Haven't been able to build a new image in over a month

[Deezul]

I'm either removing a component or adding another component, but for the past month I get an explorer restart on my computer and then the error that a file in the directory is I use is locked and it stops. I've updated NT Lite twice since this started happening, but I can't figure out why it fails. I've tried changes to my image, but it still crashes explorer. Can anyone help me look through the log to find out why? I don't know if it's the image trying to import something already on my computer into the image that is "locked" that causes the restart, but I'd like to get something built instead of using my older images that I then have to immediately install several updates to bring it up to spec. Thanks.

 

[crypticus]

you dont need explorer for ntlite to create an image. you can just create your image and format your device to fix the issues

 

[nuhi]

Deezul, not sure I ever saw this, can you send a screenshot/camera picture of the error and attach a preset causing it?
Thanks.

 

[Deezul]

you dont need explorer for ntlite to create an image. you can just create your image and format your device to fix the issues

So format my computer that I use every day to build an image that restarts Windows Explorer. Seems a little extreme.

 

[Deezul]

Here's the error I received, when trying to save changes to the image:

"Detected file in use within the mount directory. Please retry when the resources have been freed, or cancel and reboot the machine."

I've tried Retry and that doesn't work, and I've done multiple reboots and retried. The only thing I can image it might be is AV scanning the file and holding it in use while it's written, but this was never a problem until about the last month. I see Explorer reset, and then I know NTLite will fail.

 

[Deezul]

So first I get the error that the file is in use, and retry doesn't work. I cancel, and then when I try to unmount, I get an error that the image might be corrupted. Attached the error images as requested.

 

[nuhi]

I'll send you a test version to see if it's related to the fix done in pre-release.
Thanks.

 

[Deezul]

Thanks. Now it fails before I even start the image. It's clear there is a file that is being scanned/locked by some other process, as I was able to successfully build the image on another computer without the same AV installed. Now I get the error as attached when I use the test version. And I'm not sure why it still failed, as I made it a point to disable my AV before attempting the newest build. Is there any way to see what program keeps accessing the file/directory in question? I'm working to exclude the image folder I use from AV scanning so that should eliminate the issue.

 

[nuhi]

OK so the registry access fix is not solving your situation, it's another case for which I have never replicated the issue.
You can try to delete that file in Explorer and it will show which process is holding it. Probably NTLite itself will be shown, let me know anyway.

Which antivirus is that, have you tried uninstalling it to confirm that it's only that?
Another idea might be NTFS permissions if they were tampered with on that drive location.

Thanks.

 

[Deezul]

I've deleted the file just fine - because once I get the error that the file is "in use" I delete it, and then when I try to un-mount, NTlite keeps returning an error that it's corrupt (because the file is missing) and can't be unmounted. At that point I have to delete the registry key that has it mounted to successfully forget the directory.

My AV is Sophos. I tried disabling Sophos active file scans and it still fails at the same point.

 

[nuhi]

Now that you mention Sophos, that reminds me, it could very well be it.
I now installed a trial and processed an image, there was a very long delay on Saving image at 0%, but then unfortunately it continued.
Since I lost browser access (it redirects something?), I had to uninstall it after 2 successful runs.

So, I suggest to try to uninstall that antivirus, make sure after offered reboot there is nothing of it remaining in Task Manager running, as this user reported that his uninstall wasn't complete and it was still there.
For me it cleanly uninstalled, browser functional.

Please attach the %temp%\ntlite.log and preset if it hangs without Sophos.

Thanks, I know this is frustrating, but it could be it's not up to me, as WIM file saving is completely a Windows process - while if NTLite was leaving connections to files everyone would be having the issue.

 

[matthias.schein]

Hello, i also Use Sophos.
You must disable Ransomware-Detection.

 

[Deezul]

I can't remove Sophos, as it's my work laptop and I have to keep it on there. My last test I didn't disable Ransomware-Detection, just real time scanning. I'll give that a try. Thanks.