#2460 dumps +crashes while playing with malware on external drive


  • Fixed

    , last edited by Jarvis

    Real PC:

    Windows 10 64-bit Version 2004

    Build 19041.264

    KTS 21.1.10.361

    um:breakpoint_avrf_80000003_qscan.kdl.f0fdc2cdf0d1b6a10fda4fdbc3bec9ca_0!unknown

    um:application_fault_avrf_edef9f2d_instrumental_services.dll!unknown

    um:null_class_ptr_write_avrf_c0000005_ipm_service.dll!ekagetobjectfactory

    Reproduction steps:

    i loaded up a couple testmalware files turned programmcontroll an file-av back on scaned the folder with the malware (on my external harddrive).

    KTS wanted to run a disinfect scan i chose run scan without reboot.

    The disinfect block that blocks starting files was annoying so i turned off my external harddrive where the testmalware is located.

    Thats when the dumps and crashes started. 

    Actual result:

    KTS started to create dumps then crashed after turning off the external harddrive with the malware

    Expected Result:

    scan gets canceled due to missing file location.

    System Settings

    Operating system: Win 10, x64

    System: Intel Core i7 4770 @ 3.4GHZ, 12,0GB RAM, NVIDIA Geforce GTX 1060 6GB, Harddisk 1TB

    Product: KTS

    Product Version: 21.1.10.361

    Language: de-DE

    Product Logs: https://cloud.qainfo.ru/s/SA0zpkA1w9unhq2

  • @helios_07 

    Hi! Developers asks for detailed steps of reproduction like^

    1) deactivate protection 

    2) launched files (1, 2, 3) 

    3) turn on 

    and please send all your "couple testmalware files" in archive with password in private messages  

  • , last edited by Helios_07

    @dmitriy-pisarets

    Hi Dmitriy,

    i only managed to reproduce the breakpoint dumps.

    1.I unpacked the testmalware on my external harddrive

    2. i ran a custom scan of the folder with the testmalware

    3. while KTS is processing the malware i turned off my external harddrive

    4. KTS immediately created the breakpoint dump once the again and crashed.

    During that reproduction test i discovered another dump and had a klif caused Bluescreen, both i will report separately. I will keep looking into it, my reproduction was different so it made me curious.



Looks like your connection to Beta Testing was lost, please wait while we try to reconnect.