Under Special Situation The Detection Log Will Be Record Twice
-
<p><strong>Reproduction steps:</strong></p>
<p><span></span>1 disable OAS and decompress the sample from the archive</p>
<p><span>2 restart avp to restore protection</span></p>
<p><span>3 right click the sample and try choose KSN reputation, the windows with file detail opened</span></p>
<p><span>4 avp report file deleted TWICE</span></p>
<p><strong>Actual result:</strong></p>
<p><span>avp report file deleted TWICE, and you can find Two identical reports in File Antivirus section.</span></p>
<p><span>Two sets of same 'Object detected' 'Move to QB' 'Object deleted' can be find in report.</span></p>
<p><strong>Expected Result:</strong></p>
<p><span></span>No extra log can be find.</p>
<p></p>
<p>Use the sample I upload, I can always reproduce the problem. Password for the sample: infected</p>
<p>But it only seems to be trigger by mutiple access to the sample. In my reproduction, I left click the sample and than right click it to open KSN reputation--this looks should be considered as twice access to the sample.</p>
<p>If I only left click it or decompress the sample from the archive when OAS is running, the prblem is not likely to be reproduced.</p>
<p></p>
<p>Upload traces, gsi, sample, screenshots.</p>
<p>https://cloud.qainfo.ru/s/Ip0mwnJaGKMO2TM</p> -
<p>@jarvis</p>
<p>highly likely, but patch B just finished testing, and I have only one latptop <img src="../../../plugins/nodebb-plugin-composer-kl/vendor/tinymce/plugins/emoticons/img/smiley-tongue-out.gif" alt="tongue-out" /> If i have time, I'll try again~~~</p>
<p>But I will surely try reproduce all remianing problems in next build of 2020</p>
