177

While trying to copy the contents of a 16GB usb drive, I got a warning that there was not enough free space. Checking the properties of the folder tree on the usb drive, I found a large number of ".ßßß" files that claim to be around 3.5GB each, for a total of approximately 908GB (which I don't think could be possible on a 16GB drive).

screenshot of the files in question

Obviously there is something going on here, but I cannot find any reference to this file type online.

When I try to delete these files, they request administrator permission (which I provide). However, they then throw a "File Access Denied" error and state that I require permission from the adminsitrator...

Does anyone know what the purpose of these files are, and how to remove them?

Konrad Rudolph
  • 7,640
Arne
  • 1,270

1 Answers1

451

Most likely these aren't actual files but the result of filesystem corruption.

  • It is normally not possible to have multiple identically named files.
  • Their names (ßßßßßßßß.ßßß) correspond to hexadecimal bytes E1 E1 E1… in code page 437 (which was the default MS-DOS code page, and therefore the default FAT/FAT32 code page when long file names aren't in use).
    (The character is not the Greek beta but the German lowercase sharp S. The dot isn't actually stored in the FAT, but added by the OS when reading, so it doesn't get corrupted.)
  • Their sizes are close to 3 789 677 025 bytes, which is again 0xE1 E1 E1 E1 in hex.
    (That's approximately 3 700 856.469 kilobytes; Windows probably rounds up.)

All signs point to part of your filesystem's master file table being filled with the byte 0xE1, which may be caused by software (such as unplugging mid-write), but may also indicate that the flash memory itself is dying.

Software-induced corruption can often be cleaned up by using Windows' disk error checking (chkdsk). Or just reformat the drive (after copying your real files out of it).

But especially for cheaper and/or heavily-used drives, bad flash memory is very likely. Don't use this drive for important files anymore.

u1686_grawity
  • 452,512
  • 49
    Your theory seems solid, based on the recurring theme of the E1 byte. I've since formatted the drive and all appears well... but I will likely not be using this drive for mission-critical purposes anymore. Thanks for the insight! – Arne Aug 01 '18 at 18:27
  • 11
    E1 = 1110 0001 - This means that it is a misaligned sequence of 4 bits sets and 4 bits cleared repeated over and over. – Victor Stafusa - BozoNaCadeia Aug 06 '18 at 21:09
  • 5
    Actually, in CP437, character 225 is both sharp S and Greek beta. – IS4 Aug 07 '18 at 10:32
  • 2
    @IllidanS4: Since Windows only deals with Unicode filenames (automatically converting CP437 to Unicode when reading the FAT), and Unicode chooses to map 0xE1 to U+00DF ("LATIN SMALL LETTER SHARP S"), that's unambiguously what all Windows programs display, regardless of the original dual definition. – u1686_grawity Sep 09 '18 at 13:25