#287 Under Special Situation The Detection Log Will Be Record Twice
Rejected, last edited by Jarvis last edited by Jarvis
1 disable OAS and decompress the sample from the archive
2 restart avp to restore protection
3 right click the sample and try choose KSN reputation, the windows with file detail opened
4 avp report file deleted TWICE
avp report file deleted TWICE, and you can find Two identical reports in File Antivirus section.
Two sets of same 'Object detected' 'Move to QB' 'Object deleted' can be find in report.
No extra log can be find.
Use the sample I upload, I can always reproduce the problem. Password for the sample: infected
But it only seems to be trigger by mutiple access to the sample. In my reproduction, I left click the sample and than right click it to open KSN reputation--this looks should be considered as twice access to the sample.
If I only left click it or decompress the sample from the archive when OAS is running, the prblem is not likely to be reproduced.
Upload traces, gsi, sample, screenshots.
Operating system: Win 10, x64
Product Version: 2019 MR0
Product Logs: https://cloud.qainfo.ru/s/Ip0mwnJaGKMO2TM