Problem

How do I completely kill a job in FTK?

 

Resolution

  1. Click "Cancel" in the Progress Window to end the job
  2. If the job does not cancel within a few minutes, end each of the following process' trees (right-click > End Process Tree), if they exist, via Task Manager:
    FTK.exe
    ProcessingHost.exe
    ADLoader.exe
    ADIso.exe
    ADProcessor.exe
    ADIndexer.exe
  3. Delete the contents of "C:\ProgramData\AccessData\PM\DB"

Notes

  • If this was an "Add Evidence" job for which you had not yet received a message saying "Processing Complete" prior to ending the job, and you want to re-add the evidence, you should remove the evidence prior to re-adding it.