SW prevented the ransomware from running, but did not pop up any prompt boxes and roll back any files.
-
Reproduction steps:
Run the attached file (Virus.exe) and wait for about ten minutes. Most of the files are encrypted. At this time, SW found the ransomware and terminated its process, but then no prompt box appeared and no rollback was performed encrypted file.
Because the ransomware encrypted the log file, I was unable to provide the trace. I provided a sample of the ransomware and a reproduced video. The download address is https://c-t.work/s/16e1a04e903741.
Actual result:
The application does not appear any prompt boxes and rollback any files.
Expected Result:
The application displays a prompt box and rolls back the encrypted file.
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login© 2026 АО «Лаборатория Касперского»