Issues with VMware Workstation VMs on Windows Storage Spaces

I recently configured a Windows 10 (1703) PC with Storage Spaces in 2-way mirror mode. The Storage Spaces drive hosted some Hyper-V and VMware Workstation 12.5 virtual machines. While Hyper-V VMs worked fine, VMware Workstation started causing trouble from the beginning.

At first I notices issue with Linux Virtual Machines. They would install and start correctly one or two times, but then refuse to boot. Even restoring a snapshot that was taken while machine was still in bootable state didn't help. Linux Machines would either crash during boot with Kernel Panic, or (in case of Ubuntu) boot into Low Graphics mode and only work in terminal.

The system is running in low-graphics mode
Your screen, graphics card, and input device settings could not be detected correctly. You will need to configure these yourself.

Kaspersky silently deletes "Infected" false-positive .exe files

Browsing through my old development folders I noticed that executables of some applications I developed years ago (using Borland C++Builder) were missing. Luckily I had the same folders in zipped archives. Trying to extract affected .exe files from .zip archives were failing with Access Denied errors. Trying to extract whole folder was resulting in the affected .exe files disappearing.

All this looked like actions of an antivirus software. However, my Kaspersky was showing that everything was fine, computer protected, no alerts, no errors, etc. After manually diving into Kaspersky Quarantine (under More Tools section) I found that my application was silently quarantined as HEUR:Trojan.Win32.Generic.

As this was an application I developed myself, I was pretty sure that it wasn't a Trojan. Just to be completely sure I scanned the affected .exe files on Virustotal and no other mainstream antivirus had any issues with these files. It was pretty obvious that the detection was a false-positive.



Newsletter

Subscribe to receive occasional updates on new posts.
Your email will not be used for any other purpose and you can unsubscribe at any time.
Please wait