WARNING: ATI 2017 NG - System frezzes after deleting log file
I have been doing beta testing of log file viewer for ATI 2017 NG. The beta version has the ability to clean-up old log files. However, if you have malware protection activated some types of log file cannot be deleted:
- consol.#.tgz
- ti.console.#.tgz
- mms.#.tgz
- zmq-client-connections.#.tgz
I was able to manually delete logs of the type in list 1 to 3 (prompted for administrator) but attempting to delete one of the last group caused the system to freeze.
I suspect this behaviour is self-protection of these files by malware protection module. So probably best not to try to delete such files until further advice is available.
When I turned off 'protect all ... True Image Files from Ransomware' I was able to delte the files. So if you want to clan up the log files, best to temporarily diable this feature.
Ian
It looks as if the issue is not as serious as I first thought. It looks like the mose and keyboard have merely stopped responding. If I plug in a different mouse, it works (has different driver). I have deleted the drivers for the microsoft keyboard and mouse and hopefully the problem will not reappear.
Ian
Wireless? Battery change?
Weird the keyboard and mouse just stopped responding if they are hard wired via USB or PS/2.
They are both USB devices - Micrsoft Natural Keyboard 4000 and an ancient Microsoft mouse. Both attached to USB ports are rear of the PC. Power was getting to them both, as lights remained on.
The 'emergency' mouse was also USB and I connected it to a USB 2 port at the front of the PC.
Ian
Hello Ian,
If it is possible for you to reproduce the problem, we would like to get a system memory dump and a system report for the investigation. The complete memory dump will be a .dmp file equal the size of your RAM, however it could be compressed with any archiving utility, like 7-zip or any other.
1) open Control Panel - System and Security - System - Advanced system settings - Advanced - Startup and Recovery - Settings - System failure - Write debugging information - Complete memory dump. See the picture enable_memory_dump_creation.png attached.
2) enable the keyboard-initiated crash in the registry. In the registry key HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\kbdhid\Parameters, make a right-click on the right half of the screen and select New - DWORD (32-bit) Value (even if you have 64-bit Windows), give it a name CrashOnCtrlScroll, double-click it and set its value to 1. See screenshots registry 1, 2 and 3 attached.
3) restart the computer
4) reproduce the problem with the mouse and keyboard locking up. Before actually pressing Delete please take a screenshot of what files were marked for deletion
5) hold down the rightmost CTRL key, and press the SCROLL LOCK key twice. This will produce a BSOD screen and start writing the memory dump file
6) wait till the memory dump is written, then reboot into Windows normally and either remove the parameter CrashOnCtrlScroll from the registry or set its value to zero
7) compress the file and upload it to our FTP server, alongside with a system report and the screenshot of the files that you attempted to delete
I will send you the FTP server connection details in PM.
If it is no longer possible to reproduce the issue for any reason, let me know as well please.
Thank you in advance
Slava
Hi Slava
I hope to be able to test this for you some time later today (Melbourne Australia time).
Ian
Hi Slava
I was not able to reproduce the behaviour. I manged to delete a zmq-client-connections.#.tgz file without any (apparent) adverse impact.
Ian