Follow

FTK closes and my case cannot be opened. What is the "select.idx" error I see in the log?

Created by: Tony Herrera
Created date:
Last Updated date:

CTSTATUS  Select.idx Error

 

 

- User# 01       vtclose failure:  LOC 2:  TOT 1:  CHN 0  NOV 0  LOK 0  NFD 0  IOS 0

Tue Jul 24 08:07:29 2007

 - User# 01      vtclose failure:  LOC 2:  TOT 1:  CHN 0  NOV 0  LOK 0  NFD 0  IOS 0

Tue Jul 24 08:11:50 2007

 - User# 01      *File path*\select.idx

Tue Jul 24 08:11:50 2007      

 - User# 01      E69: f#=37 km=0 bm=-1 node=4000x predsr=ffffffff-ffffffffx sucesr=ffffffff-ffffffffx numrec=0000-00004fffx

Tue Jul 24 08:44:50 2007

 - User# 01      *File Path*\select.idx

Tue Jul 24 08:44:50 2007

 - User# 01      E69: f#=37 km=0 bm=-1 node=4000x predsr=ffffffff-ffffffffx sucesr=ffffffff-ffffffffx numrec=0000-00004fffx

 

Problem:  FTK closes and case cannot be opened.

 

Cause:  Ctree has encountered some type of error.

 

Solution :  When a CTSTATUS.FCS is generated containing errors similar to the above, take the following steps to repair the issue:

 

  1.   Locate the investigators select.idx located in the case folder.
  2.   Copy BOTH the select.idx and the select.dat out to another location (i.e. the desktop)
  3.   Navigate to \Program Files\AccessData\AccessData Forensic Toolkit 1.71\DefaultCase and find the select.dat and select.idx.
  4.   Replace the files in the investigators case folder with these default ones, and then open the case.

 

This should allow the investigator to access the case again.

 

**Please note that it may take a bit longer for the case to open.

Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request

Comments

Powered by Zendesk