KVRT 2020 testing

Yury.Spravtsev

Hello!

Beta testing of the KVRT 2020 utility is started.

Build 20.0.5.0 is available at https://devbuilds.s.kaspersky-labs.com/kvrt/beta/20.0.5.0/kvrt.exe

Notable changes in KVRT 2020 compared to KVRT 2015:

1) Size of bases has been reduced.

2) Support for Microsoft Device Guard has been added.

3) System investigation log collection has been added similar to TDSSKiller ("Tools => System analyzer").

4) Bugfixes.

5) Only Win7, Win8, Win8.1, Win10 are supported. Windows Server 2008 R2, 2012, 2016, 2019.

Traces enabled! They are located in the C:\KVRT2020_Data folder. Dumps also here. You can delete this folder after testing.

What you should pay attention to when testing::

1) Crashes/freezes while scanning.

2) Crashes/freezes while system analyze the system.

3) Malware detection/cure.

4) Bugs in the interface.

If you find some bugs, please post bug description in this topic.

Yury.Spravtsev

KVRT 2020 was published! Build 20.0.6.0

Documentation https://support.kaspersky.com/kvrt2020

Thank you all for participating!

Yury.Spravtsev

@murat5038

@murat5038 said in KVRT 2020 testing:

https://cloud.qainfo.ru/s/ykCSbld81Iy882B

The working file name appears to be incorrect. The wrong file is running.

https://cloud.qainfo.ru/s/ZODFYHy41OaUlWn

File description appears in task manager who worked as administrator.

https://cloud.qainfo.ru/s/v0sBxL9aqIw6VSg

Running file name does not appear in the marked section.

https://cloud.qainfo.ru/s/hQb3ysNVHAxWHle

Folder image of the incorrectly running file.

It's by design.

@murat5038 said in KVRT 2020 testing:

https://cloud.qainfo.ru/s/91t0OmTUwTadwYt

Although the given beta is up to date, it warns that "update now".

(It probably could be because it's beta.)

Fixed in release.

murat5038

https://cloud.qainfo.ru/s/ykCSbld81Iy882B

The working file name appears to be incorrect. The wrong file is running.

https://cloud.qainfo.ru/s/ZODFYHy41OaUlWn

File description appears in task manager who worked as administrator.

https://cloud.qainfo.ru/s/v0sBxL9aqIw6VSg

Running file name does not appear in the marked section.

https://cloud.qainfo.ru/s/hQb3ysNVHAxWHle

Folder image of the incorrectly running file.

https://cloud.qainfo.ru/s/91t0OmTUwTadwYt

Although the given beta is up to date, it warns that "update now".

(It probably could be because it's beta.)

herbsandhealthy

Windows 10 Pro Build 19042 EN All update KVRT 20.0.4.0

Description:

Incorrect definition language product.

Reproduction steps:

Download KVRT.
Launched the product

Yury.Spravtsev

Release Candidate available!

Build 20.0.5.0 is available at https://devbuilds.s.kaspersky-labs.com/kvrt/beta/20.0.5.0/kvrt.exe

Please note that traces disabled. Use "-trace" parameter for enable traces.

Virus_900

@Yury.Spravtsev

@yury-spravtsev said in KVRT 2020 testing:

@virus_900 said in KVRT 2020 testing:

Windows 10 Pro Build 19042 EN All update KVRT 20.0.4.0

Description:

Incorrect definition language product.

Reproduction steps:

Download KVRT.

Launched the product.

Actual result:

Language KVRT display to Russian and system to English.

Expected Result:

Language KVRT converge with system.

Please check your system locale. Seems it's "Russia".

Yes system locale install Russia thank you for help. :)

Yury.Spravtsev

@Virus_900

@virus_900 said in KVRT 2020 testing:

Windows 10 Pro Build 19042 EN All update KVRT 20.0.4.0

Description:

Incorrect definition language product.

Reproduction steps:

Download KVRT.

Launched the product.

Actual result:

Language KVRT display to Russian and system to English.

Expected Result:

Language KVRT converge with system.

Please check your system locale. Seems it's "Russia".

Virus_900

Windows 10 Pro Build 19042 EN All update KVRT 20.0.4.0

Description:

Incorrect definition language product.

Reproduction steps:

Download KVRT.
Launched the product.

Actual result:

Language KVRT display to Russian and system to English.

Expected Result:

Language KVRT converge with system.

Trace to all

https://cloud.qainfo.ru/s/j8uUsG5Euiwvvwv

Yury.Spravtsev

Build updated!

Build 20.0.4.0 is available at https://devbuilds.s.kaspersky-labs.com/kvrt/beta/20.0.4.0/kvrt.exe

Please note that traces now located in C:\KVRT2020_Data\Traces folder.

Berny

Hi Yuri,

No issues encountered with KVRT 2020

Yury.Spravtsev

@Helios_07

@helios_07 said in KVRT 2020 testing:

I installed some malware, ran KVRT -> it wanted a reboot.

Please provide MD5 hashes of installed malware.

@helios_07 said in KVRT 2020 testing:

After the reboot i started the scan thats when KVRT crashed.

Malware injected to KVRT and crashed.

Yury.Spravtsev

@harlan4096

@harlan4096 said in KVRT 2020 testing:

I ran a System Scan but in Reports only appeared the time, no even inside, maybe by design...

Report folder should open. There should be only one TXT file in the folder.

Berny

KVRT 2020 running perfectly with KSCloud 21.2.16.590 (a) under W10.Can we download the latest KVRT 2020 version to obtain the latest Databases ?https://cloud.qainfo.ru/f/2878094

Helios_07

Dump/crash during KVRT vs Malware.

I installed some malware, ran KVRT -> it wanted a reboot.

After the reboot i started the scan thats when KVRT crashed.

I restarted kvrt and it removed all Malware with a couple scans.

https://cloud.qainfo.ru/s/jRDRHkbMohqVE5c

harlan4096

I also performed different KVRT scans in my system (with KTS2021MR2), working fine here...

I ran a System Scan but in Reports only appeared the time, no even inside, maybe by design...

Helios_07

Hi Yury,

System Analyze Scan and System full scan worked fine on my main system, no problems so far. Might run some more test later.