1
1
In Windows, a program can schedule a file to be deleted when the computer restarts.
Is there a way to know if a file is scheduled to be deleted, short of restarting the computer, and checking if the file is still there?
1
1
In Windows, a program can schedule a file to be deleted when the computer restarts.
Is there a way to know if a file is scheduled to be deleted, short of restarting the computer, and checking if the file is still there?
4
Yes. The MoveFileEx() call with the MOVEFILE_DELAY_UNTIL_REBOOT flag moves a file on the next reboot. If the second parameter (the new name) is NULL, the file is deleted. The list of files to be renamed in this way is stored in the registry:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\PendingFileRenameOperations
If you wanted to do this in a batch file or at the command line, I'd recommend you to use "reg /query".
1
The sysinternal
– mr.spuratic – 2014-06-24T08:34:20.787pendmoves
tool is an easy way to do this from a command prompt too.I don't see this registry key on my Windows 10 install. There's a
FileRenameOperations
key, but it is empty even though I have files queued for deletion. – Mike Marynowski – 2018-10-12T23:50:05.323