dumps +crashes while playing with malware on external drive
-
<p><strong>Real PC:</strong></p>
<p>Windows 10 64-bit Version 2004</p>
<p>Build 19041.264</p>
<p>KTS 21.1.10.361</p>
<p>um:breakpoint_avrf_80000003_qscan.kdl.f0fdc2cdf0d1b6a10fda4fdbc3bec9ca_0!unknown</p>
<p>um:application_fault_avrf_edef9f2d_instrumental_services.dll!unknown</p>
<p>um:null_class_ptr_write_avrf_c0000005_ipm_service.dll!ekagetobjectfactory</p>
<p><strong>Reproduction steps:</strong></p>
<p><span></span>i loaded up a couple testmalware files turned programmcontroll an file-av back on scaned the folder with the malware (on my external harddrive).</p>
<p>KTS wanted to run a disinfect scan i chose run scan without reboot.</p>
<p>The disinfect block that blocks starting files was annoying so i turned off my external harddrive where the testmalware is located.</p>
<p>Thats when the dumps and crashes started. </p>
<p><strong>Actual result:</strong></p>
<p><span></span>KTS started to create dumps then crashed after turning off the external harddrive with the malware</p>
<p><strong>Expected Result:</strong></p>
<p><span></span>scan gets canceled due to missing file location.</p> -
<p><strong>Real PC:</strong></p>
<p>Windows 10 64-bit Version 2004</p>
<p>Build 19041.264</p>
<p>KTS 21.1.10.361</p>
<p>um:breakpoint_avrf_80000003_qscan.kdl.f0fdc2cdf0d1b6a10fda4fdbc3bec9ca_0!unknown</p>
<p>um:application_fault_avrf_edef9f2d_instrumental_services.dll!unknown</p>
<p>um:null_class_ptr_write_avrf_c0000005_ipm_service.dll!ekagetobjectfactory</p>
<p><strong>Reproduction steps:</strong></p>
<p><span></span>i loaded up a couple testmalware files turned programmcontroll an file-av back on scaned the folder with the malware (on my external harddrive).</p>
<p>KTS wanted to run a disinfect scan i chose run scan without reboot.</p>
<p>The disinfect block that blocks starting files was annoying so i turned off my external harddrive where the testmalware is located.</p>
<p>Thats when the dumps and crashes started. </p>
<p><strong>Actual result:</strong></p>
<p><span></span>KTS started to create dumps then crashed after turning off the external harddrive with the malware</p>
<p><strong>Expected Result:</strong></p>
<p><span></span>scan gets canceled due to missing file location.</p><p>@helios_07 </p>
<p>Hi! Developers asks for detailed steps of reproduction like^</p>
<p>1) deactivate protection </p>
<p>2) launched files (1, 2, 3) </p>
<p>3) turn on </p>
<p></p>
<p></p>
<p><span style="text-decoration: underline;">and please send all your "couple testmalware files" in archive with password in private messages </span></p> -
<p>@helios_07 </p>
<p>Hi! Developers asks for detailed steps of reproduction like^</p>
<p>1) deactivate protection </p>
<p>2) launched files (1, 2, 3) </p>
<p>3) turn on </p>
<p></p>
<p></p>
<p><span style="text-decoration: underline;">and please send all your "couple testmalware files" in archive with password in private messages </span></p><p>@dmitriy-pisarets</p>
<p>Hi Dmitriy,</p>
<p>i only managed to reproduce the breakpoint dumps.</p>
<p>1.I unpacked the testmalware on my external harddrive</p>
<p>2. i ran a custom scan of the folder with the testmalware</p>
<p>3. while KTS is processing the malware i turned off my external harddrive</p>
<p>4. KTS immediately created the breakpoint dump once the again and crashed.</p>
<p></p>
<p>During that reproduction test i discovered another dump and had a klif caused Bluescreen, both i will report separately. I will keep looking into it, my reproduction was different so it made me curious.</p>