Carbon Black Cloud: Windows Sensor 3.8.0.535 Causes BSOD on Windows 7 (x64) and Windows Server 2008 R2 (x64)

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

• BSOD occurs post reboot on machines after upgrading to sensor version 3.8.0.535 on Windows 7 and Windows 2008 R2
• BSOD occurs after uninstalling the sensor version 3.8.0.535 and rebooting machine

Environment

• Carbon Black Cloud Console: All Versions
• Carbon Black Cloud Sensor: 3.8.0.535 version
• Microsoft Windows: Windows 7 and Windows server 2008 R2 (x64 versions only)

Cause

The cause of this issue is currently being investigated

Resolution

• Our Engineering team is currently working on this issue and the article will be updated once when we have more information: Here is a User Exchange page to get up to the minute updates:
  • https://community.carbonblack.com/t5/Carbon-Black-Cloud-Discussions/Critical-issue-with-Windows-sensor-3-8-0-535-on-Windows-7-x64
• Please do not attempt to install or upgrade the sensor to 3.8.0.535 on the Windows 7 and Windows 2008 R2 servers
• If already installed, Please do not reboot the machine or attempt to uninstall the sensor until we get more information from the VMware Carbon Black team

Additional Information

• This only affects the x64 versions of both OS listed above
• This does not affect the x86 versions