RepUx.exe - Bad Image error with third party applications

Products

• Carbon Black Cloud Workload
• Carbon Black Cloud Audit and Remediation (formerly Cb Live Ops)
• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
• Carbon Black Cloud Managed Detection (formerly Cb Threatsight)

Issue/Introduction

• After upgrading to or installing the 3.5 and above sensor version there are reports or RepUx.exe - Bad Image that appear on system boot or toggling the system tray icon.
• Errors are linked to third party applications 

Environment

• Carbon Black Cloud Windows Sensor: 3.5 and above
• Microsoft Windows: All Supported Versions

Cause

When tamper protection detects third party DLLs (ex. other av software) attempting to load into CB processes, this issue may also be observed. To avoid these types of issues, VMware Carbon Black always recommends that you exclude the following here if using another Security or Anti-Virus Utility

Resolution

1. Add the required CBC exclusions to the configurations of coexisting third party security applications.
2. If third party application exclusions do not work or the application does not have an option to add exclusions, please open a case to investigate further disable "Display sensor message in system tray" in the Carbon Black Cloud

Additional Information

A workaround is to uncheck the checkbox for the Sensor UI: Detail message in the policy or policies of devices.