Pages

marți, 13 ianuarie 2026

News : ... about my hacked system by provider.

I still haven't managed to block the hacking attacks that the provider is making, it's installed quite well and is happily learning about being a hacker and incompetent, filling in files and blocking them... you'd better watch TV - if it doesn't burn it through coaxial, everything works here...
Here are the steps to delete a file and a folder that is blocking my Active Presenter software from making movies...
Run Process Explorer as Administrator so it can access all open handles, then press Ctrl + F to open the Find Handle or DLL search window, and search for the folder or file name by typing something like Untitled1_tempdir, video_20260104_21-02-22.mp4
The folder is locked by an NTFS kernel‑level lock.
There is no doubt anymore.
It’s not a process.
It’s not an attribute.
It’s not an ACL.
It’s not the antivirus.
It’s not Explorer.
It’s not Windows Search.
It’s not ffmpeg.
It’s not ActivePresenter.

It’s a kernel handle that keeps the folder “alive” even though it’s empty.

This happens EXACTLY when a program (ActivePresenter) crashes while writing to the folder.
Windows is left with an internal lock on that directory, and any delete command is rejected.

And now comes the important part:

🔥 There is NO command in CMD or PowerShell that can break a kernel lock.
None.
Zero.
No matter how much you try, the result will always be the same: “Access is denied.”
  • PowerShell – delete file
    Remove-Item ".\video_20260104_21-02-22.mp4" -Force
  • PowerShell – delete folder
    Remove-Item Untitled1_tempdir -Recurse -Force
    Remove-Item "C:\Users\catafest\Documents\ActivePresenter\.ActivePresenterCachedProjects\Untitled1_tempdir" -Recurse -Force
  • PowerShell – take ownership
    takeown /F ".\video_20260104_21-02-22.mp4"
    takeown /F . /R /D Y
  • PowerShell – ACL operations
    icacls . /grant "$env:USERNAME:F" /T /C
    icacls .
  • PowerShell – search for locking processes
    Get-Process | Where-Object { $_.Modules.FileName -like "video_20260104_21-02-22.mp4" } 2>$null
  • PowerShell – stop services
    Stop-Service WSearch -Force
  • CMD – delete folder contents
    del Untitled1_tempdir
  • CMD – delete folder (NTFS raw path)
    rd /s /q \\?\C:\Users\catafest\Documents\ActivePresenter\.ActivePresenterCachedProjects\Untitled1_tempdir
    rd /s /q "C:\Users\catafest\Documents\ActivePresenter\.ActivePresenterCachedProjects\Untitled1_tempdir"
  • CMD – move folder
    move \\?\C:\Users\catafest\Documents\ActivePresenter\.ActivePresenterCachedProjects\Untitled1_tempdir C:\Temp
  • CMD – recreate folder
    mkdir Untitled1_tempdir
  • Registry – pending delete (failed)
    reg add "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager" /v PendingFileRenameOperations /t REG_MULTI_SZ /d "\??\C:\Users\catafest\Documents\ActivePresenter\.ActivePresenterCachedProjects\Untitled1_tempdir" /f