Really weird files on HDD after wine

Am using a Knoppix 3.7 Live CD.
I used wine to run a Wndows app and it locked up the system.
I had to reset. I was locked up hard.

After reboot, I have found on my HDD two really weird files and one weird directory.
The files are ".Xauthority" and "OOICONS.tar.gz". The directory is ".nessusrc.cert".

The filenames are correct but the owner and group are random numbers.
For example, the ".Xauthority" has owner 1531901541 and the group is 1635018088.
The sizes show as 1.7Gb for the files and 774Mb for the directory.
The directory is named similarly.

They are all read-only and I can't rename, chown or delete them even with sudo.
They look similar to file names on a Windows box that are corrupted.

Anybody have an idea how I can rename, delete or otherwise repair these files
short of losing the contents of the entire drive.

Thx

<EDIT>

I got it fixed.

I didn't want to but I used e2fsck and just let it do as it would.
Luckily it fixed all the errors and I only lost one directory. The firefox directory.
I can just put firefox back again. It could have been worse.
I was sweatin' bullets the entire time.

</EDIT>

SunnyB,

I haven't run wine yet, but I have the .Xauthority file and a .nessusrc file, in the /home of my user account, but its size is around 53 bytes and 752 bytes, respectfully, no directory...

If you want to just "blow them away", try the sudo first, then try su and the remove, if that doesnt work, then try to use a Root Konsole ( Super User Konsole ) window... I have to warn you, I have no clue what these files do, or are for, and removing them, may cause your "user" account to be locked up, or out... My best thinking on this, is, that during the "recovery" of the lock-up, open files were corrupted, and that is the reason for the sizes being different, etc...

I know what the files are. They are copies of the same files in the %HOME% directory.
The problem is I can't delete, rename or otherwise change the owner / group back to their original.

The owner of .Xauthority is 1531901541 and the group is 1850683641.
The owner and group of OOICONS.tar.gx is similar number strings but different.
These owners and groups do not exist. They show sizes as 1.7Gb. They are definatley corrupt.

Access to both of these is restricted somehow. They have read-only permission.
Since the registered owners and groups don't exist, I can't remove,
rename or chown them even sudo or root. Not even in a console command line.

I have tried the Debian site and Google but no help.

Have you tried creating a group with GID 1850683641 and then chowning/deleting?

Quote:

---

Originally Posted by Markus

Have you tried creating a group with GID 1850683641 and then chowning/deleting?

---

Yes Markus. That was my first thought also.
I created a user and group with the same name/numbers as the file owner/group.
I added my user to that group. I then tried to chown the files. No good.
I tried to move them to another directory as root. No good.

I had this same problem last year on my Debian box and eventually had to
wipe the entire disk and start over. I am trying to straighten this out without
doing that again.

I have considered adding another HDD but the problem will still be there after
I move all of the other files.

There is some sort of corruption going on here. I just noticed the dates on the files.
They are 01-03-77 and 04-02-87. Nothing I have tried works. I get "access denied"
or "operation not permitted" errors.

> I had to reset. I was locked up hard.
> For example, the ".Xauthority" has owner 1531901541 and the group is 1635018088.
> The sizes show as 1.7Gb for the files and 774Mb for the directory.

The filenames are normal, but the numbers and sizes are insane. I suspect the reset has done bad things to the metadata for those files, which is confusing the kernel. Have you done a manual fsck? Which filesystem are you using?

Quote:

---

Originally Posted by gruntbuggly

> I had to reset. I was locked up hard.
> For example, the ".Xauthority" has owner 1531901541 and the group is 1635018088.
> The sizes show as 1.7Gb for the files and 774Mb for the directory.

The filenames are normal, but the numbers and sizes are insane. I suspect the reset has done bad things to the metadata for those files, which is confusing the kernel. Have you done a manual fsck? Which filesystem are you using?

---

It is an ext2 fs. I didn't want to fsck for fear of further corruption.
I was hoping for a more simple solution. Chown then delete was my hope.

Quote:

---

Originally Posted by SunnyB

Quote:

---

Originally Posted by gruntbuggly

> I had to reset. I was locked up hard.
> For example, the ".Xauthority" has owner 1531901541 and the group is 1635018088.
> The sizes show as 1.7Gb for the files and 774Mb for the directory.

The filenames are normal, but the numbers and sizes are insane. I suspect the reset has done bad things to the metadata for those files, which is confusing the kernel. Have you done a manual fsck? Which filesystem are you using?

---

It is an ext2 fs. I didn't want to fsck for fear of further corruption.
I was hoping for a more simple solution. Chown then delete was my hope.

---

The whole point of fsck is to help with curruptions. I would really suggest useing. And if you don't like it, mabye moving to ext3 would suit you.