Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

App Control Agent: Blocking of C2R64.dll and C2R32.dll cause O365 updates to fail

App Control Agent: Blocking of C2R64.dll and C2R32.dll cause O365 updates to fail

Environment

  • App Control Agent: 8.6.0 and below
  • Microsoft Office 365: All Versions

Symptoms

  • Unable to run Office 365 updates
  • App Control Agent blocking C2R64.dll and C2R32.dll files during O365 updates
  • App Control Agent unable to hash O365 binaries
  • Blocked events logged with description "File 'c:\program files\common files\microsoft shared\clicktorun\updates\16.0.12527.21416\c2r64.dll' [  ] was blocked because it was unapproved"

Cause

Parity driver is unable to hash c2r64.dll due to a non-existing path error encountered while resolving the file path.
 

Resolution

This issue was tracked under EP-11546 and related to EP-12850 which was fixed with the release of Agent 8.6.2: Fixed an issue that could block the starting of Office Applications after Office is updated using ClickToRun.

Related Content


Labels (1)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎03-02-2021
Views:
1356
Contributors