#2460 dumps +crashes while playing with malware on external drive


  • Fixed

    , last edited by Jarvis

    Real PC:

    Windows 10 64-bit Version 2004

    Build 19041.264

    KTS 21.1.10.361

    um:breakpoint_avrf_80000003_qscan.kdl.f0fdc2cdf0d1b6a10fda4fdbc3bec9ca_0!unknown

    um:application_fault_avrf_edef9f2d_instrumental_services.dll!unknown

    um:null_class_ptr_write_avrf_c0000005_ipm_service.dll!ekagetobjectfactory

    Reproduction steps:

    i loaded up a couple testmalware files turned programmcontroll an file-av back on scaned the folder with the malware (on my external harddrive).

    KTS wanted to run a disinfect scan i chose run scan without reboot.

    The disinfect block that blocks starting files was annoying so i turned off my external harddrive where the testmalware is located.

    Thats when the dumps and crashes started. 

    Actual result:

    KTS started to create dumps then crashed after turning off the external harddrive with the malware

    Expected Result:

    scan gets canceled due to missing file location.

    System Settings

    Operating system: Win 10, x64

    System: Intel Core i7 4770 @ 3.4GHZ, 12,0GB RAM, NVIDIA Geforce GTX 1060 6GB, Harddisk 1TB

    Product: KTS

    Product Version: 21.1.10.361

    Language: de-DE

    Product Logs: https://cloud.qainfo.ru/s/SA0zpkA1w9unhq2

  • , last edited by Helios_07

    @dmitriy-pisarets

    Hi Dmitriy,

    i only managed to reproduce the breakpoint dumps.

    1.I unpacked the testmalware on my external harddrive

    2. i ran a custom scan of the folder with the testmalware

    3. while KTS is processing the malware i turned off my external harddrive

    4. KTS immediately created the breakpoint dump once the again and crashed.

    During that reproduction test i discovered another dump and had a klif caused Bluescreen, both i will report separately. I will keep looking into it, my reproduction was different so it made me curious.

  • @helios_07 

    Hi! Developers asks for detailed steps of reproduction like^

    1) deactivate protection 

    2) launched files (1, 2, 3) 

    3) turn on 

    and please send all your "couple testmalware files" in archive with password in private messages  



Looks like your connection to Beta Testing was lost, please wait while we try to reconnect.