CB Defense: TMP Files Left Behind After Closing MS Office Applications

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

 

• After saving and/or closing an MS Office document, randomly named .tmp files may be left behind on the system with the 3.0.x.x Sensor installed
• Normally, these are created when editing an MS Office document and automatically deleted after saving and closing
• The tmp files are stored in the same path as the file that was edited

Environment

• CB Defense PSC Sensor: 3.0.x.x, 3.2.2.x, 3.4.0.1047
• Microsoft Office Applications

Cause

This is a known issue affecting the Cb Defense Sensor 3.0.x.x and MS Office Applications

Resolution

• This is resolved in the 3.1.x, 3.2.1.51, 3.3.x, 3.4.0.1016 and 3.5.x Sensors and Higher please upgrade to resolve the issue
• If the issue is being observed in 3.6+, please see https://community.carbonblack.com/t5/Knowledge-Base/Carbon-Black-Cloud-TMP-Files-Left-Behind-After-Closing-MS-Excel/ta-p/104259

 

Additional Information

Note: A related issue for 3.4.0.1047 can be found here: https://community.carbonblack.com/t5/Knowledge-Base/CB-Defense-Microsoft-Office-Applications-Freeze-or-Crash-with/ta-p/77885