Advice Request Did Shadow Defender failed me?

[WinXPert]

I was testing the Annabelle ransomware in Shadow Mode. Everything went fine until I decided to allow the execution of the malware to see how it attacks. It was blocked by 360TS on execution even though it wasn't detected by static scan. I got a BSOD 0x0F4. So I had to shut down and restart the PC by pressing the power button.

Booting with Shadow Mode off, what greeted me next is "Server execution failed" when I ran Explorer. This doesn't look good.

I did some troubleshooting and found out that my secondary drive is no longer detected. Not sure but I guess the malware trashed the MBR.

Spoiler: Unallocated Disk 1

Why this thing happened? I don't know. I should be protected while in shadow mode.

Spoiler: Some Info

Containment: Shadow Defender v1.4.0.665
Guest/OS: Windows 7 Ultimate 32 bit SP1
Product: 360 TS 9.6.0.1245 (Balanced setting)

Note: I've recovered all files in the HDD after about 10 minutes.

 

[WinXPert]

Spoiler: BSOD

 

[Mahesh Sudula]

I see sometimes virtualization fails in most complicated malwares...thats the reason for this massacre..
and even some AV have a peculiar problem of working inside a VM..(Up and down) with same samples...
Its not Qihoo ..for most of the AV i tested specifically EMSI AVG ...its a common issue
may be a background hardware or a driver conflict....BB some times blocks other times no alert..

Even f secure has this illness...Kaspersky Quickheal G data seem to like to work inside the VM..
Personal opinion though

 

[BoraMurdar]

This happens when unstopable force meet an umovable object. Both disappear or in your case, both fail. Malware failed to infect and SD failed to protect.
Probably some driver call was intercepted badly = infinite tries = BSOD

 

[erreale]

It would be interesting to send the sample and/or reports of your "glitch" to the SD developer to see if he can replicate and then figure out what happened.