KVRT 2020 testing

Yury.Spravtsev

Hello!

Beta testing of the KVRT 2020 utility is started.

Build 20.0.5.0 is available at https://devbuilds.s.kaspersky-labs.com/kvrt/beta/20.0.5.0/kvrt.exe

Notable changes in KVRT 2020 compared to KVRT 2015:

1) Size of bases has been reduced.

2) Support for Microsoft Device Guard has been added.

3) System investigation log collection has been added similar to TDSSKiller ("Tools => System analyzer").

4) Bugfixes.

5) Only Win7, Win8, Win8.1, Win10 are supported. Windows Server 2008 R2, 2012, 2016, 2019.

Traces enabled! They are located in the C:\KVRT2020_Data folder. Dumps also here. You can delete this folder after testing.

What you should pay attention to when testing::

1) Crashes/freezes while scanning.

2) Crashes/freezes while system analyze the system.

3) Malware detection/cure.

4) Bugs in the interface.

If you find some bugs, please post bug description in this topic.

Helios_07

Hi Yury,

System Analyze Scan and System full scan worked fine on my main system, no problems so far. Might run some more test later.

harlan4096

I also performed different KVRT scans in my system (with KTS2021MR2), working fine here...

I ran a System Scan but in Reports only appeared the time, no even inside, maybe by design...

Helios_07

Dump/crash during KVRT vs Malware.

I installed some malware, ran KVRT -> it wanted a reboot.

After the reboot i started the scan thats when KVRT crashed.

I restarted kvrt and it removed all Malware with a couple scans.

https://cloud.qainfo.ru/s/jRDRHkbMohqVE5c

Yury.Spravtsev

@harlan4096

@harlan4096 said in KVRT 2020 testing:

I ran a System Scan but in Reports only appeared the time, no even inside, maybe by design...

Report folder should open. There should be only one TXT file in the folder.

Yury.Spravtsev

@Helios_07

@helios_07 said in KVRT 2020 testing:

I installed some malware, ran KVRT -> it wanted a reboot.

Please provide MD5 hashes of installed malware.

@helios_07 said in KVRT 2020 testing:

After the reboot i started the scan thats when KVRT crashed.

Malware injected to KVRT and crashed.

Yury.Spravtsev

Build updated!

Build 20.0.4.0 is available at https://devbuilds.s.kaspersky-labs.com/kvrt/beta/20.0.4.0/kvrt.exe

Please note that traces now located in C:\KVRT2020_Data\Traces folder.

Virus_900

Windows 10 Pro Build 19042 EN All update KVRT 20.0.4.0

Description:

Incorrect definition language product.

Reproduction steps:

Download KVRT.
Launched the product.

Actual result:

Language KVRT display to Russian and system to English.

Expected Result:

Language KVRT converge with system.

Trace to all

https://cloud.qainfo.ru/s/j8uUsG5Euiwvvwv

Yury.Spravtsev

@Virus_900

@virus_900 said in KVRT 2020 testing:

Windows 10 Pro Build 19042 EN All update KVRT 20.0.4.0

Description:

Incorrect definition language product.

Reproduction steps:

Download KVRT.

Launched the product.

Actual result:

Language KVRT display to Russian and system to English.

Expected Result:

Language KVRT converge with system.

Please check your system locale. Seems it's "Russia".

Virus_900

@Yury.Spravtsev

@yury-spravtsev said in KVRT 2020 testing:

@virus_900 said in KVRT 2020 testing:

Windows 10 Pro Build 19042 EN All update KVRT 20.0.4.0

Description:

Incorrect definition language product.

Reproduction steps:

Download KVRT.

Launched the product.

Actual result:

Language KVRT display to Russian and system to English.

Expected Result:

Language KVRT converge with system.

Please check your system locale. Seems it's "Russia".

Yes system locale install Russia thank you for help.

Yury.Spravtsev

Release Candidate available!

Build 20.0.5.0 is available at https://devbuilds.s.kaspersky-labs.com/kvrt/beta/20.0.5.0/kvrt.exe

Please note that traces disabled. Use "-trace" parameter for enable traces.