SW prevented the ransomware from running, but did not pop up any prompt boxes and roll back any files.
-
<p><strong>Reproduction steps:</strong></p>
<p><span>Run the attached file (Virus.exe) and wait for about ten minutes. Most of the files are encrypted. At this time, SW found the ransomware and terminated its process, but then no prompt box appeared and no rollback was performed encrypted file.</span></p>
<p><span>Because the ransomware encrypted the log file, I was unable to provide the trace. I provided a sample of the ransomware and a reproduced video. The download address is https://c-t.work/s/16e1a04e903741.</span></p>
<p><strong>Actual result:</strong></p>
<p><span>The application does not appear any prompt boxes and rollback any files.</span></p>
<p><strong>Expected Result:</strong></p>
<p><span>The application displays a prompt box and rolls back the encrypted file.</span></p>
