#2208 SW prevented the ransomware from running, but did not pop up any prompt boxes and roll back any files.
-
Accepted
Reproduction steps:
Run the attached file (Virus.exe) and wait for about ten minutes. Most of the files are encrypted. At this time, SW found the ransomware and terminated its process, but then no prompt box appeared and no rollback was performed encrypted file.
Because the ransomware encrypted the log file, I was unable to provide the trace. I provided a sample of the ransomware and a reproduced video. The download address is https://c-t.work/s/16e1a04e903741.
Actual result:
The application does not appear any prompt boxes and rollback any files.
Expected Result:
The application displays a prompt box and rolls back the encrypted file.
System Settings
Operating system: Win 10, x64
System: Intel Core i7 4790k, Western Digital 2T black disk
Product: KIS
Product Version: 21.0.39.1388
Language: zh-CN
Product Logs: https://c-t.work/s/16e1a04e903741
