TMP Files Left Behind After Closing MS Office Applications

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

• After saving and/or closing an MS Office document, randomly named .tmp files may be left behind on the system with the 3.0.x.x Sensor installed
• Normally, these are created when editing an MS Office document and automatically deleted after saving and closing
• The tmp files are stored in the same path as the file that was edited

Environment

• Carbon Black Cloud Sensor: 3.0.x.x, 3.2.2.x, 3.4.0.1047
• Microsoft Office Applications

Cause

There was a known issue affecting the Cb Defense Sensor 3.0.x.x and MS Office Applications

Resolution

• This is resolved in the 3.1.x, 3.2.1.51, 3.3.x, 3.4.0.1016 and 3.5.x Sensors and Higher please upgrade to resolve the issue
• If the issue is being observed in 3.9+ please reach out to support if a workaround is needed to avoid this behavior