#287 Under Special Situation The Detection Log Will Be Record Twice
-
Rejected
Reproduction steps:
1 disable OAS and decompress the sample from the archive
2 restart avp to restore protection
3 right click the sample and try choose KSN reputation, the windows with file detail opened
4 avp report file deleted TWICE
Actual result:
avp report file deleted TWICE, and you can find Two identical reports in File Antivirus section.
Two sets of same 'Object detected' 'Move to QB' 'Object deleted' can be find in report.
Expected Result:
No extra log can be find.
Use the sample I upload, I can always reproduce the problem. Password for the sample: infected
But it only seems to be trigger by mutiple access to the sample. In my reproduction, I left click the sample and than right click it to open KSN reputation--this looks should be considered as twice access to the sample.
If I only left click it or decompress the sample from the archive when OAS is running, the prblem is not likely to be reproduced.
Upload traces, gsi, sample, screenshots.
https://cloud.qainfo.ru/s/Ip0mwnJaGKMO2TM
System Settings
Operating system: Win 10, x64
System: whatever
Product: KIS
Product Version: 2019 MR0
Language: en-US
Product Logs: https://cloud.qainfo.ru/s/Ip0mwnJaGKMO2TM
-
-
highly likely, but patch B just finished testing, and I have only one latptop
If i have time, I'll try again~~~But I will surely try reproduce all remianing problems in next build of 2020
-
