Carbon Black Cloud: Server crash on 3.9.0.2357
search cancel

Carbon Black Cloud: Server crash on 3.9.0.2357

book

Article ID: 285043

calendar_today

Updated On:

Products

Carbon Black Cloud Endpoint Standard (formerly Cb Defense) Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

  • Crash (Blue Screen) on server\s 
  • Fault code shows module as:
AV_ctifile

Environment

  • Carbon Black Cloud Sensor: 3.9.0.2357
  • Microsoft Windows Server

Cause

Investigation into this issue is in progress. This has been designated internally as DSEN-22731

Resolution

  • For 3.9.0.2357 a workaround has been applied globally and should prevent further issues.
  • Resolved in Build 3.9.1.2417+ 

Additional Information

Engineering pushed out the config update from the backend for all orgs week of 1/16/23 before resume the deployment by using some gating mechanism so it only applies to 3.9.0.2357.
Let us know if you do have any BSOD's. Please open a case with Carbon Black support, uploading a memory dump of one of the crashes.