Carbon Black Cloud: Sensor interop issue with Tally ERP 9

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

• Tally ERP 9 is unable to launch with active CBC Sensor
  • Following error may appear on screen:
    • "File corrupted!. This program has been manipulated and maybe it's infected by a Virus or cracked. This file won't work anymore"
• Placing sensor in full bypass allows Tally to launch

Environment

• Carbon Black Cloud Sensor: All Versions
• Tally Solutions ERP 9

Cause

Interop issue between Carbon Black Cloud Sensor and Tally ERP 9

Resolution

• Implement bypass > Performs any API opperation on endpoint policy for path:
  • **:\Program Files*\Tally\Tally.ERP9\tally.exe