdateService/DataStore/DEB34457-A892-47B5-A582-FE4020D59BDE/LogDell/UpdateService/DataStore/DEB34457-A892-47B5-A582-FE4020D59BDE/Log/PlatinumLog_20240302.logDell/UpdateService/DataStore/DEB34457-A892-47B5-A582-FE4020D59BDE/profile.xmlDell/UpdateService/Log/Activity.logDell/UpdateService/Log/Service.logDell/UpdateService/Scheduler/UpdateScheduler.datNVIDIANVIDIA/MessageBus_4844_0x299E0688D60.logNVIDIA/MessageBus_4844_0x299E068A110.logNVIDIA/MessageBus_4944_0x222997CF9A0.logNVIDIA/MessageBus_4944_0x222997D0490.logNVIDIA/MessageBus_5104_0x2774D160820.logNVIDIA/MessageBus_5104_0x2774D161770.logNVIDIA/MessageBus_6164_0x1A4BF77D050.logNVIDIA/MessageBus_6164_0x1A4BF77DFA0.logNVIDIA/MessageBus_6384_0x22A84087ED0.logNVIDIA/MessageBus_6384_0x22A84088E20.logNVIDIA/MessageBus_6384_0x2329F2E1310.logNVIDIA/MessageBus_6384_0x2329F2E19A0.logNVIDIA/MessageBus_6720_0x1CFECC4DF90.logNVIDIA/MessageBus_6720_0x1CFECC4F570.logNVIDIA/MessageBus_688_0x2624667FF40.logNVIDIA/MessageBus_688_0x26246681BB0.logNVIDIA/MessageBus_6956_0x2237889BF50.logNVIDIA/MessageBus_6956_0x2237889C810.logNVIDIA/MessageBus_7660_0x1E4D9507F50.logNVIDIA/MessageBus_7660_0x1E4D95085E0.logNVIDIA/MessageBus_7756_0x25E2D6D8BA0.logNVIDIA/MessageBus_7756_0x25E2D6D9000.logNVIDIA/MessageBus_7932_0x1BBBF674210.logNVIDIA/MessageBus_7932_0x1BBBF6755C0.logNVIDIA/MessageBusBroadcast.logNVIDIA/MessageBusBroadcast.log_backupNVIDIA/MessageBus_1548_0x14E218ED260.logNVIDIA/MessageBus_1548_0x14E218EEA70.logNVIDIA/MessageBus_2064_0x21886905660.logNVIDIA/MessageBus_2064_0x21886905890.logNVIDIA/DisplaySessionContainer1.logNVIDIA/NVDisplay.ContainerLocalSystem.logNVIDIA/NVDisplayContainerWatchdog.logNVIDIA/NvMessageBusBroadcastPlugin.logNVIDIA/NvMessageBusBroadcastPlugin.log_backup1NVIDIA/NvPluginNvapiMonitor.logNVIDIA/NvPluginNvapiMonitor.log_backup1NVIDIA/NvcDispCorePlugin.logNVIDIA/NvContainerBatteryBoostCheck.logNVIDIA/NvContainerDriverUpdateCheck.logNVIDIA/NvContainerLocalSystem.logNVIDIA/NvContainerLocalSystem.log_backup1NVIDIA/NvContainerRecoveryNvContainerLocalSystem.logNVIDIA/MessageBus_2292_0x2A7E15201A0.logNVIDIA/MessageBus_4304_0x24A694DB3E0.logNVIDIA/MessageBus_8036_0x135C3DCFFD0.logNVIDIA/MessageBus_8036_0x135C3DD0AC0.logNVIDIA/MessageBus_8084_0x23B25DFE200.logNVIDIA/MessageBus_8084_0x23B25DFF380.logNVIDIA/MessageBus_8224_0x1B5DE8E56A0.logNVIDIA/MessageBus_8224_0x1B5DE8E5B00.logNVIDIA/MessageBus_8224_0x1BBCFEC51A0.logNVIDIA/MessageBus_8224_0x1BBCFEC5600.logNVIDIA/MessageBus_8292_0x291DBAE5350.logNVIDIA/MessageBus_8292_0x291DBAE57B0.logNVIDIA/MessageBus_8536_0x17111E41320.logNVIDIA/MessageBus_8536_0x17111E419B0.logNVIDIA/MessageBus_8908_0x1DBC0CB9BF0.logNVIDIA/MessageBus_8908_0x1DBC0CBA4B0.logNVIDIA/MessageBus_9596_0x2268C27AC20.logNVIDIA/MessageBus_9596_0x2268C27B4E0.logNVIDIA/MessageBus_9884_0x1F673146310.logNVIDIA/MessageBus_9884_0x1F673146E00.logNVIDIA/MessageBus_9904_0x221DF7681E0.logNVIDIA/MessageBus_9904_0x221DF769360.logNVIDIA/MessageBus_2292_0x2A7E15210F0.logNVIDIA/MessageBus_2476_0x272CE25D140.logNVIDIA/MessageBus_2476_0x272CE25E2C0.logNVIDIA/MessageBus_2524_0x1CD85DDCC80.logNVIDIA/MessageBus_2524_0x1CD85DDDE00.logNVIDIA/MessageBus_2528_0x2B20C6B6FB0.logNVIDIA/MessageBus_2528_0x2B20C6B87C0.logNVIDIA/MessageBus_2624_0x205D69F9160.logNVIDIA/MessageBus_2624_0x205D69F9390.logNVIDIA/MessageBus_2832_0x2452CDB9200.logNVIDIA/MessageBus_2832_0x2452CDB9CF0.logNVIDIA/MessageBus_3196_0x2508E9CD300.logNVIDIA/MessageBus_3196_0x2508E9CD760.logNVIDIA/MessageBus_3480_0x166778C8CD0.logNVIDIA/MessageBus_3480_0x166778C9C20.logNVIDIA/MessageBus_3560_0x262526ED110.logNVIDIA/MessageBus_3560_0x262526EED80.logNVIDIA/MessageBus_3704_0x14B483566E0.logNVIDIA/MessageBus_3704_0x14B48356910.logNVIDIA/MessageBus_3932_0x239000AA100.logNVIDIA/MessageBus_3932_0x239000AB910.logNVIDIA/MessageBus_4020_0x1D7EE2530F0.logNVIDIA/MessageBus_4020_0x1D7EE253320.logNVIDIA/MessageBus_4304_0x24A694DB1B0.logNVIDIA Corporation/Drs/nvAppTimestampsNVIDIA Corporation/Drs/nvdrsdb0.binNVIDIA Corporation/GameSessionTelemetryNVIDIA Corporation/GameSessionTelemetry/telemetryPlugin.logNVIDIA Corporation/NvProfileUpdaterPluginNVIDIA Corporation/NvProfileUpdaterPlugin/NvProfileUpdaterPlugin_1.logNVIDIA Corporation/nvstreamsvcNVIDIA Corporation/nvstreamsvc/SSASCurrent.logNVIDIA Corporation/nvstreamsvc/SSASOld.logNVIDIA Corporation/NvTelemetryNVIDIA Corporation/NvTelemetry/events.datNVIDIA Corporation/NvTelemetry/NvTelemetry.logNVIDIA Corporation/NvTelemetry/NvTelemetry.log.bakNVIDIA Corporation/nvtoppsNVIDIA Corporation/nvtopps/nvtopps.logNVIDIA Corporation/RXNVIDIA Corporation/RX/rxdiag_240302_0840_00.logNVIDIA Corporation/RX/rxdiag_240302_0840_01.logNVIDIA Corporation/RX/rxdiag_240302_0840_02.logNVIDIA Corporation/RX/rxdiag_240302_0840_03.logNVIDIA Corporation/RX/rxdiag_240302_0841_00.logNVIDIA Corporation/RX/rxdiag_240302_0841_01.logNVIDIA Corporation/RX/rxdiag_240302_0841_02.logNVIDIA Corporation/RX/rxdiag_240302_0841_03.logNVIDIA Corporation/RX/rxdiag_240302_0842_00.logNVIDIA Corporation/RX/rxdiag_240302_0842_01.logNVIDIA Corporation/ShadowPlay/CaptureCore.logPLUG/LogsRivetNetworks/Killer/ActivityLogUSOPrivate/UpdateStoreUSOShared/Logs/SystemGoodixGoodix/goodix.datIntel/GCCIntel/GCC/gcc_svc_log_2024-03-02.txtIntel/Intel Extreme Tuning UtilityIntel/Intel Extreme Tuning Utility/LogsIntel/Intel Extreme Tuning Utility/Logs/IntelOverclockingSDK.20240302-0836405819.logIntel/Intel Extreme Tuning Utility/Logs/XtuCore.20240302-0836323868.logIntel/Intel Extreme Tuning Utility/PerformanceSettings.binMicrosoft/Crypto/PCPKSP/WindowsAIK/b781a2d48a4b384338606dfce91f97fce40016fe/fb795632abfa22e9fad1700565d5c4527e380379.PCPKEYMicrosoft/Diagnosis/ETLLogsMicrosoft/Diagnosis/ETLLogs/OfflineRecEnvTrace.etlMicrosoft/EdgeUpdate/Log/MicrosoftEdgeUpdate.logMicrosoft/Network/DownloaderMicrosoft/Search/Data/Applications/Windows/GatherLogs/SystemIndexMicrosoft/Search/Data/Applications/Windows/GatherLogs/SystemIndex/SystemIndex.571.CrwlMicrosoft/Search/Data/Applications/Windows/GatherLogs/SystemIndex/SystemIndex.571.gthrMicrosoft/Search/Data/Applications/Windows/Windows.edbMicrosoft/Search/Data/TempMicrosoft/Search/Data/Temp/usgthrsvcMicrosoft/Windows/AppRepository/StateRepository-Machine.srd-shmMicrosoft/Windows/OneSettings/CTAC.jsonMicrosoft/Windows/SystemDataMicrosoft/Windows/SystemData/S-1-5-18Microsoft/Windows/SystemData/S-1-5-18/ReadOnlyMicrosoft/Windows/SystemData/S-1-5-18/ReadOnly/LockScreen_ZMicrosoft/Windows/SystemData/S-1-5-21-2026200620-893393080-2828234286-1001/ReadOnly/LockScreen_OMicrosoft/Windows/WER/ReportArchiveMicrosoft/Windows/WER/ReportArchive/6a962e5c-6e70-4dac-b7e6-d194b421cee4Microsoft/Windows/WER/ReportArchive/bdfdb9a3-ca1b-472e-96bf-7554a9df89c2Microsoft/Windows/WER/ReportArchive/fc7354d9-146e-41d2-8903-724f31fce5dbMicrosoft/Windows/WER/ReportQueueMicrosoft/Windows/WER/ReportQueue/3e413c8b-d827-4e1e-9033-6f9ca53f70b0Microsoft/Windows/WER/ReportQueue/7706d91a-9898-4d20-be6d-f1b29fce498dMicrosoft/Windows/WER/ReportQueue/da923841-00cc-415f-8f7a-ca3dc2d81db5Microsoft/Windows/WER/TempMicrosoft/Windows/WER/Temp/0f7b3e7a-57a2-4f11-8c3d-e173d105e2e6Microsoft/Windows/WER/Temp/122278d1-b62f-45b0-a30f-cc3ee7f8244fMicrosoft/Windows/WER/Temp/14eb1f47-cdf9-450d-aaad-1e1de0558dd5Microsoft/Windows/WER/Temp/20b02a39-d84b-4df6-be37-d34577b85f55Microsoft/Windows/WER/Temp/35ffe294-84ab-4cfa-b28b-c9b0024e06c3Microsoft/Windows/WER/Temp/9bd644ef-55a8-4db6-9741-449749afd58bMicrosoft/Windows/WER/Temp/c6fdfe75-728b-4d71-81ff-82f2f84ddd11Microsoft/Windows/WER/Temp/WER2F2E.tmp.dmpMicrosoft/Windows/WER/Temp/WER2FCB.tmp.WERInternalMetadata.xmlMicrosoft/Windows/WER/Temp/WER492E.tmp.dmpMicrosoft/Windows/WER/Temp/WER499C.tmp.WERInternalMetadata.xmlMicrosoft/Windows/WER/Temp/WERBF83.tmp.dmpMicrosoft/Windows/WER/Temp/WERC05F.tmp.WERInternalMetadata.xmlMicrosoft/Windows DefenderMicrosoft/Windows Defender/IMpService77BDAF73-B396-481F-9042-AD358843EC24.lockMicrosoft/Windows Defender/ScansMicrosoft/Windows Defender/Scans/MpDiag.binMicrosoft/Windows Defender/Scans/mpenginedb.db-shmMicrosoft/Windows Defender/Scans/mpenginedb.db-walMicrosoft/Windows Defender/Scans/RtSigs/DataMicrosoft/Windows Defender/Support/MPLog-20240116-224511.logIn C:\users\benito:
AppData/Local/ConnectedDevicesPlatform/CDPGlobalSettings.cdpAppData/Local/ConnectedDevicesPlatform/L.benito.cdpresourceAppData/Local/Microsoft/OneDrive/logs/CommonAppData/Local/Microsoft/OneDrive/logs/Common/StandaloneUpdater-2024-03-02.0739.2332.1.aodlAppData/Local/Microsoft/OneDrive/logs/Common/StandaloneUpdater-2024-03-02.0739.2864.1.odlAppData/Local/Microsoft/OneDrive/setup/logsAppData/Local/Microsoft/OneDrive/setup/logs/StandaloneUpdate_2024-03-02_073928_2332-2008.logAppData/Local/Microsoft/OneDrive/setup/logs/StandaloneUpdate_2024-03-02_073928_2864-2016.logAppData/Local/Microsoft/OneDrive/StandaloneUpdater/ECSConfig.jsonAppData/Local/Microsoft/OneDrive/StandaloneUpdater/PreSignInSettingsConfig.jsonAppData/Local/Microsoft/OneDrive/StandaloneUpdater/Update.xmlAppData/Local/Microsoft/Vault/UserProfileRoaming/Latest.datAppData/Local/Microsoft/Windows/Notifications/wpndatabase.db-shmAppData/Local/Microsoft/Windows/Notifications/WPNPRMRY.tmpAppData/Local/NVIDIA Corporation/NvNodeAppData/Local/NVIDIA Corporation/NvNode/launcher.logAppData/Local/NVIDIA Corporation/NvNode/nvnode.logAppData/Local/NVIDIA Corporation/NvProfileUpdaterAppData/Local/NVIDIA Corporation/NvProfileUpdater/NvProfileUpdater.logAppData/Local/NVIDIA Corporation/NvProfileUpdater/NvProfileUpdater.log.bakAppData/Local/NVIDIA Corporation/NvTmRepAppData/Local/NVIDIA Corporation/NvTmRep/NvTmRep.logAppData/Local/TempAppData/Local/Temp/AdobeARM.logAppData/Local/Temp/ArmUI.iniAppData/Local/Temp/BIT774F.tmpAppData/Local/Temp/wctD26F.tmpAppData/Local/Temp/wctD270.tmpAppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/026A86A161D256DBB33076EDF20C0E5E_586120603910E6A9024E2F8513B0F104AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/57C8EDB95DF3F0AD4EE2DC2B8CFD4157AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/77EC63BDA74BD0D0E0426DC8F8008506AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/FB0D848F74F70BB2EAA93746D24D9749IntelGraphicsProfilesIntelGraphicsProfiles/Brighten Video.man.igpiIntelGraphicsProfiles/Darken Video.man.igpiIntelGraphicsProfiles/Enhance Video Colors.man.igpiIn C:\Windows\
appcompat/appraiserappcompat/appraiser/AltDataappcompat/appraiser/AltData/appraiser.sdbappcompat/appraiser/Appraiser_AlternateData_Temp.cabbootstat.datdebug/PASSWD.LOGLiveKernelReportsLiveKernelReports/WATCHDOGLiveKernelReports/WATCHDOG/WATCHDOG-20240302-0842.dmpLiveKernelReports/WATCHDOG4400LiveKernelReports/WATCHDOG4400/WATCHDOG4400-20240302-0842.dmpLiveKernelReports/WATCHDOG4401LiveKernelReports/WATCHDOG4401/WATCHDOG4401-20240302-0842.dmpLogsLogs/DISM/dism.logLogs/MeasuredBootLogs/MeasuredBoot/0000001295-0000000000.logLogs/MeasuredBoot/0000001296-0000000000.logLogs/MoSetup/UpdateAgent.logLogs/ReAgent/ReAgent.logLogs/RecEnv_RamdiskLogs/RecEnv_Ramdisk/diagerr.xmlLogs/RecEnv_Ramdisk/diagwrn.xmlLogs/RecEnv_Ramdisk/setupact.logLogs/RecEnv_Ramdisk/setuperr.logLogs/StorGroupPolicy.logLogs/waasmediccapsulePanther/UnattendGC/diagerr.xmlPanther/UnattendGC/setuperr.logPFRO.logPrefetchPrefetch/SVCHOST.EXE-7AAD9645.pfPrefetch/SVCHOST.EXE-7C90E579.pfPrefetch/SVCHOST.EXE-83DAC236.pfPrefetch/SVCHOST.EXE-C2DA4F6F.pfPrefetch/SEARCHINDEXER.EXE-1CF42BC6.pfPrefetch/NET.EXE-A0964F30.pfPrefetch/SLIDETOSHUTDOWN.EXE-9251C7CD.pfPrefetch/WERFAULT.EXE-155C56CF.pfPrefetch/AWCC.SERVICE.EXE-93E001E0.pfPrefetch/SVCHOST.EXE-C625B657.pfPrefetch/SVCHOST.EXE-F952D9A9.pfPrefetch/NVCONTAINER.EXE-537D289C.pfPrefetch/SVCHOST.EXE-09F4AEA4.pfPrefetch/SVCHOST.EXE-356485BE.pfPrefetch/SVCHOST.EXE-4BD0A607.pfPrefetch/SVCHOST.EXE-4D0E9C8C.pfPrefetch/DLLHOST.EXE-7617EDA2.pfPrefetch/RUNDLL32.EXE-A9CBE425.pfPrefetch/SCRCONS.EXE-58E094D7.pfPrefetch/SVCHOST.EXE-C38EF8DD.pfPrefetch/TASKHOSTW.EXE-2E5D4B75.pfPrefetch/XTUSERVICE.EXE-E3CCF453.pfPrefetch/CMD.EXE-0BD30981.pfPrefetch/CONHOST.EXE-0C6456FB.pfPrefetch/CUDARUNTIMEWRAPPER.EXE-8BEAC51F.pfPrefetch/REAGENTC.EXE-0588409A.pfPrefetch/REGEDIT.EXE-DAB4D60B.pfPrefetch/WLRMDR.EXE-A7C36FDD.pfPrefetch/WMIADAP.EXE-BB21CD77.pfPrefetch/WMIAPSRV.EXE-FC8436DD.pfPrefetch/WMIPRVSE.EXE-E8B8DD29.pfPrefetch/SCHTASKS.EXE-8B6144A9.pfPrefetch/MICROSOFTEDGEUPDATE.EXE-7A595326.pfPrefetch/NET1.EXE-509326A5.pfPrefetch/ReadyBootPrefetch/ReadyBoot/ReadyBoot.etlsecurity/logsServiceProfiles/LocalService/AppData/Local/ConnectedDevicesPlatform/CDPGlobalSettings.cdpServiceProfiles/LocalService/AppData/Local/FontCacheServiceProfiles/NetworkService/AppData/Local/Microsoft/Windows/DeliveryOptimization/CacheServiceProfiles/NetworkService/AppData/Local/Microsoft/Windows/DeliveryOptimization/Cache/9898d11f6f9196bb91975a3637a2cfe76ec16faeServiceProfiles/NetworkService/AppData/Local/Microsoft/Windows/DeliveryOptimization/State/keyValueLKG.datServiceProfiles/NetworkService/AppData/Local/Temp/MpCmdRun.logServiceStateServiceState/DetectionVerificationDrvServiceState/DetectionVerificationDrv/DataServiceState/esif_umdf2ServiceState/esif_umdf2/DataServiceState/EventLog/DataServiceState/SensorsCx0102ServiceState/SensorsCx0102/DataServiceState/TbtFilterDrvServiceState/TbtFilterDrv/DataServiceState/usbinterfaceServiceState/usbinterface/DataSoftwareDistribution/DataStore/DataStore.edbSoftwareDistribution/DataStore/DataStore.jfmSoftwareDistribution/DataStore/LogsSoftwareDistribution/DataStore/Logs/edb.logSoftwareDistribution/DownloadSoftwareDistribution/Download/f79e5ca78c17ded4eb65bd0336bfbe5c/MetadataSoftwareDistribution/Download/f79e5ca78c17ded4eb65bd0336bfbe5c/windlp.state-old.xmlSoftwareDistribution/Download/f79e5ca78c17ded4eb65bd0336bfbe5c/windlp.state.xmlSoftwareDistribution/PostRebootEventCache.V2System32/spp/store/2.0/cache/cache.datSystem32/WDI/LogFiles/BootPerfDiagLogger.etlSystem32/WDI/LogFiles/WdiContextLog.etl.001System32/WDI/LogFiles/WdiContextLog.etl.003System32/LogFilesSystem32/LogFiles/SQMSystem32/LogFiles/SrtSystem32/LogFiles/Srt/DISMRepairLogFile.txtSystem32/LogFiles/Srt/SrtTrail.logSystem32/LogFiles/Srt/SrtTrail.txtSystem32/LogFiles/WMISystem32/LogFiles/WMI/Diagtrack-Listener.etl.004System32/LogFiles/WMI/Diagtrack-Listener.etl.005System32/LogFiles/WMI/Intel/iCLSClientSystem32/LogFiles/WMI/Intel/iCLSClient/TPMProvisioningService.etl.005System32/LogFiles/WMI/Intel/iCLSClient/TPMProvisioningService.etl.006System32/LogFiles/WMI/Intel/iCLSClient/IntelPTTEKRecertification.etl.005System32/LogFiles/WMI/Intel/iCLSClient/IntelPTTEKRecertification.etl.006System32/LogFiles/WMI/Intel/iCLSClient/PlatformLicenseManagerService.etl.006System32/LogFiles/WMI/Intel/iCLSClient/PlatformLicenseManagerService.etl.007System32/LogFiles/WMI/Intel/iCLSClient/iclsProxy.etl.005System32/LogFiles/WMI/Intel/iCLSClient/iclsProxy.etl.006System32/LogFiles/WMI/Intel/iCLSClient/SocketHeciServer.etl.005System32/LogFiles/WMI/Intel/iCLSClient/SocketHeciServer.etl.006System32/LogFiles/WMI/Intel/iCLSClient/iclsClient.etl.005System32/LogFiles/WMI/Intel/iCLSClient/iclsClient.etl.006System32/LogFiles/WMI/LwtNetLog.etlSystem32/LogFiles/WMI/Microsoft-Windows-Rdp-Graphics-RdpIdd-Trace.etlSystem32/LogFiles/WMI/NetCore.etlSystem32/LogFiles/WMI/NtfsLog.etlSystem32/LogFiles/WMI/RadioMgr.etlSystem32/LogFiles/WMI/RtBackupSystem32/LogFiles/WMI/RtBackup/EtwRTEventLog-Application.etlSystem32/LogFiles/WMI/RtBackup/EtwRTAdmin_PS_Provider.etlSystem32/LogFiles/WMI/RtBackup/EtwRTDefenderApiLogger.etlSystem32/LogFiles/WMI/RtBackup/EtwRTDefenderAuditLogger.etlSystem32/LogFiles/WMI/RtBackup/EtwRTDiagLog.etlSystem32/LogFiles/WMI/RtBackup/EtwRTDttHidEtwSession.etlSystem32/LogFiles/WMI/RtBackup/EtwRTEventlog-Security.etlSystem32/LogFiles/WMI/RtBackup/EtwRTEventLog-System.etlSystem32/LogFiles/WMI/RtBackup/EtwRTNOCAT.etlSystem32/LogFiles/WMI/RtBackup/EtwRTSgrmEtwSession.etlSystem32/LogFiles/WMI/RtBackup/EtwRTUBPM.etlSystem32/LogFiles/WMI/Wifi.etlSystem32/LogFiles/WMI/WifiDriverIHVSession.etl.003System32/LogFiles/WMI/WifiDriverIHVSession.etl.004System32/Recovery/ReAgent.xmlSystem32/config/SOFTWARESystem32/config/systemprofile/AppData/Local/D3DSCache/b3474141becdd6ac/6F75932F-7DFC-4FB0-B4B8-12DE1AC415DA_VEN_8086&DEV_9BC4&SUBSYS_9E2&REV_5.lockSystem32/config/systemprofile/AppData/Local/D3DSCache/b3474141becdd6ac/F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lockSystem32/config/systemprofile/AppData/Local/Microsoft/Office/16.0/WebServiceCache/AllUsers/officeclient.microsoft.comSystem32/config/systemprofile/AppData/Local/Microsoft/Office/16.0/WebServiceCache/AllUsers/officeclient.microsoft.com/ADA24E8A-D8C8-4637-B965-AE364D921C87System32/config/systemprofile/AppData/Local/Microsoft/Office/OTeleSystem32/config/systemprofile/AppData/Local/Microsoft/Office/OTele/officeclicktorun.exe.dbSystem32/config/systemprofile/AppData/Local/Microsoft/Office/OTele/officeclicktorun.exe.db-shmSystem32/config/systemprofile/AppData/Local/Microsoft/Office/OTele/officeclicktorun.exe.db-walSystem32/config/systemprofile/AppData/Local/Microsoft/Windows/Notifications/wpndatabase.db-shmSystem32/config/systemprofile/AppData/Local/Microsoft/Windows/Notifications/WPNPRMRY.tmpSystem32/config/systemprofile/AppData/Local/NVIDIA/DXCache/2ecbe4a5cf3c260bd12c4322d4b0ccd4_fce8395c8fd8a9c9_e0f15703a025fc4f_0_0.0.tocSystem32/config/systemprofile/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/026A86A161D256DBB33076EDF20C0E5E_586120603910E6A9024E2F8513B0F104System32/config/systemprofile/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/026A86A161D256DBB33076EDF20C0E5E_86AB612B21DEDF3B8CD155ED2E4114FFSystem32/config/systemprofile/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/57C8EDB95DF3F0AD4EE2DC2B8CFD4157System32/config/systemprofile/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/FB0D848F74F70BB2EAA93746D24D9749System32/config/systemprofile/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/77EC63BDA74BD0D0E0426DC8F8008506System32/config/TxR/{53b39e3d-18c4-11ea-a811-000d3aa4692b}.TxR.5.regtrans-msSystem32/config/TxR/{53b39e3d-18c4-11ea-a811-000d3aa4692b}.TxR.blfSystem32/config/TxR/{53b39e3e-18c4-11ea-a811-000d3aa4692b}.TMContainer00000000000000000002.regtrans-msSystem32/config/COMPONENTSSystem32/drivers/DriverData/Intel/DPTF/dvSystem32/drivers/DriverData/Intel/DPTF/dv/dptf.dvSystem32/Tasks/Microsoft/Windows/Flighting/OneSettings/RefreshCacheSystem32/Tasks/Microsoft/Windows/PushToInstall/RegistrationSystem32/Tasks/Microsoft/Windows/SoftwareProtectionPlatform/SvcRestartTaskSystem32/Tasks/Microsoft/Windows/UpdateOrchestrator/Schedule ScanSystem32/Tasks/Microsoft/Windows/WindowsUpdate/RUXIM/PLUGSchedulerSystem32/wbem/Logs/wmiprov.logSystem32/wbem/RepositorySystem32/wbem/Repository/INDEX.BTRSystem32/wbem/Repository/MAPPING3.MAPSystem32/wbem/Repository/OBJECTS.DATASystem32/wbem/PerformanceTasks/SA.DATTempTemp/DESKTOP-889E1P4-20240302-0834.logTemp/DESKTOP-889E1P4-20240302-0839.logTemp/DESKTOP-889E1P4-20240302-0839a.logTemp/MpCmdRun.logWindowsUpdate.logI guess deleting them all, won't help? ./Windows/System32/config/SOFTWARE and COMPONENTS look important
I got a registry Perl export script, that could read these files from Linux. It produced an almost 1.5 million line .reg file. I read you could load that file in the recovery mode with regedit and then replace the SOFTWARE file with the SOFTWARE file from the recovery partition. But regedit says "cannot import ..reg Error accessing the registry."