Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Carbon Black Cloud: BSOD's occurring with 3.7.x Windows sensors

Carbon Black Cloud: BSOD's occurring with 3.7.x Windows sensors

Environment

  • Carbon Black Cloud Console: All Versions
  • Carbon Black Cloud Sensor: 3.7.x.x
  • Microsoft Windows: All Versions

Symptoms

  • BSOD crashing occurring either on system startup or randomly afterwards
  • Message may be displayed on Blue Screen noting ctifile.sys failed
    Stop code: SYSTEM SERVICE EXCEPTION
    What failed: ctifile.sys
  • Analysis of dump file notes image name ctifile.sys
    IMAGE_NAME: ctifile.sys
    

Cause

This is issue UAV-2453

Resolution

  • This is fixed in Windows sensor 3.8.0.535 and higher
  • If upgrade is not possible, the only current workarounds are to revert to an earlier 3.6 sensor version or place the sensor in full bypass mode.

Related Content


Was this article helpful? Yes No
100% helpful (1/1)
Article Information
Author:
Creation Date:
‎01-17-2022
Views:
3100
Contributors