<p>@yunpeng-song said in <a href="/post/6144" target="_blank" rel="noopener">Advanced cleanup technology can cause problems when there is a timed shutdown</a>:</p>
<blockquote>
<p>Please, provide samples, traces and any other valuable logs to ownCloud.</p>
</blockquote>
<p>Report download address: <a href="https://cloud.qainfo.ru/s/oyUWyUzsLsVZoJ4" target="_blank" rel="noopener">https://cloud.qainfo.ru/s/oyUWyUzsLsVZoJ4</a></p>
<p>Trace download address: <a href="https://cloud.qainfo.ru/s/NkE9MlKyAUmX9a2" target="_blank" rel="noopener">https://cloud.qainfo.ru/s/NkE9MlKyAUmX9a2</a></p>
<p>Virus sample download address (extract password: infected): <a href="https://cloud.qainfo.ru/s/sDuBWeNwR8Dw5lI" target="_blank" rel="noopener">https://cloud.qainfo.ru/s/sDuBWeNwR8Dw5lI</a></p>
<p>Recurring process:</p>
<p>First of all, in order to avoid this sample being directly detected by Kaspersky monitoring, you need to suspend Kaspersky protection first, then enter the command "shutdown -r -t 900" in the command line (I set 900 seconds here because the whole process is not More than 900 seconds, in order to save time and save redundant information of trace), after the execution is completed, double-click the virus sample I provided (this virus sample has double verification, you need to enter a test password in the input box above, click to execute, countdown 30 seconds Only malicious behavior will occur, so both real and virtual machines can try), open Kaspersky protection, Kaspersky will detect malware in a while, request to clear and restart the computer, click this button, Kaspersky enters Advanced clear mode, when Kaspersky Advanced is cleared, you will find that Kaspersky will not restart automatically. After the scheduled restart command takes effect, Kaspersky will restart.</p>