dumps +crashes while playing with malware on external drive
-
Real PC:
Windows 10 64-bit Version 2004
Build 19041.264
KTS 21.1.10.361
um:breakpoint_avrf_80000003_qscan.kdl.f0fdc2cdf0d1b6a10fda4fdbc3bec9ca_0!unknown
um:application_fault_avrf_edef9f2d_instrumental_services.dll!unknown
um:null_class_ptr_write_avrf_c0000005_ipm_service.dll!ekagetobjectfactory
Reproduction steps:
i loaded up a couple testmalware files turned programmcontroll an file-av back on scaned the folder with the malware (on my external harddrive).
KTS wanted to run a disinfect scan i chose run scan without reboot.
The disinfect block that blocks starting files was annoying so i turned off my external harddrive where the testmalware is located.
Thats when the dumps and crashes started.
Actual result:
KTS started to create dumps then crashed after turning off the external harddrive with the malware
Expected Result:
scan gets canceled due to missing file location.
-
Real PC:
Windows 10 64-bit Version 2004
Build 19041.264
KTS 21.1.10.361
um:breakpoint_avrf_80000003_qscan.kdl.f0fdc2cdf0d1b6a10fda4fdbc3bec9ca_0!unknown
um:application_fault_avrf_edef9f2d_instrumental_services.dll!unknown
um:null_class_ptr_write_avrf_c0000005_ipm_service.dll!ekagetobjectfactory
Reproduction steps:
i loaded up a couple testmalware files turned programmcontroll an file-av back on scaned the folder with the malware (on my external harddrive).
KTS wanted to run a disinfect scan i chose run scan without reboot.
The disinfect block that blocks starting files was annoying so i turned off my external harddrive where the testmalware is located.
Thats when the dumps and crashes started.
Actual result:
KTS started to create dumps then crashed after turning off the external harddrive with the malware
Expected Result:
scan gets canceled due to missing file location.
Hi! Developers asks for detailed steps of reproduction like^
-
deactivate protection
-
launched files (1, 2, 3)
-
turn on
and please send all your "couple testmalware files" in archive with password in private messages
-
-
Hi! Developers asks for detailed steps of reproduction like^
-
deactivate protection
-
launched files (1, 2, 3)
-
turn on
and please send all your "couple testmalware files" in archive with password in private messages
@dmitriy-pisarets
Hi Dmitriy,
i only managed to reproduce the breakpoint dumps.
1.I unpacked the testmalware on my external harddrive
-
i ran a custom scan of the folder with the testmalware
-
while KTS is processing the malware i turned off my external harddrive
-
KTS immediately created the breakpoint dump once the again and crashed.
During that reproduction test i discovered another dump and had a klif caused Bluescreen, both i will report separately. I will keep looking into it, my reproduction was different so it made me curious.
-
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login© 2026 АО «Лаборатория Касперского»